Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          t2Hgsb/6Q2KT56hVytCszpPPXf5wOQGLF+L7J1HVPvI=
Subject key identifier:   AC:69:CC:39:C5:1D:07:E7:FF:A5:4C:A4:7F:11:8B:CE:CC:FD:D2:5F
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       07812811D029570BA249B6C3301DCA879C487A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          0198
Signing time:             Fri 06 Jun 2025 12:26:27 +0000
Manifest this update:     Fri 06 Jun 2025 12:21:27 +0000
Manifest next update:     Sat 07 Jun 2025 12:42:27 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: MWMNomfDDLn4IcHXhyH1nAC+5k94gK8T7csQtoBBG+0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:81:28:11:d0:29:57:0b:a2:49:b6:c3:30:1d:ca:87:9c:48:7a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Jun  6 12:21:27 2025 GMT
            Not After : Jun  7 12:42:27 2025 GMT
        Subject: CN=AC69CC39C51D07E7FFA54CA47F118BCECCFDD25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:a7:77:9c:1e:27:4d:93:e5:d5:db:93:d0:
                    fe:77:ed:46:79:06:14:08:d5:4c:79:4a:aa:60:67:
                    1b:8e:2c:52:18:3e:60:e7:bf:4d:3f:c5:de:be:18:
                    bc:26:95:0b:4b:d3:3b:5b:4d:8d:3d:aa:fd:0e:fc:
                    d2:8c:fb:53:cd:89:60:82:be:7a:55:a3:a2:26:e4:
                    6c:27:80:45:ad:ab:9b:7b:55:f2:2f:74:af:b7:c5:
                    89:a6:37:5d:fd:4d:63:03:b4:0f:28:f6:93:94:88:
                    e8:91:4f:f7:8f:f8:08:74:dd:27:59:bb:e6:64:f2:
                    5b:61:ee:a9:13:ff:01:73:74:52:0e:48:91:2a:62:
                    a6:6c:42:ab:12:3b:02:13:9c:81:5e:20:b7:2d:fe:
                    44:7b:3a:3a:ed:64:72:6b:a8:13:56:4f:7f:18:f1:
                    ff:d5:84:69:02:74:06:a0:fd:70:ea:37:7b:44:a8:
                    66:5f:be:01:cc:73:b9:a0:12:b1:34:d4:8e:62:a9:
                    f0:2a:71:eb:ef:1b:75:1a:2c:e2:9d:04:4d:88:9b:
                    e8:5b:a5:ad:05:ee:87:55:6f:94:80:90:6c:b3:f6:
                    cc:4b:2c:c9:92:f0:39:fd:b1:e5:e1:24:2b:87:fa:
                    0b:15:da:44:c6:2b:fd:57:60:04:3d:5e:63:73:23:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:CC:39:C5:1D:07:E7:FF:A5:4C:A4:7F:11:8B:CE:CC:FD:D2:5F
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:08:f2:70:5f:77:ca:79:5a:53:7c:1c:3b:9d:5e:f3:ea:
         ad:03:2e:75:00:77:02:06:f4:34:fa:4d:90:3c:1e:ae:e8:0b:
         99:88:67:87:25:f7:cb:a0:1c:6b:6b:b3:ca:87:0a:ae:f3:68:
         73:77:98:bb:36:09:55:dd:c7:03:36:39:cc:d4:ee:01:50:9f:
         54:b9:ed:a7:2e:0f:c6:07:49:52:19:34:96:be:ac:3a:b1:04:
         08:d6:68:7a:87:02:4f:7f:05:a4:9d:39:1a:10:4d:ce:83:85:
         65:41:6c:45:dd:9e:82:62:e0:15:7c:fa:2f:f9:e1:55:25:7f:
         b8:ea:07:96:ec:ce:34:26:b9:2d:42:d1:d2:db:79:10:d9:51:
         bd:4c:63:35:07:93:c5:31:41:1e:6e:ab:24:8a:bd:7b:4f:23:
         a7:b0:71:92:e2:2b:64:00:88:0f:de:f3:1a:c5:bf:8d:4a:12:
         a9:ff:b1:c5:7f:ae:77:08:0c:c6:41:62:ec:bc:c3:5b:a8:40:
         2a:78:8a:40:91:b9:1b:0b:09:06:d0:a2:9e:92:ac:5c:90:26:
         a9:3e:02:b3:0e:41:d3:d0:92:72:05:2b:c7:6f:94:d9:98:0f:
         77:bd:89:8d:4c:46:66:76:b7:3b:2e:81:f4:10:40:2b:df:a5:
         c7:13:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:37:32 2025 by rpki-client