Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File:                     66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier:          VuowoXPhbtYxupcXO7FfKuSWzFnyKAhes+I0L0NrIa8=
Subject key identifier:   4B:4F:6D:D8:DD:2E:7F:8D:C3:F3:A1:9B:73:41:47:19:D2:B5:3C:C7
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer:       /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial:       14CED03EDF9A08EA449407DC505D06647A8EE7E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number:          020C
Signing time:             Sat 28 Jun 2025 15:05:30 +0000
Manifest this update:     Sat 28 Jun 2025 15:00:30 +0000
Manifest next update:     Sun 29 Jun 2025 15:24:30 +0000
Files and hashes:         1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: A451aSlbNJ0XsIDz1qA+f46g1JUHLQpzYKts5a1H51s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ce:d0:3e:df:9a:08:ea:44:94:07:dc:50:5d:06:64:7a:8e:e7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
        Validity
            Not Before: Jun 28 15:00:30 2025 GMT
            Not After : Jun 29 15:24:30 2025 GMT
        Subject: CN=4B4F6DD8DD2E7F8DC3F3A19B73414719D2B53CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:9b:5c:ee:17:15:75:28:30:40:0f:dc:67:
                    fd:34:69:cf:17:cb:5f:37:eb:64:d4:9b:f7:87:d7:
                    ac:72:06:30:73:dc:3b:9f:78:dc:be:db:be:fb:26:
                    58:8d:4f:cc:a0:57:34:7e:8e:75:28:6f:e2:4a:93:
                    cd:05:5b:e2:83:c9:4b:0d:d0:24:82:8f:16:0a:2e:
                    12:1c:e3:e5:4e:66:ef:9a:8a:64:9d:92:12:3c:66:
                    21:e4:7c:6f:43:fe:16:7c:eb:4c:3a:17:80:d6:0f:
                    44:6e:c8:a4:d0:f0:46:2a:5e:1d:5d:3c:18:44:e1:
                    79:8a:9c:c0:d5:92:ee:69:80:33:ba:6f:ff:8e:30:
                    cd:1b:b5:23:d7:a7:9e:89:d6:41:cb:a1:30:98:a2:
                    2a:ef:db:9f:7e:36:cc:a2:ab:b1:14:72:a0:d8:f8:
                    86:72:60:a6:7a:e0:ce:10:d6:f3:ed:a3:b4:fe:d2:
                    dc:60:da:f1:d5:ed:50:c4:7b:f1:05:6c:7a:de:c5:
                    4a:ee:74:94:e9:02:dc:81:69:0a:ee:3c:38:cf:4c:
                    99:5b:5f:d6:73:0f:04:f0:8c:13:e6:58:75:a6:ab:
                    8f:58:66:dd:7c:5a:aa:7c:53:28:fa:c5:c9:c5:71:
                    90:49:5d:fa:3e:84:fa:f2:54:46:b8:55:91:af:be:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4F:6D:D8:DD:2E:7F:8D:C3:F3:A1:9B:73:41:47:19:D2:B5:3C:C7
            X509v3 Authority Key Identifier:
                keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:ca:6c:2c:57:35:78:0e:2c:c9:78:ea:45:3d:48:2b:6e:
         94:ec:3b:ae:2f:42:fe:d2:14:ca:44:36:94:93:7f:92:ce:22:
         79:46:92:cc:4f:80:4f:d6:41:4e:4f:6b:39:43:d7:e2:78:55:
         6c:08:a0:8d:77:91:86:c3:f0:9d:cb:3a:ae:80:84:e6:97:2e:
         c2:53:d6:0f:6b:b1:2b:b8:a3:6c:c0:b0:77:cf:23:07:bd:68:
         1e:80:65:fc:e6:05:14:d7:bb:3b:40:39:c9:30:6b:4a:eb:e9:
         0d:52:ae:a9:d4:b0:26:dd:77:77:bc:ee:31:53:41:18:19:3f:
         b1:07:33:9b:af:42:8a:82:8c:d9:70:b4:9d:22:51:fc:3f:08:
         06:4e:74:1f:e2:53:b3:9a:4a:23:b1:e9:1e:7b:51:df:96:a5:
         62:a9:3e:77:dd:09:d9:5c:93:85:78:16:b8:a4:50:d9:7a:d6:
         88:40:e7:b1:4a:7f:5e:c5:8e:d4:56:b4:46:5f:ef:04:98:05:
         7f:83:ab:17:b9:63:d6:85:b8:14:1f:75:47:4f:01:9e:8f:12:
         3e:6c:cd:a6:eb:67:4d:40:22:dd:c9:01:95:0b:a5:0a:84:4b:
         6d:4a:dc:4b:b9:9d:2e:71:e0:c1:78:82:7a:3c:87:f1:25:4a:
         c3:7d:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:37 2025 by rpki-client