Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          BqD1kih5GmPJWzCQhQCv5GRckKzC6TCre2vsFzlPjRg=
Subject key identifier:   CF:CC:61:90:AF:55:E0:1A:47:2A:0F:4B:E1:CB:E4:6B:F0:2D:4A:D8
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       24367F2267064F83F46E4D6AB0D497B410C14861
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0258
Signing time:             Thu 24 Sep 2026 04:33:17 +0000
Manifest this update:     Thu 24 Sep 2026 04:28:17 +0000
Manifest next update:     Fri 25 Sep 2026 05:38:17 +0000
Files and hashes:         1: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: Y1PCZcs+9Hl0rajcsrufc9z/aJxhV8gN3KKtcnKbxmc=)
                          2: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: Iq8D7j+xsoj7tpHG2Rp1FT0u536kED76xFBqNqODvEw=)
                          3: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=)
                          4: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk=)
                          5: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=)
                          6: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c=)
                          7: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: r9FazbYdcGWr8yxE7Xlc6COzFVG/V8HHiY4oJPUj9e0=)
                          8: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=)
                          9: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=)
                          10: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: npxQcjGd3g1Av2EuNueNPbR1dJJT1bbAnwnD2aeAVBs=)
                          11: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: 3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=)
                          12: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=)
                          13: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: YlgR+wU+M0eLvld2xSh3zDm4tMxr1XJShIukMjED9oE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:36:7f:22:67:06:4f:83:f4:6e:4d:6a:b0:d4:97:b4:10:c1:48:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Sep 24 04:28:17 2026 GMT
            Not After : Sep 25 05:38:17 2026 GMT
        Subject: CN=CFCC6190AF55E01A472A0F4BE1CBE46BF02D4AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:b8:df:ef:1c:68:8d:09:8e:f4:df:41:75:
                    14:ec:71:7a:53:7f:f8:12:a5:27:e0:94:28:98:ac:
                    61:7c:05:d6:f9:02:4c:1c:65:12:ea:b4:0e:1e:eb:
                    cd:ae:0e:43:aa:56:f1:f6:56:a1:54:4d:db:6a:f6:
                    98:33:3a:28:ea:a0:9d:d3:e9:94:b3:5b:a1:a9:08:
                    31:a0:0d:0f:58:28:95:38:bb:2b:26:83:7e:a3:70:
                    bb:8d:a5:58:97:fd:f4:7e:04:1f:02:6f:b4:6f:50:
                    17:4d:bf:45:d6:b8:bc:8b:e0:44:f2:c5:34:97:2a:
                    a1:eb:34:fb:c1:4b:9c:ef:c0:50:3c:66:f7:e3:49:
                    31:c3:df:ff:29:ef:a5:52:69:83:85:f4:65:ed:48:
                    fa:7c:ca:b1:00:3e:cf:ce:79:ef:89:54:83:64:01:
                    09:81:a4:ad:57:4c:72:8a:8e:ae:ea:d3:ed:87:28:
                    b7:af:5e:44:dd:70:7b:2f:df:d3:94:cc:29:24:14:
                    65:2b:ac:30:6a:ed:55:96:d8:55:99:43:e1:66:8f:
                    8b:9c:c0:bc:a4:be:e8:fc:66:04:2c:86:e0:c1:22:
                    a6:bc:e2:47:5c:ff:4b:4e:25:97:67:60:82:d7:27:
                    66:19:80:09:5e:9c:bc:b6:23:12:5d:66:4d:cf:f7:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:61:90:AF:55:E0:1A:47:2A:0F:4B:E1:CB:E4:6B:F0:2D:4A:D8
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:45:98:dd:d1:17:a8:74:92:4c:46:8e:08:56:dd:20:38:
         df:2d:d4:e2:d7:2e:34:91:23:4c:57:7e:6b:55:ca:7f:3b:50:
         f0:0a:ff:f9:2a:a6:7a:7e:b6:8d:33:f9:3e:b3:07:e2:33:ed:
         d7:78:42:90:82:3f:0a:88:ea:0f:28:a4:d8:76:c4:cf:dd:67:
         e8:e7:2b:86:5c:e0:58:07:a1:67:80:bd:6b:9f:99:0a:1e:67:
         1b:75:8c:46:0e:9b:8a:69:9b:f9:4c:50:15:5d:49:6d:af:9e:
         3b:1b:e1:68:d1:f3:66:ff:c8:7b:b7:34:6a:65:e0:e1:9f:44:
         af:80:5d:f3:40:52:3e:b8:ce:63:e4:4f:90:66:1a:31:cd:4b:
         13:52:f1:31:5f:9d:0c:25:d3:b0:f0:9e:70:d4:ab:9f:3a:ad:
         49:49:59:89:55:74:0d:5c:d9:16:d6:b2:1c:d5:35:e4:e4:95:
         e4:1e:0b:11:08:09:d4:68:1a:29:fc:4d:a9:96:e5:4c:95:a8:
         b0:ec:30:81:e6:95:35:55:63:58:06:97:fd:37:bd:d0:ec:3b:
         2f:c1:3c:30:a5:bc:f0:80:f6:74:f3:ed:8d:b1:40:25:d4:25:
         11:41:3d:7d:1f:44:2d:fa:57:20:5c:43:4a:44:3b:cd:f2:2e:
         bf:72:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:42 2026 by rpki-client