Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          zAy85Wi7XS0++5Ft8koNMKWX6xaS/IGfga/bRcJyFks=
Subject key identifier:   E3:3B:0B:35:E8:0D:64:87:62:8F:B2:98:4F:7F:A8:7A:85:88:67:B6
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       6F936DD203C855F59FCE07E20331F5517061672F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          41
Signing time:             Wed 20 Aug 2025 20:49:28 +0000
Manifest this update:     Wed 20 Aug 2025 20:44:28 +0000
Manifest next update:     Thu 21 Aug 2025 21:38:28 +0000
Files and hashes:         1: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
                          2: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          3: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
                          4: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
                          5: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          6: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          7: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          8: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          9: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          10: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
                          11: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          12: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
                          13: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          14: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          15: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          16: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          17: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: 5zEKjk2EbdAXgdS0N6hFsFF4OS1GJn9cflw9jt5Jbk0=)
                          18: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
                          19: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          20: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          21: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          22: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          23: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          24: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          25: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          26: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:93:6d:d2:03:c8:55:f5:9f:ce:07:e2:03:31:f5:51:70:61:67:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Aug 20 20:44:28 2025 GMT
            Not After : Aug 21 21:38:28 2025 GMT
        Subject: CN=E33B0B35E80D6487628FB2984F7FA87A858867B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:10:b9:33:a0:92:48:1b:c5:9f:90:f1:71:
                    86:f5:46:cb:42:7b:d6:30:e3:03:b2:bd:8a:c1:a2:
                    03:1e:83:13:86:46:f2:61:bf:c7:6d:3f:69:ef:cc:
                    3b:a6:81:0f:50:23:f7:c6:09:00:ba:6d:69:87:a9:
                    7d:82:98:3c:e4:9f:c0:5c:85:ef:8b:3e:a6:63:d0:
                    12:d2:96:1a:78:84:fa:b8:ae:fd:bf:83:29:1f:d9:
                    52:b5:e1:a1:6a:82:e9:7c:d6:d6:49:2d:96:12:f2:
                    69:7b:26:23:0d:39:f0:cb:34:ae:47:17:a2:08:3a:
                    05:fe:29:28:20:d0:9c:8b:d8:03:cd:97:ae:9e:66:
                    ce:eb:bd:03:8f:64:a5:9d:d6:b9:b9:f8:2f:2c:d7:
                    ad:91:54:fd:cd:e0:66:1c:85:ad:87:92:50:a3:43:
                    32:2a:70:5d:b0:c1:f5:9d:d3:b0:8e:35:f6:9d:b6:
                    a5:32:d2:fd:ae:a9:54:a0:ce:0d:1c:ba:0d:32:ae:
                    82:75:e7:c7:9f:a4:58:1c:2b:bd:17:ed:3d:04:00:
                    3e:b1:93:96:de:60:08:93:14:bb:8d:dd:cd:02:bb:
                    75:06:e2:e3:45:d9:2e:64:b3:e6:21:2f:3e:9f:db:
                    49:a3:10:00:84:20:00:93:1f:90:c0:f8:b3:5f:18:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3B:0B:35:E8:0D:64:87:62:8F:B2:98:4F:7F:A8:7A:85:88:67:B6
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:7d:32:67:3a:8c:e1:2c:42:fa:a5:e6:db:ca:fe:2e:ba:
         09:be:48:c8:1a:fa:8e:bb:fa:4e:0e:6d:9e:34:f8:08:90:c4:
         8c:1c:f1:92:24:7e:a2:2b:88:09:de:ae:ef:16:0f:89:e3:34:
         f5:76:63:54:69:0a:6a:42:07:14:ba:4b:d7:95:43:b6:68:ad:
         98:8f:07:e6:d8:e6:68:d4:66:1e:05:f6:c4:81:c6:45:24:f0:
         c8:7a:03:0f:ab:6c:43:51:34:db:43:16:68:45:c5:a8:73:33:
         d0:78:ec:6d:4f:4c:27:6e:6b:cc:e8:e6:af:75:84:3d:6f:1f:
         be:f9:76:d6:3a:1d:15:1f:d4:61:1c:bc:80:c0:ee:28:d4:2e:
         f5:ef:9e:67:ca:9c:54:d5:00:a8:10:10:6a:c4:27:7c:4f:26:
         1a:2b:9c:a5:e3:9a:65:02:bc:54:0c:8a:86:97:2b:18:6b:37:
         89:84:5e:b3:ea:92:ad:a2:10:f1:cd:1c:f9:80:07:84:f3:a4:
         3a:0f:d4:e3:a0:a0:85:73:7f:e7:8e:78:d5:02:0d:44:c9:6b:
         b7:ff:93:35:ca:ff:db:4a:05:65:c9:67:b8:d0:7c:71:a0:b6:
         fa:55:de:c6:1f:bb:67:ba:bc:36:35:70:52:d4:3a:41:b7:4d:
         60:01:fa:00
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUb5Nt0gPIVfWfzgfiAzH1UXBhZy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD
OEZCQzlDMzAeFw0yNTA4MjAyMDQ0MjhaFw0yNTA4MjEyMTM4MjhaMDMxMTAvBgNV
BAMTKEUzM0IwQjM1RTgwRDY0ODc2MjhGQjI5ODRGN0ZBODdBODU4ODY3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyhC5M6CSSBvFn5DxcYb1RstC
e9Yw4wOyvYrBogMegxOGRvJhv8dtP2nvzDumgQ9QI/fGCQC6bWmHqX2CmDzkn8Bc
he+LPqZj0BLSlhp4hPq4rv2/gykf2VK14aFqgul81tZJLZYS8ml7JiMNOfDLNK5H
F6IIOgX+KSgg0JyL2APNl66eZs7rvQOPZKWd1rm5+C8s162RVP3N4GYcha2HklCj
QzIqcF2wwfWd07CONfadtqUy0v2uqVSgzg0cug0yroJ158efpFgcK70X7T0EAD6x
k5beYAiTFLuN3c0Cu3UG4uNF2S5ks+YhLz6f20mjEACEIACTH5DA+LNfGOxDAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU4zsLNegNZIdij7KYT3+oeoWIZ7YwHwYDVR0j
BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG
M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZlMTI5
LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF5JfTJnOozhLEL6pebbyv4uugm+SMga+o67+k4ObZ40+AiQxIwc8ZIk
fqIriAneru8WD4njNPV2Y1RpCmpCBxS6S9eVQ7ZorZiPB+bY5mjUZh4F9sSBxkUk
8Mh6Aw+rbENRNNtDFmhFxahzM9B47G1PTCdua8zo5q91hD1vH775dtY6HRUf1GEc
vIDA7ijULvXvnmfKnFTVAKgQEGrEJ3xPJhornKXjmmUCvFQMioaXKxhrN4mEXrPq
kq2iEPHNHPmAB4TzpDoP1OOgoIVzf+eOeNUCDUTJa7f/kzXK/9tKBWXJZ7jQfHGg
tvpV3sYfu2e6vDY1cFLUOkG3TWAB+gA=
-----END CERTIFICATE-----
Generated at Wed Aug 20 23:07:49 2025 by rpki-client