Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          66kjty1EGEid29VRQzH5XrwT9Di9qgw0VXdHt/F4NDg=
Subject key identifier:   1C:6A:DD:E0:8D:F5:F4:53:E2:37:21:9E:D6:DA:8A:82:F7:2F:FB:F5
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       239E517B17549A0E0BA2BC02991A8FA67BD47095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          0201
Signing time:             Sat 23 Aug 2025 04:23:13 +0000
Manifest this update:     Sat 23 Aug 2025 04:18:13 +0000
Manifest next update:     Sun 24 Aug 2025 06:09:13 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: M0muBIi2ihHN/jlRDnEOdKUqacrN92HoWPrAzqxVWvU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:51:7b:17:54:9a:0e:0b:a2:bc:02:99:1a:8f:a6:7b:d4:70:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Aug 23 04:18:13 2025 GMT
            Not After : Aug 24 06:09:13 2025 GMT
        Subject: CN=1C6ADDE08DF5F453E237219ED6DA8A82F72FFBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:9d:b8:64:d0:43:8b:42:cb:20:f5:27:dc:
                    7d:57:dd:93:e9:a6:e3:0e:23:66:0d:e7:7b:85:e7:
                    2a:90:0d:fa:0f:dc:56:60:6c:71:76:f6:76:9a:8b:
                    7c:5b:03:0a:27:46:1b:3e:c2:83:c2:c6:c6:c4:90:
                    08:fe:fd:6e:20:9e:b6:56:84:b4:1e:20:9c:c0:29:
                    f6:28:db:e5:ec:ae:97:c4:3d:ef:14:74:ad:23:21:
                    79:8e:1b:8f:1b:b4:c7:a4:19:b5:16:ce:be:6b:5b:
                    7f:66:fe:79:ef:28:86:e9:0a:df:d2:ef:b4:de:25:
                    4b:3a:c7:9b:a4:a8:6a:7d:2c:e3:1a:9d:d8:f1:8a:
                    c9:c4:9a:63:f4:ca:b0:6c:2f:ce:e8:48:0b:e8:6e:
                    51:7c:f0:87:ac:df:af:e8:fb:da:29:1f:a2:66:c1:
                    8e:a9:ab:11:b5:35:22:f1:41:91:1f:aa:1f:27:7d:
                    60:63:a8:69:1a:c8:02:7b:6b:6c:2d:4c:ce:58:14:
                    fd:b2:0d:69:30:cf:f1:90:d0:3a:ee:7f:3e:74:52:
                    ae:7c:b2:d9:63:90:d1:97:3b:e7:a7:fd:e6:6a:05:
                    2a:04:c1:b8:d2:52:9a:4e:45:15:30:fb:2a:53:d8:
                    a8:39:5b:26:93:bf:9a:d1:cb:a4:40:df:06:26:50:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6A:DD:E0:8D:F5:F4:53:E2:37:21:9E:D6:DA:8A:82:F7:2F:FB:F5
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ad:d5:71:ac:bf:4e:11:e2:42:74:71:b8:6b:0a:44:c4:a0:
         68:73:74:7a:fd:69:e5:56:16:db:96:55:89:29:ec:f3:d1:f1:
         51:26:d7:1e:eb:9a:aa:90:69:6e:b0:51:ad:97:fa:e5:f4:4c:
         bd:25:7c:07:db:c1:ba:07:ab:33:82:99:26:22:a2:1a:9a:cc:
         7a:f8:d1:54:4a:ea:12:63:c8:4b:93:0d:62:97:35:18:a2:49:
         3f:ab:b4:0c:44:d9:81:d7:b2:aa:a8:1c:c6:1a:f9:9b:b9:c4:
         fb:fa:53:bd:94:f9:b2:ae:c9:fd:b1:d2:32:80:ce:a9:ca:f0:
         20:26:40:63:2f:9e:4b:0a:43:9e:47:2c:76:43:79:5d:3a:54:
         dc:a6:af:cd:51:e1:b5:ed:ad:25:f2:77:bf:43:25:96:a6:16:
         57:ae:14:e6:a4:39:c7:48:7f:d2:d8:0a:f6:87:30:78:4f:ec:
         74:ff:4b:08:c3:11:12:01:b8:a9:6b:16:d2:6e:e0:a0:e0:04:
         00:39:42:32:7e:da:75:5c:33:42:5a:fc:07:82:10:76:cc:36:
         50:8d:c9:85:2b:e3:29:b7:81:5e:4c:2f:6b:72:fb:02:16:69:
         13:e0:f8:c6:78:6c:96:26:40:86:ec:2b:2b:76:5b:c1:e1:44:
         b3:d0:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:11 2025 by rpki-client