Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File:                     3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier:          fqC3U7M8EDlIARQUBLa7on2rIEBcO39HIa8zilPx8ZI=
Subject key identifier:   D8:99:EB:7F:29:73:1D:C2:4F:D5:55:8C:F2:31:7D:24:7A:4A:26:48
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer:       /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial:       03D810082E9EF1E4BBD51C4CDC696F337EB5B25D
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number:          D3
Signing time:             Sun 31 May 2026 02:26:49 +0000
Manifest this update:     Sun 31 May 2026 02:21:49 +0000
Manifest next update:     Mon 01 Jun 2026 02:54:49 +0000
Files and hashes:         1: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
                          2: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
                          3: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
                          4: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
                          5: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
                          6: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: SAgDVZbXhRuqlmsEXvf5PbnNDE8va5QG7Tjm4dbTBbA=)
                          7: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 02:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:10:08:2e:9e:f1:e4:bb:d5:1c:4c:dc:69:6f:33:7e:b5:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
        Validity
            Not Before: May 31 02:21:49 2026 GMT
            Not After : Jun  1 02:54:49 2026 GMT
        Subject: CN=D899EB7F29731DC24FD5558CF2317D247A4A2648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:bb:bd:e3:64:93:c8:7a:93:c1:1b:6b:06:
                    04:b6:eb:c5:fb:39:65:c2:f8:39:3f:fc:41:7c:fb:
                    72:63:29:4e:f0:6d:5a:cb:a1:8e:12:d4:90:93:fc:
                    6c:5e:eb:28:31:80:68:37:81:c5:df:6a:67:62:92:
                    29:91:66:a1:4a:7a:69:0b:74:5e:03:23:14:72:e1:
                    4c:79:af:de:a6:10:25:cc:5a:2a:69:52:c5:dc:97:
                    72:dc:21:cc:77:b4:6c:3f:85:90:4b:64:be:32:ec:
                    a7:40:50:e1:90:25:a8:6e:fb:6c:03:15:21:41:ea:
                    8d:53:6b:87:66:3e:7e:8d:d8:51:7e:db:de:96:3f:
                    a5:7b:e7:4a:bb:94:be:9c:12:47:1c:27:b2:6d:1f:
                    3c:08:2f:95:de:8a:d4:74:f5:39:1f:5f:16:e3:0d:
                    40:82:97:4c:93:fd:ce:9b:ff:39:0d:c4:3d:e4:05:
                    0b:32:44:7c:66:6b:a4:87:33:8b:25:a3:b3:b1:57:
                    c8:0f:dd:7e:dd:b4:0a:67:69:99:d5:56:89:87:b4:
                    e0:d2:43:9c:2e:7e:db:e2:60:df:f0:05:f7:1d:82:
                    4e:f2:16:1f:dd:8c:13:9e:90:d2:6e:ca:3f:20:18:
                    47:30:09:70:3f:48:51:a5:09:b4:c3:f4:5c:d1:7a:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:EB:7F:29:73:1D:C2:4F:D5:55:8C:F2:31:7D:24:7A:4A:26:48
            X509v3 Authority Key Identifier:
                keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:89:13:ab:25:19:ac:e1:fa:38:d3:b1:53:ed:01:09:c4:74:
         e4:1d:05:6a:61:f2:90:8a:b4:a3:53:f4:66:77:51:00:1e:7d:
         e9:c8:3b:7c:3a:5b:78:f4:7c:ad:60:68:a2:6a:7f:8e:f8:92:
         0f:c9:55:d1:61:40:a5:60:4b:a5:20:df:15:de:b6:8d:85:76:
         cc:93:b3:c5:c8:1e:42:01:e3:76:01:c6:f4:fb:ef:3b:0d:4a:
         0e:bb:17:ef:42:df:99:a4:b1:ce:ae:53:14:2f:09:4c:e4:68:
         8d:de:35:68:20:d1:8f:5f:20:0a:69:d8:56:7a:e7:6d:cb:05:
         22:c7:96:47:a7:b4:3d:a4:3a:7c:d5:0d:15:a1:e1:84:d2:9e:
         0d:1b:d4:60:d2:a7:19:0a:7f:43:b9:11:e7:2d:38:3d:ae:69:
         a1:6a:73:5d:93:b6:38:45:75:71:9e:92:76:be:d9:72:94:51:
         37:90:ff:6b:82:83:be:a2:94:fd:f8:92:95:fd:a2:f1:24:d0:
         a0:59:bf:63:a8:b3:71:32:91:57:bb:42:ca:be:32:98:31:8b:
         ae:2f:c0:a4:44:e5:52:50:28:7f:8e:ad:62:25:f9:24:db:b9:
         f1:08:12:43:b5:f6:59:1f:ed:27:58:00:0e:6f:e5:fb:1c:a7:
         fe:47:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:47:22 2026 by rpki-client