Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
File:                     D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft (raw, json)
Hash identifier:          b+2knWoaku/mh4QaiqT5Svv7EcwDQqyyf0Vqu3nkpFQ=
Subject key identifier:   F4:7B:60:55:A6:64:96:67:83:30:82:A3:AF:92:96:5D:BA:B5:B6:D8
Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Certificate issuer:       /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Certificate serial:       59758339FF708EAB9B82A46AF3A77A6C369975C6
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
Manifest number:          81
Signing time:             Wed 08 Oct 2025 08:30:08 +0000
Manifest this update:     Wed 08 Oct 2025 08:25:08 +0000
Manifest next update:     Thu 09 Oct 2025 10:57:08 +0000
Files and hashes:         1: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: SuaWG0h25mSOkF6TUnfvTVFuLybBa5x6nHfCETqFdvg=)
                          2: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: CWOxtutFW8hhUOi9VObNEvn/pGQ0cmbzWj3A/jlfZ7k=)
                          3: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: EPhN/IdQdctHEgcI5mRqnnjYfzJlSrsw3WqDekvn86Y=)
                          4: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U=)
                          5: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: 4lliDoKad0QWiI8QFd6IuWpcnQIUMJu5VW5vCep/nzY=)
                          6: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl (hash: t8xhyl3isya3ON5oa4rtg8hP36WIoKihTrSvDOVli+M=)
                          7: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw=)
                          8: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: Akh6Hk6S0OH2Z77HSUXUpo9sndUP6ZpVYbaZ0C+pMkU=)
                          9: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 10:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:75:83:39:ff:70:8e:ab:9b:82:a4:6a:f3:a7:7a:6c:36:99:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
        Validity
            Not Before: Oct  8 08:25:08 2025 GMT
            Not After : Oct  9 10:57:08 2025 GMT
        Subject: CN=F47B6055A6649667833082A3AF92965DBAB5B6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:70:24:67:ba:0b:08:19:1d:27:ec:9b:11:
                    97:09:0c:e6:6e:72:e5:ac:41:16:bd:c1:87:ec:4c:
                    5a:fc:af:2f:a6:58:5d:2a:2c:23:61:01:f9:9e:29:
                    5c:6b:3c:f6:64:ff:65:6e:29:85:09:fa:f9:1d:b1:
                    48:27:ac:2b:12:b9:3f:24:a7:8b:58:bf:1f:6d:2e:
                    2b:70:e0:b5:98:5e:07:a7:de:ab:a5:2b:1a:59:bf:
                    2e:cc:55:2c:7f:e9:3d:5c:77:a3:1b:fe:2b:83:38:
                    9e:32:28:fb:ae:aa:15:bb:40:49:7d:0e:a6:08:bd:
                    91:d6:b6:8b:be:14:94:df:23:81:53:e1:44:ad:af:
                    c9:42:8d:6f:97:b8:fe:a2:24:da:7c:cd:8b:f4:45:
                    e0:cb:36:15:e4:8c:cc:9c:b4:46:ee:84:79:14:c1:
