Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          WS7rSzuaoXpm6Qfcdbm1ndWffSxuSDC6gs4CFzHnM3A=
Subject key identifier:   94:E3:9B:F5:3D:4A:C0:D5:4D:3E:24:B9:95:A1:F5:B7:63:53:92:0C
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       27E065D8F0382840D8BD8EA48EA4484F2E983AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          0215
Signing time:             Sun 07 Sep 2025 03:28:14 +0000
Manifest this update:     Sun 07 Sep 2025 03:23:14 +0000
Manifest next update:     Mon 08 Sep 2025 04:35:14 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: liE+jolElqtbja3mvQFu/PhRv3ZDSXAJXNHxTxyMbpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e0:65:d8:f0:38:28:40:d8:bd:8e:a4:8e:a4:48:4f:2e:98:3a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Sep  7 03:23:14 2025 GMT
            Not After : Sep  8 04:35:14 2025 GMT
        Subject: CN=94E39BF53D4AC0D54D3E24B995A1F5B76353920C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:c5:84:d2:ef:0d:0e:c3:b2:e0:03:dd:31:
                    5d:e1:bb:58:12:78:50:d0:1f:0d:4e:d9:2e:35:2d:
                    46:fa:c7:2b:0f:16:16:7b:29:d8:e2:0d:51:8f:13:
                    4b:54:f1:54:43:32:2c:70:af:e9:2b:7c:48:3e:a8:
                    03:be:67:c8:39:3d:f3:fa:9b:f5:d0:9a:f5:a2:e2:
                    78:a7:4e:26:ca:74:52:08:5d:0c:79:e7:70:be:32:
                    ab:8a:c3:72:aa:de:2d:6a:cc:b3:73:a9:cc:fd:3b:
                    4d:23:57:8b:99:6b:ff:19:bc:2f:aa:86:e6:85:37:
                    cb:3e:0d:bf:da:ea:be:4d:81:5f:fc:2c:50:25:9e:
                    f7:49:e7:4e:22:b2:5f:f4:36:a5:0a:6c:ba:7f:4e:
                    d1:5f:ba:b2:93:3d:e9:4f:c2:24:22:fb:ed:d4:23:
                    11:cb:5e:95:74:b0:85:61:08:60:c5:82:19:a5:d6:
                    65:03:bb:7c:d8:9e:49:a0:da:d8:2c:96:b4:b6:23:
                    02:ae:66:3e:b6:98:f4:63:03:78:ad:be:d7:34:5b:
                    a3:3a:b7:c0:b2:f5:32:74:a7:48:1f:66:1b:33:df:
                    a2:88:bd:af:43:90:9c:c3:75:2d:42:6b:63:d2:06:
                    20:33:31:21:c3:00:fb:48:39:47:f7:23:3a:41:2a:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:9B:F5:3D:4A:C0:D5:4D:3E:24:B9:95:A1:F5:B7:63:53:92:0C
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:62:a3:d9:f4:00:57:a9:d9:d8:4b:bf:88:2a:d6:e3:4a:38:
         64:f4:04:e7:88:3c:e8:a2:d6:4f:6a:69:75:17:ae:53:ac:80:
         ae:09:b3:02:07:06:2f:5a:3b:23:52:a9:b1:31:e7:01:fd:9f:
         fb:dd:0b:15:79:68:8f:54:92:83:4e:92:42:18:66:de:2e:d9:
         9c:90:72:0d:59:b8:ca:27:d0:b6:23:b5:ba:51:61:9e:bc:e5:
         eb:84:a3:1a:de:1f:f6:65:ec:50:62:b3:7c:bd:3b:ea:ef:84:
         81:54:3c:93:17:c4:cb:d4:51:aa:fa:47:1c:13:85:f1:b2:6b:
         e7:87:13:36:78:39:61:67:4b:ba:07:60:ac:11:d3:62:90:00:
         52:83:28:cb:71:fa:72:cc:f4:14:76:2d:f6:89:76:5b:f3:a0:
         dc:ea:c6:5b:45:ed:cd:c2:cb:04:b8:e0:76:a0:2b:21:1a:d6:
         c3:63:66:d9:ff:f7:d4:6e:87:3b:6b:52:7d:8c:c0:11:43:f1:
         31:c0:b9:86:bb:9f:b0:e1:b7:c1:17:83:7b:09:4d:af:49:3d:
         ea:b6:51:ab:76:6d:a1:e3:a2:37:7e:a6:6d:1b:e0:5d:aa:6d:
         75:3d:62:69:c7:3a:b0:39:b6:6b:ee:6d:16:d7:aa:8c:fa:5f:
         f9:d8:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:08 2025 by rpki-client