Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          HYi0z1kfks4afQtam4H6iI7I8a6s8bI2h9avkxv1KRE=
Subject key identifier:   2B:53:2D:82:C4:4E:BF:19:84:53:33:86:FE:37:DA:DD:D0:F1:73:D0
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       17BCB62948DB79AEB41CEC910C772677C4E9CAA6
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0219
Signing time:             Fri 07 Aug 2026 23:51:05 +0000
Manifest this update:     Fri 07 Aug 2026 23:46:05 +0000
Manifest next update:     Sun 09 Aug 2026 00:13:05 +0000
Files and hashes:         1: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: Y1PCZcs+9Hl0rajcsrufc9z/aJxhV8gN3KKtcnKbxmc=)
                          2: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: 3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=)
                          3: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: YlgR+wU+M0eLvld2xSh3zDm4tMxr1XJShIukMjED9oE=)
                          4: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: Iq8D7j+xsoj7tpHG2Rp1FT0u536kED76xFBqNqODvEw=)
                          5: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=)
                          6: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=)
                          7: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c=)
                          8: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: r9FazbYdcGWr8yxE7Xlc6COzFVG/V8HHiY4oJPUj9e0=)
                          9: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: kdaOBQe5Vm4BAeY/Q0H7oUahGcWQtyQdK6QhMULlSzQ=)
                          10: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk=)
                          11: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=)
                          12: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=)
                          13: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Aug 2026 00:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:b6:29:48:db:79:ae:b4:1c:ec:91:0c:77:26:77:c4:e9:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Aug  7 23:46:05 2026 GMT
            Not After : Aug  9 00:13:05 2026 GMT
        Subject: CN=2B532D82C44EBF1984533386FE37DADDD0F173D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:49:b5:5c:7a:fc:81:8d:79:84:4c:81:a9:
                    fa:69:42:4e:e5:1b:d1:7d:20:46:5b:87:6b:3e:69:
                    90:fd:af:be:8e:ac:b7:e1:57:d4:e4:73:b0:78:c6:
                    aa:af:f5:0e:20:32:20:28:1e:3b:c4:1c:52:ce:1f:
                    f0:97:c7:89:ee:52:a7:43:4e:6a:4e:7c:3c:46:4a:
                    35:b6:5d:53:db:a4:de:bd:14:d0:65:12:13:99:47:
                    07:93:04:f6:05:72:ee:d7:39:84:0e:31:86:fa:03:
                    0f:d7:f3:15:4b:23:dc:f8:26:3e:c3:2e:74:ce:c0:
                    87:09:8c:91:23:64:ca:cc:a7:63:dd:8d:91:d4:d2:
                    39:6f:b1:fa:e4:e4:6b:99:3d:c2:cf:c8:df:9f:9b:
                    30:3a:7b:46:75:ab:ef:94:4f:15:07:18:78:c5:a4:
                    74:aa:bf:d2:8e:0f:4e:6e:34:22:34:22:cd:80:d6:
                    0b:34:28:f6:31:77:c7:eb:dd:d3:6a:26:3c:70:57:
                    ca:b9:a8:46:eb:a5:48:b0:0e:ad:d7:a0:c6:80:f9:
                    35:f3:e5:16:d9:99:69:fb:d3:19:56:23:4a:c4:9a:
                    92:6f:90:e1:63:67:82:85:ff:9f:c2:ec:9a:e8:07:
                    34:b1:77:3c:4e:71:2e:94:97:92:a1:a5:4e:bd:77:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:2D:82:C4:4E:BF:19:84:53:33:86:FE:37:DA:DD:D0:F1:73:D0
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:6e:73:06:e7:fe:22:14:7b:81:61:2e:7b:59:83:5c:fe:
         36:88:31:ea:d2:4c:92:fe:cf:07:cb:8c:69:5f:41:74:24:07:
         54:4f:dd:a6:cf:1f:3f:aa:f0:a9:c3:2e:06:f6:0e:bc:67:83:
         d2:16:80:2b:8d:29:f6:a2:4f:a5:f1:35:96:c7:60:eb:76:79:
         44:72:22:8e:27:c8:9e:a7:ef:3b:a2:3a:19:f5:a2:fd:c8:a4:
         1c:aa:9c:53:e7:44:4f:ff:55:98:3a:f1:e9:aa:da:15:35:d7:
         28:98:c8:ed:97:2c:62:35:6c:c9:fe:b4:d3:f3:3e:dc:e9:cc:
         0d:6b:c6:61:9d:97:21:0e:7c:83:81:96:49:2e:49:2b:4d:17:
         dd:e2:b3:57:fc:49:5f:d2:95:68:54:08:72:ef:fc:6d:5a:51:
         bb:1b:74:ba:e3:77:9a:b5:a5:80:6a:69:64:c1:67:c5:be:21:
         97:eb:bb:82:ac:89:c7:9a:ac:b7:7c:38:37:ac:56:0a:bb:0e:
         10:a8:68:00:e7:2e:0c:c3:c7:21:b1:05:e5:7f:43:ae:b6:c3:
         69:f7:9b:b0:43:88:7d:7b:d8:17:19:18:da:2f:ad:21:0e:91:
         f4:b5:48:4a:e4:10:86:3c:5d:2f:d7:13:4f:78:ac:f8:5c:4d:
         ea:ce:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 11:23:24 2026 by rpki-client