Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          uP6M2Q676azYFjLkMzCiZVRAlGrFYGID5/wouGmTJDI=
Subject key identifier:   20:4D:2C:AF:0F:69:FB:85:6D:6A:2A:5C:A4:F0:72:A5:60:78:80:C6
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       384814F2E309E311891F6DB09E8A8829C2CE0753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          024D
Signing time:             Sun 19 Oct 2025 03:33:15 +0000
Manifest this update:     Sun 19 Oct 2025 03:28:15 +0000
Manifest next update:     Mon 20 Oct 2025 05:39:15 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: G3pMXaYGhGTiFGW4KVERcJXyC5RT/cjyGQiOM7Hc6NQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:48:14:f2:e3:09:e3:11:89:1f:6d:b0:9e:8a:88:29:c2:ce:07:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Oct 19 03:28:15 2025 GMT
            Not After : Oct 20 05:39:15 2025 GMT
        Subject: CN=204D2CAF0F69FB856D6A2A5CA4F072A5607880C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:12:41:27:ea:d5:44:e8:b6:b9:f6:fe:8a:
                    b1:dd:d9:6f:db:a2:8d:71:86:10:d2:ac:8f:87:16:
                    f3:70:b2:1d:60:0f:6b:4b:f0:c0:fc:77:3c:3a:b6:
                    5e:8f:a4:9a:69:a7:32:cd:bc:ee:70:4c:1d:3c:6d:
                    f5:76:3c:af:d5:58:e2:27:47:9d:e9:2d:24:94:ee:
                    fd:35:db:5e:da:df:b3:52:16:4b:85:6b:ee:d8:3d:
                    62:48:f5:2b:1c:91:24:11:5f:5e:91:28:9d:f0:06:
                    13:7a:72:3f:44:2f:5b:75:eb:34:fb:23:10:29:5d:
                    5c:cd:51:34:b1:09:bd:5a:24:90:25:22:a2:ef:59:
                    2a:7d:05:16:67:0d:d5:20:5d:0e:f0:b2:4a:59:50:
                    d0:1a:6d:06:42:cc:4b:6e:40:97:3c:fb:89:22:dd:
                    76:00:60:4e:fc:15:59:5a:0b:a2:c0:5d:2c:6a:b7:
                    bd:2e:0f:1c:07:ec:e0:f6:2f:ce:ec:a5:30:de:f7:
                    b8:c1:27:7f:01:a3:f8:76:a1:f9:2f:13:22:3a:43:
                    46:d4:49:19:d7:0a:41:bd:f2:88:1b:e8:70:79:c6:
                    eb:00:32:ac:3d:5d:90:ce:a9:eb:0f:08:13:fa:98:
                    e3:22:b0:8f:7d:52:04:34:9f:49:ee:ec:cb:b8:89:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:2C:AF:0F:69:FB:85:6D:6A:2A:5C:A4:F0:72:A5:60:78:80:C6
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:03:2c:0f:74:16:19:cb:d1:b8:5b:6d:10:d3:92:9f:93:10:
         da:46:e2:58:86:eb:30:5c:3c:9b:37:66:14:ef:10:fb:c1:76:
         79:1e:7f:c0:46:e9:bb:1a:8f:1c:a3:86:f0:26:08:25:60:ca:
         bb:a0:06:70:82:33:f8:06:0c:cb:f3:c0:ec:0c:b6:a6:d3:de:
         85:5b:47:60:a0:0c:10:bb:ae:ba:99:8c:b0:0d:4a:86:77:bb:
         52:6f:f8:9d:17:5a:70:0b:7e:9b:eb:77:fb:ea:63:c8:29:db:
         97:a5:a2:cc:e1:3f:29:9e:de:81:82:03:d3:52:5b:22:dc:d9:
         74:e0:32:e2:ed:ce:62:4f:68:dc:7c:06:f8:55:2a:d7:11:d1:
         6e:85:3d:97:1b:24:7f:3e:52:91:4b:41:40:e4:81:8d:29:59:
         30:5a:84:60:75:6c:70:01:d2:8a:f4:c8:f6:20:65:a7:a2:cb:
         69:70:1f:1b:d8:cb:5a:97:61:23:56:2e:e2:21:ca:e4:a1:5e:
         1d:cd:94:69:19:ba:7f:1c:35:4b:c0:fe:0b:25:60:db:82:8e:
         81:02:fb:52:14:ea:8f:66:fe:f1:61:63:65:e2:0d:a1:15:1c:
         bd:5e:02:aa:62:62:36:02:3a:46:51:cc:0d:98:7c:cf:67:9a:
         9e:4d:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:11 2025 by rpki-client