Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          gQpff/WytDFkEiNKC0XD8uYOT97EUlJtMqDJLCtwEjU=
Subject key identifier:   61:B0:C1:C2:27:BF:3E:19:93:01:F0:A2:55:0F:C1:1E:C1:48:9F:0B
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       5CB7A431C032D8F4BB59BA595BA8141B48BD9CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          01B5
Signing time:             Sat 28 Jun 2025 11:56:28 +0000
Manifest this update:     Sat 28 Jun 2025 11:51:28 +0000
Manifest next update:     Sun 29 Jun 2025 14:44:28 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: QAteV0dqyoxt850ZhBp/ykLkVHktq3bS/dVbCzGWpqU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b7:a4:31:c0:32:d8:f4:bb:59:ba:59:5b:a8:14:1b:48:bd:9c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Jun 28 11:51:28 2025 GMT
            Not After : Jun 29 14:44:28 2025 GMT
        Subject: CN=61B0C1C227BF3E199301F0A2550FC11EC1489F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:b1:1b:b1:1b:1f:c1:47:79:0f:c0:5f:56:
                    5b:16:f3:1e:2a:fa:c9:e6:c1:35:fc:9d:cf:28:72:
                    bf:06:70:17:ce:38:6d:f3:b3:99:86:08:6c:18:fd:
                    af:57:e0:4d:66:31:04:1b:37:d6:11:b0:cd:62:54:
                    6c:13:d7:36:9d:9d:25:12:6c:41:49:f0:dc:e1:92:
                    2e:b4:67:a1:bd:bf:f9:40:fb:29:87:2c:56:c5:d3:
                    0a:bb:d7:c8:6f:bc:c4:c3:fa:14:e1:d6:36:f4:b3:
                    df:9b:e4:42:84:0f:50:9f:74:5f:63:f2:c0:b3:0d:
                    f0:97:81:bc:95:63:36:0a:1d:b4:6d:7a:84:c4:de:
                    70:23:46:76:bd:7a:92:70:94:62:98:98:fb:e0:29:
                    5a:fa:b2:73:67:ed:6b:cb:c8:f3:c8:32:d3:65:98:
                    54:e8:92:2c:cc:a6:a9:f8:89:59:18:7a:4c:3d:83:
                    cb:b7:42:7f:ee:cb:e4:e7:b7:73:42:34:bc:2f:65:
                    90:a0:77:d8:b1:4e:5d:69:66:f0:29:a2:fe:5c:a9:
                    45:c8:fc:13:d2:dc:f4:ac:5f:ec:6d:c1:8d:b6:65:
                    88:48:8e:86:76:90:88:1d:8b:69:46:0f:2e:df:ad:
                    42:65:08:6c:eb:00:9d:91:cf:52:46:6c:4c:62:c3:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B0:C1:C2:27:BF:3E:19:93:01:F0:A2:55:0F:C1:1E:C1:48:9F:0B
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:03:df:16:21:5c:95:da:c5:5e:75:a7:a7:0c:91:93:be:e2:
         36:a0:80:32:e0:ae:08:bf:62:23:28:51:fb:b6:aa:91:57:ae:
         5d:c1:cc:6d:bb:2e:4c:7e:ee:5c:7b:39:e8:2b:88:7c:63:ad:
         6f:ee:84:76:4e:9c:cf:57:c8:8b:d9:72:8e:1f:63:c1:a4:13:
         0e:80:1c:fe:71:9c:fa:1e:42:e2:c7:ac:5c:ff:cd:ed:65:7e:
         83:ea:84:51:7b:21:41:4c:74:1b:6f:0b:45:22:1b:5e:cc:85:
         72:b5:cf:b2:d9:62:bc:5f:0a:ba:16:36:44:d0:02:7c:5e:63:
         f6:8f:eb:63:ef:ad:02:6a:2a:de:b6:c3:a7:40:95:4a:79:65:
         f4:b7:3f:f3:2e:d0:19:d4:3f:44:59:df:62:b9:01:8a:96:40:
         b4:e3:4f:43:2b:6a:37:bf:be:ad:52:fd:ab:20:e2:70:d9:81:
         a3:d9:b6:9d:ae:a8:c2:e1:94:73:be:23:68:2a:60:82:aa:3d:
         a4:4d:51:07:17:18:c1:5a:bf:99:21:34:02:bf:ba:b0:26:be:
         1b:7a:15:14:d8:15:d4:60:ff:03:e4:b1:51:95:1c:76:3c:7d:
         77:c8:ee:e4:8b:6c:cc:ef:80:97:be:f6:14:06:d4:e9:04:b0:
         ea:b9:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:53 2025 by rpki-client