Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          KfaCIvMsiVhGcoI4dP4DjY4xo1ijOzq9h8wUg0nG7UM=
Subject key identifier:   75:B9:19:86:F4:B1:17:76:81:F0:13:89:E8:9D:0C:1C:CA:EE:71:6D
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       1A75D5669007AAB090BB13E4D4A5FDF27BE2C28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          0323
Signing time:             Sat 28 Mar 2026 21:50:57 +0000
Manifest this update:     Sat 28 Mar 2026 21:45:57 +0000
Manifest next update:     Sun 29 Mar 2026 22:33:57 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: FXKKjh7G5cMeF5v5ZKzkvC+lfte2NPlFz6VRXSr3dxg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 22:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:75:d5:66:90:07:aa:b0:90:bb:13:e4:d4:a5:fd:f2:7b:e2:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Mar 28 21:45:57 2026 GMT
            Not After : Mar 29 22:33:57 2026 GMT
        Subject: CN=75B91986F4B1177681F01389E89D0C1CCAEE716D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:6e:63:39:26:14:ab:1e:e6:dd:4d:74:09:
                    5e:a2:9a:83:cf:10:c3:64:70:0e:f5:b6:01:32:04:
                    44:b4:ce:b2:24:ac:b9:cb:ac:29:32:b6:f5:92:16:
                    1a:4a:10:8c:22:79:ad:90:f1:66:b6:4c:0c:3a:47:
                    0f:df:de:3e:ad:25:c6:04:9b:37:4f:c9:af:ee:bc:
                    de:e7:be:bf:ed:4a:cd:02:b8:c7:59:ad:9b:6e:33:
                    8e:9a:d7:da:01:a4:56:95:f6:eb:13:ce:6b:7d:fd:
                    39:b7:62:7e:5a:86:e9:16:31:b2:e1:b5:f1:af:94:
                    cb:6c:36:99:eb:2e:6b:b7:0e:cc:37:2d:71:20:be:
                    4a:c9:43:07:09:fb:f4:6b:ed:96:69:45:d5:49:78:
                    57:63:75:e1:76:ae:38:d7:80:93:4b:78:2f:98:8b:
                    5f:01:9a:00:81:5b:32:09:2a:d2:2f:eb:08:07:4f:
                    03:5c:5b:b9:62:7e:79:7a:0f:37:0d:58:af:05:31:
                    ce:75:fb:63:f8:d1:6d:cc:8d:f3:8c:e2:a8:a7:97:
                    a9:64:e0:dd:f0:b1:c6:94:ab:19:bf:14:a0:7b:58:
                    20:68:24:c9:6b:ac:5d:a0:1b:03:64:2b:e5:fe:61:
                    e3:5a:81:c6:22:ce:7e:6d:a2:34:12:be:d9:ba:06:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B9:19:86:F4:B1:17:76:81:F0:13:89:E8:9D:0C:1C:CA:EE:71:6D
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:16:b3:ab:7d:59:51:19:98:28:4a:16:62:db:93:43:4e:
         96:75:43:bf:31:3f:19:59:ef:1c:a0:6b:f8:9b:b5:44:14:3a:
         be:0d:6d:61:0d:be:be:6a:8f:dd:11:df:eb:99:98:5c:be:53:
         3b:ff:8a:20:79:ad:3e:5b:58:8b:d7:03:1b:c5:f7:b0:a1:cc:
         85:f7:5c:88:a9:a7:56:7c:b6:7a:23:de:60:45:b2:1c:b3:9f:
         0e:a3:97:bf:2f:bc:8e:29:00:b2:3c:3e:5f:6c:23:c4:5e:49:
         a7:37:7b:54:3e:33:6d:10:ea:3d:f5:e3:24:a6:7c:bd:4a:ac:
         dc:5b:eb:d7:e8:f7:5e:84:de:01:93:06:2d:1a:25:95:b6:9f:
         9b:b7:6e:e0:25:eb:c2:f6:ab:91:f5:cc:c7:a0:9c:08:6d:e6:
         0f:72:d2:88:1e:39:3e:15:f9:a7:e9:a0:ce:a0:34:68:ad:ae:
         e5:a6:82:48:70:18:ae:81:33:ca:5c:27:b6:54:a1:dd:d6:a8:
         20:bc:58:4d:a6:c7:96:25:fa:a0:cd:d9:86:b6:51:62:02:bd:
         43:ef:f1:d5:dd:72:33:df:f8:04:06:25:88:37:9d:69:5e:8c:
         9d:3a:1e:6a:8d:d7:96:ee:af:60:b8:52:ad:e2:ca:e0:7a:fa:
         52:ca:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:08 2026 by rpki-client