Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File:                     F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier:          KCHp49fi1pveRiDL90fuiEjuLA9WGMHzBNy49WImRa4=
Subject key identifier:   0E:6A:9E:C3:6A:56:18:F6:82:25:6D:BD:3F:40:2A:1E:2A:73:31:18
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer:       /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial:       5017A129BDBDC9A48052FD220ADCAC17B6FCCD22
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number:          0451
Signing time:             Mon 28 Apr 2025 02:13:40 +0000
Manifest this update:     Mon 28 Apr 2025 02:08:40 +0000
Manifest next update:     Tue 29 Apr 2025 05:28:40 +0000
Files and hashes:         1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: 9djBmsWvDhGcEDHEvJq6L0xN0ckQoEgX1975i6bfwXA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 19:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:17:a1:29:bd:bd:c9:a4:80:52:fd:22:0a:dc:ac:17:b6:fc:cd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
        Validity
            Not Before: Apr 28 02:08:40 2025 GMT
            Not After : Apr 29 05:28:40 2025 GMT
        Subject: CN=0E6A9EC36A5618F682256DBD3F402A1E2A733118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:90:55:00:3e:52:f3:00:28:4c:55:28:6d:
                    18:a0:f1:ac:2c:40:39:0c:7a:23:a6:36:06:1d:65:
                    2d:73:0b:f3:a0:9b:d1:09:a4:48:24:a2:12:30:13:
                    7a:e5:6c:a0:39:72:8b:fd:0f:39:47:3a:f5:f3:c7:
                    87:da:a9:ba:8c:d3:5c:dd:37:9d:68:77:bd:91:78:
                    e1:20:9d:3c:08:d3:e4:0d:a8:ae:c2:16:84:76:99:
                    4e:9c:f9:b9:6e:b2:f4:e6:a8:a6:32:d2:17:10:04:
                    d6:16:68:27:99:0e:ce:d8:b8:36:51:d4:ca:d7:91:
                    c4:0b:d2:6b:79:7b:57:35:13:df:c0:b0:e6:f9:83:
                    39:a3:f1:1e:f0:08:60:26:49:24:49:8f:e8:21:cc:
                    36:e6:61:32:54:62:da:37:d8:bc:e2:f9:52:a9:81:
                    21:76:ec:dc:33:e8:c6:72:e8:61:8d:94:10:be:4b:
                    65:f6:02:9b:ef:d4:c8:2a:e1:9b:c4:3b:5a:ba:21:
                    dd:06:71:ac:73:f1:8c:d7:99:8d:6d:cb:fc:27:00:
                    13:ce:af:54:cd:37:cd:16:71:9e:30:ea:a8:07:4d:
                    26:d4:45:6d:88:b1:f5:67:84:c1:f3:2b:9d:d6:3d:
                    12:67:f2:b2:1f:84:08:03:7e:19:da:ba:df:2c:35:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6A:9E:C3:6A:56:18:F6:82:25:6D:BD:3F:40:2A:1E:2A:73:31:18
            X509v3 Authority Key Identifier:
                keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:5e:a9:f1:8d:cc:51:50:2b:ab:81:c7:8e:62:e6:80:43:
         f2:85:89:58:3a:ac:8a:9d:b0:d2:53:a0:df:22:5f:d2:3c:67:
         b2:d9:39:f0:a2:68:bb:1b:00:1f:60:77:32:67:dc:f0:e0:b0:
         3a:48:a7:a8:8a:f9:d3:7c:35:f9:81:1e:26:9f:16:79:ae:13:
         8e:22:38:aa:5d:63:44:cc:26:c9:f7:b0:15:eb:28:a5:a4:d8:
         4f:13:93:2a:34:3d:de:97:f9:0e:6d:a1:04:5a:8b:e9:ac:d8:
         a8:8a:2e:99:27:de:4f:60:9a:c9:76:27:86:80:87:4d:b4:48:
         e8:5e:e2:30:c7:ad:3b:87:c4:4f:5f:cb:0d:3b:fd:87:30:dc:
         3d:5e:72:07:85:aa:2f:c1:d9:ba:7f:cc:33:9a:8f:e7:2b:92:
         b3:1b:44:6b:80:eb:64:9e:52:23:b4:a0:ea:24:0e:01:f7:04:
         4f:7c:ed:c7:e0:c5:95:9f:34:1e:2c:7f:7f:68:dd:5d:12:15:
         c5:05:79:39:bb:49:26:42:68:1c:66:31:e6:56:a9:9c:a6:e5:
         f6:66:14:e8:b5:10:44:72:43:ef:9a:07:80:96:b6:aa:da:e6:
         48:80:3a:79:d8:ff:a2:8e:c3:1d:31:d4:ee:3e:f1:c6:c6:35:
         76:9e:67:93
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUUBehKb29yaSAUv0iCtysF7b8zSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA2NjYzOTMxMTU5NkUxNTFFNzhFMzRDQ0M1ODREQzVG
NTAwRjU4NTAeFw0yNTA0MjgwMjA4NDBaFw0yNTA0MjkwNTI4NDBaMDMxMTAvBgNV
BAMTKDBFNkE5RUMzNkE1NjE4RjY4MjI1NkRCRDNGNDAyQTFFMkE3MzMxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+5BVAD5S8wAoTFUobRig8aws
QDkMeiOmNgYdZS1zC/Ogm9EJpEgkohIwE3rlbKA5cov9DzlHOvXzx4faqbqM01zd
N51od72ReOEgnTwI0+QNqK7CFoR2mU6c+blusvTmqKYy0hcQBNYWaCeZDs7YuDZR
1MrXkcQL0mt5e1c1E9/AsOb5gzmj8R7wCGAmSSRJj+ghzDbmYTJUYto32Lzi+VKp
gSF27Nwz6MZy6GGNlBC+S2X2Apvv1Mgq4ZvEO1q6Id0Gcaxz8YzXmY1ty/wnABPO
r1TNN80WcZ4w6qgHTSbURW2IsfVnhMHzK53WPRJn8rIfhAgDfhnaut8sNQ1zAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUDmqew2pWGPaCJW29P0AqHipzMRgwHwYDVR0j
BBgwFoAU8GZjkxFZbhUeeONMzFhNxfUA9YUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzMvRjA2NjYzOTMxMTU5NkUxNTFFNzhFMzRDQ0M1ODREQzVGNTAwRjU4NS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0YwNjY2MzkzMTE1OTZF
MTUxRTc4RTM0Q0NDNTg0REM1RjUwMEY1ODUuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRl
LzMvRjA2NjYzOTMxMTU5NkUxNTFFNzhFMzRDQ0M1ODREQzVGNTAwRjU4NS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGyPXqnxjcxRUCurgceOYuaAQ/KFiVg6rIqdsNJToN8iX9I8Z7LZOfCi
aLsbAB9gdzJn3PDgsDpIp6iK+dN8NfmBHiafFnmuE44iOKpdY0TMJsn3sBXrKKWk
2E8Tkyo0Pd6X+Q5toQRai+ms2KiKLpkn3k9gmsl2J4aAh020SOhe4jDHrTuHxE9f
yw07/Ycw3D1ecgeFqi/B2bp/zDOaj+crkrMbRGuA62SeUiO0oOokDgH3BE987cfg
xZWfNB4sf39o3V0SFcUFeTm7SSZCaBxmMeZWqZym5fZmFOi1EERyQ++aB4CWtqra
5kiAOnnY/6KOwx0x1O4+8cbGNXaeZ5M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:45:57 2025 by rpki-client