Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
File:                     0F728B914670434DCF5633E81E2B8721DF75CEB8.mft (raw, json)
Hash identifier:          BYE+xuzuA89ayUEsVE36S7PtkLS6uyb+aCqjQkNva5M=
Subject key identifier:   8F:DA:82:4F:E0:7E:61:3C:B0:21:75:9B:35:A2:2C:59:21:ED:2B:B5
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       2F91F59157F7C3FE53D1EE7B7EA12BAAD822B8AD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
Manifest number:          017D
Signing time:             Sat 11 Apr 2026 07:24:18 +0000
Manifest this update:     Sat 11 Apr 2026 07:19:18 +0000
Manifest next update:     Sun 12 Apr 2026 10:35:18 +0000
Files and hashes:         1: 326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (hash: MtzTkzQ35m22EvkbzZHwIxUncfZ/F5ZBQnc0K5rFcKk=)
                          2: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (hash: t9hcvqhwXlPB3lKs0hXk2UPtuWy2Mwkk+JEAH74z3hU=)
                          3: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (hash: yfbaeT34FbMIGlyj0tQySNH5shIHOUf5oJ7SB3fvio4=)
                          4: 326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (hash: o0c6z8BVXaf88Og/NHkXsPQxVXa5TEEzjiKJXKikl2E=)
                          5: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (hash: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=)
                          6: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (hash: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8=)
                          7: 326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (hash: WTZmUkrbRvCnq1WV0/b4J3wKCnYUZUlJ7NyI7AuLwZg=)
                          8: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (hash: T/jZB6hJnvckE1oQM04wQ4G6elO8ybOC5fa2RX6LRvo=)
                          9: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (hash: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=)
                          10: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (hash: 9olAe2k5YVfRqkBWbCUyoH95HOSdUCIE1uFD0aZVTK8=)
                          11: 326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (hash: 5zkOtfMFRCYhmVW7LBhzu0cT34wr5G4zsYBbwLKUwUQ=)
                          12: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (hash: wQCSXfUitadFHqKjKe8NWt6UbMgOvdQ9vSj233OT9/o=)
                          13: 326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (hash: 6S/HZN+hofz7bGbwqskKxqv7EIALWOyIB31Jd/CmpLk=)
                          14: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (hash: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw=)
                          15: 326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa (hash: ar7Y00UY3ufrm6UZpfgTHbTZkbGAoNVyqXFlniq5sWY=)
                          16: 0F728B914670434DCF5633E81E2B8721DF75CEB8.crl (hash: yztKfULhlAZE+hlhtjT5/2Me6OeE0N2lcri1Yjr1Cqg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:91:f5:91:57:f7:c3:fe:53:d1:ee:7b:7e:a1:2b:aa:d8:22:b8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Apr 11 07:19:18 2026 GMT
            Not After : Apr 12 10:35:18 2026 GMT
        Subject: CN=8FDA824FE07E613CB021759B35A22C5921ED2BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:8a:37:88:6b:b1:d9:52:bb:c0:c3:62:f6:
                    9d:79:f0:aa:9c:99:48:28:f4:6b:da:f5:ac:f2:62:
                    ec:53:3f:11:ce:86:03:cb:ff:eb:bc:96:1c:12:ae:
                    c8:0f:a6:85:07:42:c3:5a:cf:6d:ea:ea:2f:68:f3:
                    5c:a3:37:63:36:b4:7e:10:8f:b2:19:17:0d:0e:bd:
                    70:79:21:0c:4f:1e:2b:f6:32:80:84:b4:9b:8f:6b:
                    84:92:ae:2f:6b:cd:93:6b:d9:63:57:6d:23:26:49:
                    14:8c:c1:08:69:35:cc:6c:a2:8b:e6:fa:72:61:90:
                    f5:c9:8f:37:9d:8d:cf:0a:54:5c:20:ca:7f:0d:1b:
                    70:32:51:94:8a:9a:e4:7a:19:1e:10:52:6d:bf:19:
                    fe:b0:57:7f:e6:98:c7:73:12:40:42:54:5b:27:fb:
                    e3:5e:cf:23:d0:19:0b:5e:0d:70:02:e1:7e:c8:9a:
                    a7:ed:c6:2e:a2:ed:87:9d:3d:10:50:1f:e5:6d:17:
                    0c:46:fa:18:75:ab:a9:42:20:eb:9b:4a:f6:f5:5b:
                    17:61:da:74:b0:bc:46:13:23:60:5f:7f:f6:09:03:
                    b9:8c:b3:98:1b:c4:22:f4:69:5f:72:ad:00:b3:c5:
                    d1:8a:24:55:ad:67:fc:53:8b:af:6f:2f:b1:45:20:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DA:82:4F:E0:7E:61:3C:B0:21:75:9B:35:A2:2C:59:21:ED:2B:B5
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:3c:a1:b5:38:90:e1:14:ba:6f:95:96:d6:33:07:a4:bc:f1:
         94:f5:a2:88:72:c9:8b:c0:07:9e:dd:55:63:08:d4:6d:63:af:
         3d:35:da:ac:f8:8a:39:c2:04:fb:fa:0e:a8:41:75:72:34:21:
         7b:a7:8d:44:7d:eb:db:32:15:07:3b:2e:d4:7c:a3:cc:2b:5a:
         db:a5:e2:60:72:9e:0f:f5:72:75:7f:de:7d:4c:b2:e4:48:ca:
         4d:e4:c5:ae:2b:40:98:64:75:04:4f:d2:05:1a:d3:69:7b:5d:
         4b:af:83:61:90:15:95:ee:7a:0a:6d:70:cb:d6:68:37:64:ec:
         db:3b:3a:a0:78:95:e9:74:81:cf:ef:fb:80:de:eb:f6:2a:f1:
         d5:eb:5e:70:a0:33:46:bc:26:1b:e4:27:87:bb:35:80:99:1b:
         dc:b3:46:ec:09:10:a4:d5:d3:0d:39:96:d1:bc:f0:10:d3:7f:
         07:3c:a0:06:6d:ce:d9:48:be:8e:96:af:3b:cc:83:34:09:a2:
         ad:4e:60:6d:76:be:53:61:90:51:39:c5:ee:32:c4:a2:49:03:
         9c:d1:6b:57:e1:78:ba:d7:bf:54:62:f5:ed:7c:c9:12:b8:3d:
         98:e1:e3:0d:94:e5:90:c8:84:71:29:03:d6:ef:6d:07:12:17:
         e6:f4:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 10:42:18 2026 by rpki-client