Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File:                     4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier:          /OpU5/TWeed7GanZTAHEjdWsXPIhLzuo8/yFX2p0iZ4=
Subject key identifier:   D3:3B:60:29:A4:5A:2A:BD:BC:80:A5:F9:DF:1B:7A:FE:DA:F2:5D:42
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer:       /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial:       112A25FDDB5437510FE048148D24449C5AFE622D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number:          0267
Signing time:             Tue 06 Oct 2026 14:21:39 +0000
Manifest this update:     Tue 06 Oct 2026 14:16:39 +0000
Manifest next update:     Wed 07 Oct 2026 15:14:39 +0000
Files and hashes:         1: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=)
                          2: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: drG5/1zxKoxhLb+VmStJjNu4qYyTHGEiSvPpWqsnA84=)
                          3: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=)
                          4: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=)
                          5: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=)
                          6: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=)
                          7: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=)
                          8: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=)
                          9: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=)
                          10: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=)
                          11: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=)
                          12: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=)
                          13: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2a:25:fd:db:54:37:51:0f:e0:48:14:8d:24:44:9c:5a:fe:62:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
        Validity
            Not Before: Oct  6 14:16:39 2026 GMT
            Not After : Oct  7 15:14:39 2026 GMT
        Subject: CN=D33B6029A45A2ABDBC80A5F9DF1B7AFEDAF25D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:96:fe:37:19:00:89:45:10:a8:e3:61:ca:
                    57:ed:be:b0:d3:56:8e:60:aa:12:a0:2e:b9:1b:c2:
                    27:37:23:ef:1a:7b:33:8a:db:a5:05:8b:23:78:7b:
                    e1:2c:cc:35:d1:3f:bb:c1:24:79:ac:6b:90:06:aa:
                    29:fb:f8:43:3d:c5:a7:50:a5:c9:73:f7:53:98:f3:
                    e2:6c:a9:3f:f3:fb:8a:1a:5a:15:25:1d:56:cc:c5:
                    5f:41:df:9e:8a:8b:82:7f:bb:f2:95:98:f4:3b:f1:
                    89:bf:f0:b3:a4:5b:e4:28:52:2f:b4:05:82:54:46:
                    49:a9:85:b9:ff:74:2c:4e:79:e6:37:c7:ca:1b:16:
                    29:65:89:70:c6:31:86:2f:bc:bd:a4:01:5e:0d:d8:
                    3c:19:28:b8:61:e9:7f:88:99:07:a4:b4:81:1c:c8:
                    54:c2:88:55:49:2a:e8:3e:ee:21:33:18:2e:82:53:
                    89:a5:c5:27:63:0a:21:da:cb:5d:9c:97:e1:c9:c0:
                    aa:11:c5:a5:77:73:bc:5e:f8:04:d7:e3:0e:4d:f8:
                    55:8c:0d:a1:94:91:ba:ec:0c:ca:49:0c:ed:d8:83:
                    9c:71:71:d6:17:90:8b:95:21:f8:26:64:df:82:6e:
                    81:9e:74:5e:32:14:cf:a4:33:d9:8c:56:e4:27:98:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:60:29:A4:5A:2A:BD:BC:80:A5:F9:DF:1B:7A:FE:DA:F2:5D:42
            X509v3 Authority Key Identifier:
                keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:f9:4c:8a:2d:33:8f:81:43:2f:96:a2:92:73:af:3a:7a:
         11:4a:31:3c:60:37:67:12:00:0f:72:1f:91:cc:96:4d:c3:09:
         a6:20:d8:b6:75:73:45:3e:fa:b9:a9:67:ee:a6:9e:9c:ce:24:
         34:7b:ce:ae:9c:84:18:44:52:74:36:c6:fd:fb:80:16:be:e3:
         27:5b:ec:c1:9c:b4:f6:81:23:3f:7c:fe:0d:bd:71:60:c0:20:
         92:53:6b:d2:ff:0e:de:8d:c7:fd:f8:56:9b:24:33:91:34:68:
         92:51:86:6b:f1:21:b6:b5:a6:fc:b1:a9:01:43:a2:9d:7e:19:
         18:75:7f:e1:64:1f:d3:98:10:3c:83:cd:30:38:88:04:22:a8:
         94:a1:85:21:8e:43:45:d2:f6:83:c9:a1:c0:37:59:2f:cd:2a:
         4e:1e:e9:15:6e:6b:e0:d5:2e:81:f2:20:94:7d:87:f1:8c:02:
         f7:43:9f:d9:19:5d:da:51:f8:a0:93:71:fd:83:a8:f1:73:b4:
         d3:14:53:e5:9f:ed:9e:88:ef:90:29:ae:73:32:8b:aa:38:7f:
         e5:25:07:4e:87:47:11:ba:56:f0:90:07:d8:a5:3a:e6:58:3d:
         82:00:17:7e:9d:9a:d9:ea:5f:80:52:bc:c2:e6:9d:6a:cc:d6:
         dc:5d:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:48:01 2026 by rpki-client