Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File:                     66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier:          wjW2tRcNZ4RQnjYHAOVbRXbIBd6cqosTkHui+ieriXo=
Subject key identifier:   29:FB:DD:F3:EE:65:41:04:C3:5E:3D:B0:6A:51:6C:61:40:5E:4A:A4
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer:       /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial:       1C74AA5441D4856FB712DC58922D6E1B1E2B2F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number:          017C
Signing time:             Thu 13 Mar 2025 14:47:09 +0000
Manifest this update:     Thu 13 Mar 2025 14:42:09 +0000
Manifest next update:     Fri 14 Mar 2025 15:29:09 +0000
Files and hashes:         1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: aK4RhzzpRQbFOMXCIe6bU6pFTNQAEFNLkWHRL4QihAA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:74:aa:54:41:d4:85:6f:b7:12:dc:58:92:2d:6e:1b:1e:2b:2f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
        Validity
            Not Before: Mar 13 14:42:09 2025 GMT
            Not After : Mar 14 15:29:09 2025 GMT
        Subject: CN=29FBDDF3EE654104C35E3DB06A516C61405E4AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:85:4a:b6:32:0d:c2:30:78:79:35:2a:c3:8f:
                    2f:1e:0b:55:24:0e:5d:27:ef:d2:70:0f:bf:31:aa:
                    95:56:98:ae:f8:08:30:17:21:01:fc:09:97:57:d2:
                    a7:e2:87:3d:eb:df:3d:1c:13:4f:11:f1:57:50:e9:
                    63:f2:67:18:7d:d7:70:50:2a:15:48:26:80:bc:54:
                    d2:28:fb:b7:1f:ba:6b:bf:a6:74:47:f1:35:28:19:
                    87:72:9a:e7:ad:bc:c4:d6:ad:35:4b:be:c6:ce:41:
                    a6:94:72:70:e2:6a:e5:ad:76:4e:65:14:b3:87:7c:
                    12:ea:02:24:bc:d1:2a:5b:14:22:ab:cf:b1:f8:b5:
                    71:2a:1d:a9:af:89:d9:a0:61:9c:2f:05:8e:42:ae:
                    3e:50:64:49:8d:8d:21:dd:4c:34:27:d0:f9:b4:70:
                    cf:49:07:55:15:11:09:64:68:70:2c:bb:df:b5:4a:
                    11:51:a4:45:0d:52:6e:79:68:9e:78:e5:f6:41:99:
                    ed:7a:42:27:a4:d7:91:3d:14:9c:73:cf:1b:45:81:
                    b2:d3:52:74:2c:63:75:3b:16:62:b3:06:0e:eb:f2:
                    dc:e8:79:3c:92:ac:94:d4:d9:07:8c:c4:7e:63:40:
                    77:2a:bf:04:9f:e1:36:c5:a3:91:44:4d:97:b4:43:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:DD:F3:EE:65:41:04:C3:5E:3D:B0:6A:51:6C:61:40:5E:4A:A4
            X509v3 Authority Key Identifier:
                keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f6:5a:47:7f:2d:d6:f6:db:5c:e9:0c:e6:ce:08:aa:b3:a5:
         97:fb:08:20:0c:aa:46:db:9f:6d:06:65:1a:4a:5a:d5:80:0e:
         04:95:c5:b6:4b:4a:ee:ad:dc:4a:4a:58:fa:55:ef:b6:fb:a7:
         ea:df:6c:75:16:28:00:8b:43:92:92:1f:81:eb:34:4d:52:40:
         7e:6b:c0:9b:52:fe:c1:e0:96:5b:a6:e0:fa:ad:9c:a9:6d:fd:
         63:1c:16:54:1b:9b:63:a4:24:0c:34:b9:43:c1:12:fd:e1:19:
         0c:42:c3:05:51:a8:0a:84:5b:7a:0e:16:4d:c4:0e:10:50:35:
         12:d0:93:d0:19:e4:29:2e:82:8f:9c:ec:ad:a8:72:30:d7:30:
         e7:50:83:f9:d6:1d:b6:5f:00:cf:26:85:b4:b2:00:9f:8d:50:
         cb:be:8c:13:ff:61:99:78:9f:06:fa:0a:e4:a1:b8:32:fd:21:
         cd:bd:93:b7:3a:3e:b2:97:aa:f9:04:4c:6d:46:f1:55:6a:41:
         97:fc:ce:ed:fa:db:54:83:5c:89:73:af:ff:7c:ff:17:f1:26:
         76:3f:9e:05:7b:24:07:d3:4e:e2:93:43:8f:cd:9a:f3:58:11:
         54:f5:99:ce:1a:35:a1:f8:8e:d6:f5:92:3a:02:bd:89:98:cb:
         c5:1f:d4:4e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHHSqVEHUhW+3EtxYki1uGx4rL1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZjY2YxOWQ3YjYxMDg4MGRiMjJkNDBlYzliYWUwMmIx
MjAxMzc2MzAeFw0yNTAzMTMxNDQyMDlaFw0yNTAzMTQxNTI5MDlaMDMxMTAvBgNV
BAMTKDI5RkJEREYzRUU2NTQxMDRDMzVFM0RCMDZBNTE2QzYxNDA1RTRBQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohUq2Mg3CMHh5NSrDjy8eC1Uk
Dl0n79JwD78xqpVWmK74CDAXIQH8CZdX0qfihz3r3z0cE08R8VdQ6WPyZxh913BQ
KhVIJoC8VNIo+7cfumu/pnRH8TUoGYdymuetvMTWrTVLvsbOQaaUcnDiauWtdk5l
FLOHfBLqAiS80SpbFCKrz7H4tXEqHamvidmgYZwvBY5Crj5QZEmNjSHdTDQn0Pm0
cM9JB1UVEQlkaHAsu9+1ShFRpEUNUm55aJ545fZBme16Qiek15E9FJxzzxtFgbLT
UnQsY3U7FmKzBg7r8tzoeTySrJTU2QeMxH5jQHcqvwSf4TbFo5FETZe0Q27DAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKfvd8+5lQQTDXj2walFsYUBeSqQwHwYDVR0j
BBgwFoAUZszxnXthCIDbItQOybrgKxIBN2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzIvNjZDQ0YxOUQ3QjYxMDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pzenhuWHRoQ0lEYkl0UU95YnJnS3hJ
Qk4yTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02
ZGI5LTQyNWItYWNhZS03ZTIwZmJlNmUxMjkvMi82NkNDRjE5RDdCNjEwODgwREIy
MkQ0MEVDOUJBRTAyQjEyMDEzNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPZaR38t1vbbXOkM5s4I
qrOll/sIIAyqRtufbQZlGkpa1YAOBJXFtktK7q3cSkpY+lXvtvun6t9sdRYoAItD
kpIfges0TVJAfmvAm1L+weCWW6bg+q2cqW39YxwWVBubY6QkDDS5Q8ES/eEZDELD
BVGoCoRbeg4WTcQOEFA1EtCT0BnkKS6Cj5zsrahyMNcw51CD+dYdtl8AzyaFtLIA
n41Qy76ME/9hmXifBvoK5KG4Mv0hzb2Ttzo+speq+QRMbUbxVWpBl/zO7frbVINc
iXOv/3z/F/Emdj+eBXskB9NO4pNDj82a81gRVPWZzho1ofiO1vWSOgK9iZjLxR/U
Tg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:14 2025 by rpki-client