Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File:                     3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier:          UFgFmHj8ON430UnJC1tj+l5G9no8acRQO09vf8oez4c=
Subject key identifier:   44:3E:96:60:5F:D8:A4:8D:85:40:2E:BD:E6:2F:E8:C8:AC:04:F1:15
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer:       /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial:       298CBC110E39579FFA364F07B5AE5A547623E549
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number:          016C
Signing time:             Sat 03 Oct 2026 04:20:07 +0000
Manifest this update:     Sat 03 Oct 2026 04:15:07 +0000
Manifest next update:     Sun 04 Oct 2026 07:20:07 +0000
Files and hashes:         1: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
                          2: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
                          3: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: rcgJluk24er5AaTjAi2nenAE/6Z9KBpl+HT6TVdIu5c=)
                          4: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
                          5: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
                          6: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
                          7: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8c:bc:11:0e:39:57:9f:fa:36:4f:07:b5:ae:5a:54:76:23:e5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
        Validity
            Not Before: Oct  3 04:15:07 2026 GMT
            Not After : Oct  4 07:20:07 2026 GMT
        Subject: CN=443E96605FD8A48D85402EBDE62FE8C8AC04F115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:56:3a:7a:93:84:5c:f5:40:ec:51:c5:18:e5:
                    10:ce:9a:f4:ad:88:c9:52:1a:ba:e3:bf:28:c4:ef:
                    ea:46:a1:1e:a1:8c:f3:ed:2f:d2:7c:7b:1c:2f:2a:
                    35:03:bd:66:e4:4d:08:e4:23:2b:60:91:1a:60:26:
                    1c:ed:88:88:7d:f9:cc:3d:03:a5:17:b8:39:af:e7:
                    01:37:c7:0d:85:cb:2a:14:be:38:bc:96:2a:71:6e:
                    44:a1:80:33:e9:3a:96:73:38:9a:e1:be:12:a1:01:
                    f6:6a:c3:f5:14:1c:9b:c2:5c:a7:b3:b4:07:fe:b2:
                    3c:a0:38:f6:e5:31:59:db:99:07:fc:01:9e:56:70:
                    41:44:d6:f8:6f:76:f6:9d:b0:6b:6c:e4:56:ca:23:
                    aa:08:a9:35:40:40:27:ed:31:1a:46:ca:80:23:03:
                    33:cf:aa:d3:fe:ec:14:97:6b:48:58:6c:f0:08:b2:
                    8a:97:0d:4c:bf:c4:b5:1b:52:60:00:7d:aa:b4:0b:
                    af:36:a8:ef:ae:4a:97:b6:c2:28:d0:d3:e6:57:f2:
                    2a:b5:f2:17:c8:d4:59:ea:7e:11:94:ad:ac:4f:ab:
                    de:2f:93:d2:de:73:f0:0b:a4:ff:1a:c2:3e:99:f3:
                    bd:24:e8:4c:70:c4:90:fe:00:67:6f:04:40:04:0a:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3E:96:60:5F:D8:A4:8D:85:40:2E:BD:E6:2F:E8:C8:AC:04:F1:15
            X509v3 Authority Key Identifier:
                keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:27:2a:c0:c3:3e:a2:c7:75:8e:a7:78:40:32:ea:bc:28:
         1e:a0:8f:c3:7f:a3:f0:4a:a7:3a:44:c9:a6:05:75:8d:8c:18:
         11:55:02:24:3c:d1:ad:d3:21:ad:4d:57:8b:60:a7:78:8c:3f:
         b7:a8:4f:d3:83:4e:a0:2d:4a:34:77:26:77:79:77:8e:0d:1c:
         85:66:09:e4:59:bd:4c:78:d2:bf:3d:15:b3:a3:1b:5c:48:72:
         4b:89:c6:85:32:0a:f9:4d:ee:cd:2e:db:d8:37:32:39:55:27:
         94:87:78:d0:84:b3:fe:37:62:0d:23:17:a7:da:4a:77:73:d4:
         86:c7:ff:12:ee:6d:3f:2e:5b:f1:f4:a5:fa:5c:5c:7a:e2:96:
         2e:81:f4:3c:4b:5b:03:26:b8:2a:5e:db:18:f7:16:c3:2e:a9:
         40:69:3d:f8:2c:d0:ac:ac:e0:44:8a:1e:f8:92:32:53:49:82:
         0a:1a:c1:98:3b:d1:7c:8d:a3:57:3e:8d:6e:b0:52:d3:5b:e8:
         6e:b9:12:8b:45:a4:32:71:f6:d0:dd:d0:c2:a2:6f:ea:ed:ef:
         73:52:4b:42:f6:3a:f1:ec:88:12:f2:c3:e0:82:4f:8f:f9:cb:
         4f:95:22:61:35:2e:18:ce:2c:b3:7e:69:82:ad:47:08:88:19:
         71:72:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----