Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          YUuh/ep1Jfr9mhQ2HahqkteHrPU+5iIgkajjgOsCggg=
Subject key identifier:   55:FF:3E:4C:B3:13:C8:58:28:6C:DB:31:36:AF:E6:90:81:12:99:AF
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       7EFD87989BE4B318F127BCDE4EA477204CE208DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          01E8
Signing time:             Mon 04 Aug 2025 13:03:09 +0000
Manifest this update:     Mon 04 Aug 2025 12:58:09 +0000
Manifest next update:     Tue 05 Aug 2025 13:42:09 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: NUG+iCqQDd2OJCWtPBYaHI1dSrV9UuAAt3CPMuREFEk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fd:87:98:9b:e4:b3:18:f1:27:bc:de:4e:a4:77:20:4c:e2:08:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Aug  4 12:58:09 2025 GMT
            Not After : Aug  5 13:42:09 2025 GMT
        Subject: CN=55FF3E4CB313C858286CDB3136AFE690811299AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:64:69:a3:19:dd:9f:1f:5c:aa:89:20:73:
                    49:06:f0:08:8a:0e:53:de:34:54:24:8a:05:5b:64:
                    0b:d1:e8:a2:95:af:7a:05:88:ad:4e:08:6b:f9:4a:
                    1b:e5:7b:90:72:54:b5:1f:5b:82:cd:5c:06:11:c1:
                    c2:42:a5:23:35:96:72:8b:a1:16:9f:3c:a1:85:eb:
                    1a:29:c9:63:a2:af:b9:a6:97:b7:7d:82:6d:d4:d5:
                    29:70:b4:5e:81:a6:bc:0b:eb:21:4a:5b:c7:1c:3b:
                    be:ef:6d:a9:1e:dd:38:4e:93:f9:44:28:f8:40:89:
                    cc:8e:9c:bd:c7:d1:37:dd:d1:4a:0e:00:02:f8:59:
                    c7:4b:37:fc:cc:2c:65:55:35:74:76:88:cd:14:c4:
                    e5:c7:1e:dd:8f:f3:93:9e:b1:45:61:e8:9f:8e:da:
                    67:82:98:8d:f0:04:ee:3c:56:9b:ac:b2:71:a8:4e:
                    c2:4f:9c:3f:29:10:cf:54:20:66:2f:25:21:f8:f9:
                    64:f4:32:a4:59:81:fa:b9:6c:10:49:e4:5b:a4:8f:
                    49:73:2c:32:ef:75:7a:ed:17:12:22:77:1c:96:f3:
                    4a:aa:15:dc:57:e5:ab:e7:50:ce:3a:06:52:5e:6d:
                    e3:83:f1:1e:b3:8e:b4:34:1a:45:10:2c:11:5b:36:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:3E:4C:B3:13:C8:58:28:6C:DB:31:36:AF:E6:90:81:12:99:AF
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:35:50:e1:21:3d:5b:89:d8:b5:c6:49:a8:49:dc:42:29:
         e0:a1:53:01:51:bb:5d:db:71:20:26:19:3e:29:53:1b:6c:bf:
         6b:26:f4:35:62:c7:93:8c:7d:26:40:d8:b3:1d:c6:a1:c0:55:
         b3:a0:14:f7:93:fb:e9:89:23:ec:d2:c4:ae:2d:f0:f4:75:37:
         5e:72:96:02:db:42:d1:b9:68:e8:bd:4f:49:3a:bf:b2:a9:48:
         cf:39:a7:e9:f4:f9:44:e2:51:10:54:81:50:29:19:f9:b6:c2:
         86:00:51:62:8b:d2:75:50:3f:b4:d9:e5:8a:84:89:48:3a:1f:
         49:f2:51:9f:06:13:54:19:16:da:23:f4:c9:de:67:74:ad:eb:
         51:45:a7:bc:fe:d6:0c:6c:9d:af:4c:a1:32:bc:96:06:e0:9e:
         b2:c0:b9:dd:46:7d:0d:8f:ae:39:ee:64:e1:a6:35:48:7d:c1:
         22:48:5f:1a:99:df:4e:12:10:db:4d:5b:1c:79:10:36:72:d7:
         c1:3c:5a:d3:13:a1:a8:c3:de:83:26:f5:b9:ed:e8:43:5b:b4:
         68:09:32:84:9a:f7:60:0f:03:d2:1a:84:95:c7:48:3f:61:d4:
         c3:19:69:cc:a4:94:f9:6a:a1:1b:b4:34:17:92:ed:92:0f:32:
         79:2f:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:40 2025 by rpki-client