Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File:                     F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier:          jBMv4Sn7b00IYdLJwm7YNOrcCTXeyHflyYTIQG9S2WM=
Subject key identifier:   20:23:26:73:91:33:79:99:DE:CA:81:B9:C8:37:FE:5F:A9:35:36:1F
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer:       /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial:       4CF46876A350D01A3A2DFD4252AC73D5E08481AC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number:          0488
Signing time:             Fri 06 Jun 2025 16:50:08 +0000
Manifest this update:     Fri 06 Jun 2025 16:45:08 +0000
Manifest next update:     Sat 07 Jun 2025 18:50:08 +0000
Files and hashes:         1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: nhzXqyVL+PuWk5QxfI+BookUKh+7erj+I66B2euWfT0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f4:68:76:a3:50:d0:1a:3a:2d:fd:42:52:ac:73:d5:e0:84:81:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
        Validity
            Not Before: Jun  6 16:45:08 2025 GMT
            Not After : Jun  7 18:50:08 2025 GMT
        Subject: CN=2023267391337999DECA81B9C837FE5FA935361F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:37:f4:4f:29:7e:b9:2f:2e:e3:90:e5:d4:
                    81:6e:b1:82:9e:a7:c3:df:ac:a4:38:ba:b8:c3:73:
                    20:a4:77:6e:5f:d4:96:33:d5:cc:f0:b9:9b:02:fa:
                    ce:d9:9f:7f:94:5b:e3:ff:c4:9f:da:a1:d0:f0:ad:
                    9d:e5:7c:62:82:92:57:fc:e8:c9:af:b8:9b:ea:65:
                    f9:33:7e:4d:07:da:53:0d:fe:62:67:a1:c3:d4:7f:
                    e0:d5:61:19:2f:60:43:85:e2:b1:58:08:f3:07:8e:
                    9a:c5:39:70:53:32:a1:40:13:7c:4b:19:8c:2d:ea:
                    55:b8:b7:67:ca:66:e1:b2:30:3b:15:bd:c5:55:eb:
                    89:7c:34:04:0f:7e:75:1c:ef:87:98:72:54:32:8f:
                    69:c8:ab:0f:8e:05:58:c0:d0:0b:3c:55:e3:f4:dc:
                    55:ac:e2:d1:cb:fa:1e:cb:5c:d2:31:4e:9c:30:39:
                    6e:cd:f6:93:88:49:55:a1:4a:7b:ed:91:29:7a:e4:
                    8b:e0:ee:e1:b0:52:56:65:6b:e3:32:e7:b4:16:34:
                    a3:1c:5c:bd:1b:78:84:be:16:15:8a:13:31:ea:31:
                    cb:32:a2:c4:0c:1b:06:17:1e:76:77:5a:f1:fd:a4:
                    75:c7:5d:a0:85:7b:d0:04:e2:40:4a:f1:58:d6:85:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:26:73:91:33:79:99:DE:CA:81:B9:C8:37:FE:5F:A9:35:36:1F
            X509v3 Authority Key Identifier:
                keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:69:96:93:b8:f4:0a:d6:9c:5f:f9:fd:52:e5:69:87:5f:
         44:37:f8:4f:95:d3:0e:3e:f0:9c:d9:1f:30:d9:8a:f5:52:fb:
         fb:d6:9a:9b:10:c4:51:3e:dc:be:01:d2:e2:59:8c:93:4b:7e:
         60:e4:40:22:d9:d9:96:7d:86:e6:f4:04:8d:bf:39:e6:90:6f:
         20:28:d1:12:82:98:9c:03:76:b0:ea:2a:02:1f:d3:27:db:f2:
         b7:09:2c:5a:50:20:ef:73:55:8b:16:14:2b:4d:54:fa:91:b0:
         f4:b6:70:f8:0c:c7:70:c0:92:8c:c7:31:e1:ac:c5:6f:88:66:
         28:68:df:c4:6b:0c:b2:a3:ac:1f:a4:a8:de:2b:75:9e:46:a9:
         01:9c:6e:eb:d3:2c:ea:80:c9:ac:85:94:e8:c8:32:f9:d6:6c:
         2e:5b:e7:f2:05:38:3c:c3:91:6d:a7:6b:76:af:cd:b7:f0:ef:
         de:a7:d7:4c:d0:9b:85:a1:f1:d0:f5:c2:34:46:5d:3c:3c:64:
         cd:c0:b5:67:ba:ca:2a:a2:2c:45:f9:eb:36:97:5c:61:ce:a7:
         b4:32:90:bb:c6:b5:19:bb:fc:ae:71:cb:ee:c8:c1:cf:e5:e6:
         50:b3:e8:e9:e0:85:5e:c6:10:31:25:5b:7e:50:cc:8b:55:7d:
         4d:28:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:02 2025 by rpki-client