Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File:                     F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier:          lMgMLEI0by1LNDjNLq7+/t/MqdDr5+Ju5WZWfQdHvcc=
Subject key identifier:   EF:37:9D:64:72:D8:C9:A9:B5:FB:91:67:29:13:89:E8:D0:AA:0D:0B
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer:       /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial:       2CFB62CBD093C51E30CE7C08206CC4286ADAD3FB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number:          04A7
Signing time:             Sun 29 Jun 2025 19:25:39 +0000
Manifest this update:     Sun 29 Jun 2025 19:20:39 +0000
Manifest next update:     Mon 30 Jun 2025 23:12:39 +0000
Files and hashes:         1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: GmJbtMBK3OWzz52JQaolDokDOv83ZG6Yfk7+1k3wQ+Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fb:62:cb:d0:93:c5:1e:30:ce:7c:08:20:6c:c4:28:6a:da:d3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
        Validity
            Not Before: Jun 29 19:20:39 2025 GMT
            Not After : Jun 30 23:12:39 2025 GMT
        Subject: CN=EF379D6472D8C9A9B5FB9167291389E8D0AA0D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:bc:cf:c1:a0:cc:44:d2:48:44:7d:c4:c3:
                    10:2c:b9:4e:e0:f2:42:8f:3c:68:99:5e:46:23:d0:
                    93:4e:20:7c:5f:06:32:17:d9:4f:74:1d:26:c7:11:
                    9d:34:fc:7e:ad:aa:83:00:24:98:22:f3:9e:32:da:
                    9e:4e:02:c2:7c:68:7a:f0:66:ef:cc:ec:ea:a6:bf:
                    45:6e:4a:70:83:44:33:12:52:63:56:03:a4:19:e2:
                    23:c5:9e:a3:1a:58:fd:dc:67:e8:cf:12:eb:a1:6e:
                    80:af:c3:d8:12:18:02:57:da:72:8c:d8:d8:36:df:
                    bd:60:42:7e:75:68:41:10:eb:30:e1:ab:ff:cb:10:
                    dd:8d:fb:4f:f2:1b:08:bd:7b:0a:b1:dc:be:26:8e:
                    3b:35:96:61:cd:dc:6e:07:88:3e:24:a4:13:94:67:
                    80:f5:24:eb:9e:6a:3b:3d:33:b4:04:54:45:b3:cb:
                    21:de:14:fb:ef:0b:a9:65:92:36:3e:66:26:82:35:
                    8c:76:41:c5:4f:08:60:60:78:d4:d0:21:c0:26:2a:
                    16:b0:42:18:e0:b2:ed:8c:bc:50:1f:86:3b:7f:e5:
                    48:86:3d:ea:63:be:ad:2f:f8:d2:4e:cc:7e:eb:81:
                    3d:71:77:5f:f6:fe:51:b4:0e:d2:f6:bb:61:46:1f:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:37:9D:64:72:D8:C9:A9:B5:FB:91:67:29:13:89:E8:D0:AA:0D:0B
            X509v3 Authority Key Identifier:
                keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:f8:2e:32:0d:9d:ee:ad:fe:6f:c1:d4:64:d5:f2:12:5a:
         9e:0a:93:45:c0:a5:b0:a3:c6:64:bf:b6:29:8e:34:88:df:44:
         20:4f:c4:dc:ca:65:d9:a6:f7:38:1e:1f:61:bd:dc:ba:ae:93:
         00:fe:fd:80:f9:d7:c3:f4:d6:e1:e2:a0:6d:c8:5d:e2:a7:ea:
         c1:35:12:b7:8f:72:9a:24:c6:f2:c0:59:68:76:a5:ce:07:fa:
         c1:b9:2b:bc:14:77:18:21:24:23:51:fe:c7:e7:74:b3:c9:51:
         31:a9:9c:b5:ee:90:0c:23:fb:cc:21:bb:85:d3:bd:18:65:54:
         81:89:66:98:10:93:1b:f1:11:6b:7c:fd:8c:94:f1:78:9c:1e:
         26:03:f6:82:18:7c:3f:dd:35:c2:0c:b2:ff:c2:0d:0a:c3:a3:
         47:e6:ad:a1:d1:bd:bc:20:ff:92:10:f6:90:84:0c:de:af:c9:
         c7:62:b5:a5:e1:cd:e9:1b:ca:3b:e7:e5:9a:cc:88:27:cb:26:
         1d:25:c9:f7:67:c3:00:cd:29:d2:b4:f0:8e:d5:1d:36:6c:6e:
         80:48:c3:bc:d4:2d:94:dd:cf:8b:3e:25:45:22:52:d6:0a:eb:
         9f:69:fb:b8:5c:88:8d:05:16:15:2c:47:74:59:01:d0:9c:0f:
         99:04:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:24:51 2025 by rpki-client