                    9d:db:4d:23:6b:e0:4e:cd:a0:a3:67:cc:9f:47:2c:
                    8a:cd:cb:65:ee:32:45:31:68:ae:be:0a:11:ff:9c:
                    4a:d0:44:a1:33:86:f7:4a:ed:82:ed:5b:15:5d:eb:
                    ef:03:cc:2b:7f:f0:3b:17:e7:ee:ab:1f:2e:a7:35:
                    09:15:39:23:8c:b4:99:67:8a:e4:59:32:f4:ae:b5:
                    51:c9:33:a4:2e:49:56:7b:b4:6c:32:b9:e7:7b:55:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7B:60:55:A6:64:96:67:83:30:82:A3:AF:92:96:5D:BA:B5:B6:D8
            X509v3 Authority Key Identifier:
                keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:af:ac:bd:c1:be:58:d9:24:80:d5:7f:2a:4b:3e:05:81:
         cf:a5:de:e0:37:18:3d:14:66:b1:c3:23:69:b9:8a:12:7e:0e:
         ae:16:a0:8f:7e:83:8b:92:a0:99:52:87:f4:9a:00:9b:e4:73:
         e9:f8:6f:69:8d:2a:1a:e6:33:9b:4d:7b:59:eb:70:d5:e2:de:
         c5:5d:0c:5c:10:99:bb:91:c3:c3:d5:bd:a1:d8:1f:3d:88:7b:
         45:13:57:fe:50:8a:09:5b:e8:52:e2:16:71:1e:04:14:af:42:
         39:44:81:e3:5a:23:6b:d2:59:90:25:c6:9d:61:a1:73:28:77:
         22:e6:7f:87:58:bf:95:70:36:fd:93:f3:05:b0:fa:28:4a:bd:
         b6:7c:6d:f2:71:15:b5:41:1b:29:99:02:2b:eb:08:4f:8d:20:
         78:b6:2d:d2:ce:ec:4a:ce:3f:61:f5:c0:1e:58:a2:f5:10:bb:
         f6:cf:62:ed:78:63:a6:ff:7a:08:89:4c:e2:1a:0b:0d:f8:c8:
         fe:21:be:f5:2c:74:4a:aa:fa:24:12:7b:54:d1:7e:32:8e:8a:
         24:23:0a:83:a8:01:b5:d4:3c:74:8f:28:16:5b:e5:37:15:a0:
         53:72:d0:3a:c7:5e:85:bb:9b:9c:10:a2:81:9c:81:ba:1f:ea:
         c4:a0:db:50
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUWXWDOf9wjqubgqRq86d6bDaZdcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF
OEJCQjgwMTAeFw0yNTEwMDgwODI1MDhaFw0yNTEwMDkxMDU3MDhaMDMxMTAvBgNV
BAMTKEY0N0I2MDU1QTY2NDk2Njc4MzMwODJBM0FGOTI5NjVEQkFCNUI2RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhHAkZ7oLCBkdJ+ybEZcJDOZu
cuWsQRa9wYfsTFr8ry+mWF0qLCNhAfmeKVxrPPZk/2VuKYUJ+vkdsUgnrCsSuT8k
p4tYvx9tLitw4LWYXgen3qulKxpZvy7MVSx/6T1cd6Mb/iuDOJ4yKPuuqhW7QEl9
DqYIvZHWtou+FJTfI4FT4UStr8lCjW+XuP6iJNp8zYv0ReDLNhXkjMyctEbuhHkU
wZ3bTSNr4E7NoKNnzJ9HLIrNy2XuMkUxaK6+ChH/nErQRKEzhvdK7YLtWxVd6+8D
zCt/8DsX5+6rHy6nNQkVOSOMtJlniuRZMvSutVHJM6QuSVZ7tGwyued7VTxDAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU9HtgVaZklmeDMIKjr5KWXbq1ttgwHwYDVR0j
BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3
RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUy
LzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFpyr6y9wb5Y2SSA1X8qSz4Fgc+l3uA3GD0UZrHDI2m5ihJ+Dq4WoI9+
g4uSoJlSh/SaAJvkc+n4b2mNKhrmM5tNe1nrcNXi3sVdDFwQmbuRw8PVvaHYHz2I
e0UTV/5Qiglb6FLiFnEeBBSvQjlEgeNaI2vSWZAlxp1hoXModyLmf4dYv5VwNv2T
8wWw+ihKvbZ8bfJxFbVBGymZAivrCE+NIHi2LdLO7ErOP2H1wB5YovUQu/bPYu14
Y6b/egiJTOIaCw34yP4hvvUsdEqq+iQSe1TRfjKOiiQjCoOoAbXUPHSPKBZb5TcV
oFNy0DrHXoW7m5wQooGcgbof6sSg21A=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:12 2025 by rpki-client