Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          WzgvywTZPXXdlO8GwbzMaxmj01ZNNiNWWKdGjKN2+Ps=
Subject key identifier:   56:4E:A5:48:4B:7C:78:19:FA:11:ED:7F:16:BE:80:CE:79:5C:E8:B9
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       1D7C11045A58430205FBB208E78F5389F5E2E8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          0170
Signing time:             Wed 07 May 2025 03:41:11 +0000
Manifest this update:     Wed 07 May 2025 03:36:11 +0000
Manifest next update:     Thu 08 May 2025 03:56:11 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: DO7UM11PrYC2mkhju9DRGy282fWbwuirrdMWJCUtfJQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:11:04:5a:58:43:02:05:fb:b2:08:e7:8f:53:89:f5:e2:e8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: May  7 03:36:11 2025 GMT
            Not After : May  8 03:56:11 2025 GMT
        Subject: CN=564EA5484B7C7819FA11ED7F16BE80CE795CE8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:23:dd:ea:a3:fb:d6:86:c9:81:16:cd:33:
                    f1:cc:8f:d4:29:37:e3:9a:ea:ae:a5:3e:20:12:78:
                    f3:ba:1e:62:04:b7:59:f5:0e:6e:d9:17:a5:a3:f7:
                    6d:d9:5c:ad:86:40:80:d3:d3:fb:de:33:2c:7a:cb:
                    76:7c:97:fe:b7:f8:97:92:9a:d1:e5:c6:2a:ec:dd:
                    27:c1:60:d9:51:91:cc:ec:6a:56:13:17:19:56:77:
                    d4:96:96:b1:f8:90:7d:c7:1f:01:b1:5d:99:4d:fa:
                    bf:3e:ea:db:7d:f4:e8:79:95:61:d5:28:a4:27:98:
                    cf:2e:10:7a:d9:e1:71:08:97:25:73:76:bd:3e:32:
                    82:89:3f:b6:b8:51:3a:01:40:cd:7d:75:8b:2f:cf:
                    ff:49:b5:cc:74:ee:22:2c:53:4d:f5:f0:07:2a:5e:
                    cf:a5:48:05:0d:95:eb:e5:d0:a7:73:af:f4:a9:72:
                    fe:8a:71:0f:de:25:d8:01:50:b4:05:79:b7:96:53:
                    cd:0c:b8:ff:0f:22:31:56:34:fc:e0:68:ce:0c:64:
                    1b:57:eb:56:f5:aa:dd:62:30:bc:43:e7:b3:e1:85:
                    5e:e9:b9:21:1f:69:5e:6a:e6:a0:a8:07:a6:73:56:
                    33:db:32:d7:34:20:3b:b6:17:88:4e:1f:0d:0a:d1:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4E:A5:48:4B:7C:78:19:FA:11:ED:7F:16:BE:80:CE:79:5C:E8:B9
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:1a:be:a9:fc:f4:2d:c2:47:a6:39:b6:00:6f:50:73:94:
         60:95:4e:ef:10:2a:d9:85:a2:6a:9f:90:f7:9b:68:87:80:90:
         35:f1:9c:1f:94:6c:2f:fd:ca:88:75:39:07:f2:1e:1d:77:c7:
         60:c8:fd:26:07:f2:4e:61:e6:18:ce:b6:bb:dc:a3:9c:80:21:
         b4:7d:e3:67:6a:7e:f3:7c:27:a3:1d:1b:c9:66:aa:0f:b6:5b:
         9c:ce:49:6a:bb:83:9f:00:02:be:21:2b:42:45:df:f9:f8:0d:
         33:86:bf:9a:b5:7c:5b:b9:93:16:82:f9:fa:be:88:19:dd:98:
         3e:a6:80:6c:8a:38:62:50:b8:9b:97:44:16:e2:86:8f:d5:3c:
         29:87:89:0b:42:25:f3:3a:46:3c:45:bd:6d:d0:ee:d7:04:ee:
         02:56:26:ed:c2:26:dd:9c:cf:47:70:bb:ff:5a:68:4c:9d:be:
         45:78:fb:c4:ca:95:1c:86:e9:9e:82:ea:31:1a:9e:43:16:4d:
         a8:57:64:db:4b:ed:a8:df:dc:cc:25:ba:7b:a5:b9:42:aa:2c:
         6d:21:2e:71:56:67:3d:8e:40:e2:3d:f2:ce:9a:94:e8:62:71:
         1e:0a:aa:a7:57:83:2f:72:b3:c1:5a:0b:98:92:6b:71:f5:2a:
         5a:ed:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:53:52 2025 by rpki-client