Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          8B/tdICYsk+vEJPmbLMNxqc3VXoGMnOt5dougJLcC5Q=
Subject key identifier:   C9:CD:26:81:FF:FC:09:02:3E:82:6A:4E:CA:AB:3F:6E:59:92:21:16
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       5BE54252E56A789A5BBDC57D0D466EE428335EC5
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          01DC
Signing time:             Tue 23 Jun 2026 07:57:00 +0000
Manifest this update:     Tue 23 Jun 2026 07:52:00 +0000
Manifest next update:     Wed 24 Jun 2026 11:17:00 +0000
Files and hashes:         1: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: r9FazbYdcGWr8yxE7Xlc6COzFVG/V8HHiY4oJPUj9e0=)
                          2: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=)
                          3: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: 3RvAUptVpz9t+/vEUr2T+oD3r3m2M7/+gCge4rPhKxg=)
                          4: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: qdP0HRm4N8QhGlcJYvvaoAeplDO4ZyRJr8ineDX3Ogs=)
                          5: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: YlgR+wU+M0eLvld2xSh3zDm4tMxr1XJShIukMjED9oE=)
                          6: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ly9Co+vI6PV8fR7uh/In7tumWsB9IIQUcXqxPJgng60=)
                          7: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: LmZPBrdBNvVEUYl/3fdU4HyBIuXEPbEMqMYFh1dtrL4=)
                          8: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: ThRAOJbjHQmA9JxK13qULk+qo7BnGKM2UqWFr1YC6nk=)
                          9: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: 6l17BEGEadHzOxPzpMo5FbQnljDpn3QSKtCpe2uNXE8=)
                          10: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: cCn4W1XDOWzwRiR+DkG6emZrNY/m0Yv0o0eCk/PWV3c=)
                          11: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: Y1PCZcs+9Hl0rajcsrufc9z/aJxhV8gN3KKtcnKbxmc=)
                          12: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: Z56So/SucnY7gPFXl/vIBeo0fdzrYh66Z52M8rAJo6s=)
                          13: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: Iq8D7j+xsoj7tpHG2Rp1FT0u536kED76xFBqNqODvEw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 11:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e5:42:52:e5:6a:78:9a:5b:bd:c5:7d:0d:46:6e:e4:28:33:5e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jun 23 07:52:00 2026 GMT
            Not After : Jun 24 11:17:00 2026 GMT
        Subject: CN=C9CD2681FFFC09023E826A4ECAAB3F6E59922116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:69:a4:21:ba:28:36:d9:ca:2b:bc:19:d2:
                    93:50:d5:1e:cd:c6:84:a3:9a:a7:f2:64:49:08:07:
                    5f:9f:4b:df:32:b9:1d:0d:0b:a4:ad:38:e8:69:9d:
                    1a:df:81:6d:78:2d:77:ef:c1:1c:54:4f:31:87:08:
                    e2:77:8e:70:cd:1a:e3:2b:51:c6:c1:d5:17:58:3b:
                    3e:e3:23:dc:3c:29:ed:56:48:bd:86:4f:06:05:fc:
                    a5:47:9c:50:9c:2b:bd:99:3e:d2:f3:04:91:7b:21:
                    ab:d3:07:ca:e0:6b:93:e8:c3:4c:2b:79:ea:27:aa:
                    92:60:10:51:1b:1c:1d:50:54:b8:99:55:1a:d3:8a:
                    25:f4:3d:16:c1:19:75:ee:b2:f8:79:5b:91:a6:ca:
                    b5:f7:5e:37:07:27:d6:85:78:42:48:59:5a:60:5e:
                    4f:c4:bf:a2:93:36:53:cc:a9:78:1d:48:2f:75:85:
                    10:92:e2:b8:5b:55:eb:be:3d:46:88:67:27:76:f9:
                    f3:ca:73:2d:28:dc:a0:d8:12:22:b0:8b:72:6b:dd:
                    52:e9:9f:be:e7:5f:20:f0:da:44:cd:55:b4:61:8d:
                    11:f0:0a:69:7c:eb:c7:50:c4:04:27:a4:9a:73:03:
                    ca:88:5b:ea:15:62:f6:27:71:b8:e0:29:38:6b:36:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:26:81:FF:FC:09:02:3E:82:6A:4E:CA:AB:3F:6E:59:92:21:16
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:c9:b0:1c:25:49:86:2d:8b:12:02:33:76:4a:55:9f:ee:
         f4:6c:6a:da:85:7b:63:73:3d:3f:98:85:04:10:06:b3:8a:9e:
         49:f9:d5:12:1e:ff:47:24:37:48:07:06:82:12:19:68:b8:18:
         02:94:71:20:34:e3:11:02:f8:60:e9:16:68:f5:f8:79:01:c5:
         6d:22:9d:dc:ee:11:aa:cf:15:19:02:dc:be:66:0c:c1:1a:fa:
         a9:15:74:77:f2:9c:cb:12:34:85:e1:2a:4b:90:97:ae:73:17:
         4c:c9:b1:5d:0f:eb:af:46:00:cc:d2:f9:bd:56:fd:a7:a1:12:
         bc:f9:af:90:54:8a:07:f7:5e:56:db:10:a2:fe:41:f8:fa:26:
         85:7d:2a:e3:8c:4b:b8:c8:58:c1:e1:4b:7d:70:03:7c:fc:73:
         0b:33:ff:5b:5a:5a:b7:93:4b:fa:94:17:53:97:01:9e:60:6f:
         bf:51:a3:2e:4e:a6:26:b0:74:1d:43:a6:f2:7e:45:16:21:bf:
         fb:97:29:a9:ae:77:60:ab:2e:ef:2d:18:80:47:15:1a:31:05:
         d7:b7:26:57:d2:9f:47:d3:2f:a1:50:93:11:fa:8e:63:10:a3:
         5c:00:74:39:56:01:a3:cf:26:5c:85:a1:95:35:d4:95:89:de:
         4c:1c:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 23:02:21 2026 by rpki-client