Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          bTftFZ46fZGoRVBoGp9keHvWduNKd+cV2ZAwKhnJzVQ=
Subject key identifier:   9A:8B:92:B3:CA:CA:B4:F3:30:E2:11:3A:E7:32:EB:68:9B:F2:95:55
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       0196A0F6B804066E7273F922CD38D5B811F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 15:00:45 +0000
Manifest this update:     Mon 05 May 2025 15:00:45 +0000
Manifest next update:     Tue 06 May 2025 15:00:45 +0000
Files and hashes:         1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: WCJ3//zezPj90fp+zjBXAEJWoCeKdM34RJuViFF5g+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f6:b8:04:06:6e:72:73:f9:22:cd:38:d5:b8:11:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: May  5 15:00:45 2025 GMT
            Not After : May  6 15:00:45 2025 GMT
        Subject: CN=9a8b92b3cacab4f330e2113ae732eb689bf29555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:ed:4e:48:1c:52:ed:8b:ba:31:4a:39:2e:
                    fa:70:1a:7c:55:58:67:25:b7:02:19:c4:fc:08:66:
                    6f:fe:b0:9b:9b:82:c5:38:77:9d:61:f0:ee:e8:07:
                    a5:35:8b:21:1b:1f:6e:6b:ab:01:00:1d:c4:a1:c8:
                    52:2d:1c:b4:ad:f6:0a:c6:43:6b:17:19:51:94:89:
                    72:83:25:7a:64:a5:c6:88:70:24:2a:97:3b:3e:b0:
                    e8:a6:08:b1:a6:99:f3:6e:f0:54:be:dd:81:bc:47:
                    a3:dc:6a:56:58:a7:28:4e:e5:fb:50:31:1d:e8:22:
                    f6:f3:5f:82:74:c1:d8:02:45:ec:86:b7:09:31:d0:
                    de:7e:f4:19:3c:c8:78:1e:35:4d:cc:75:42:17:dc:
                    6d:c7:a1:d7:a6:ba:e5:72:a5:fe:67:69:fc:4d:ec:
                    8e:d7:27:cc:d5:28:1e:36:88:78:8e:8a:8b:d9:a3:
                    fc:42:b4:14:20:2f:5b:52:61:a1:df:8b:94:2d:ed:
                    97:93:fd:de:c9:ab:04:50:03:0b:b4:e5:4f:dc:a8:
                    30:23:2d:1f:fc:91:76:fc:86:c1:29:59:73:0a:55:
                    ac:7a:e0:0c:b3:44:98:9b:2b:d3:5a:97:98:72:43:
                    c2:08:31:7d:2f:f6:d8:14:a1:c8:8c:28:6f:9a:da:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:92:B3:CA:CA:B4:F3:30:E2:11:3A:E7:32:EB:68:9B:F2:95:55
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:23:39:0a:a9:ba:d3:dd:6a:e8:0d:bc:fd:19:39:90:8f:0e:
         8f:b7:ab:2a:b8:21:77:48:38:0a:d8:93:c1:6e:a8:c7:ef:da:
         4d:b7:db:36:0f:a6:e4:7c:f6:3b:b8:f0:d9:0a:65:6a:21:c2:
         9e:c7:03:f7:be:d9:13:d0:05:14:ae:04:39:86:30:f0:3f:d1:
         8d:71:82:f5:06:2e:7f:59:b8:cb:40:8e:3d:3b:68:42:05:2e:
         f1:ff:51:3d:a4:bf:a8:0b:a9:98:79:2c:e8:0f:5b:b9:3f:5b:
         7f:52:12:4f:02:fb:24:c7:fd:5e:05:3f:c1:e0:d0:96:0a:ae:
         6a:1d:08:12:e2:b3:23:57:e2:da:d6:08:0d:a2:2c:2d:6c:b8:
         40:77:fd:51:68:2a:2f:66:34:f1:d5:f1:c4:b1:5b:11:c1:da:
         5f:59:7f:bd:02:c5:60:3f:22:7c:4c:6f:31:34:f6:37:48:c3:
         9f:b1:fb:5c:73:bc:9e:a1:30:15:9c:42:c3:de:9f:78:43:86:
         3c:0a:93:99:de:f2:79:2d:37:07:e0:92:8a:3f:27:3e:59:9a:
         34:bd:48:2d:09:73:d2:49:d9:e7:cf:d8:3b:b0:30:33:ab:9c:
         25:03:06:da:13:51:88:2d:b2:ed:c9:42:17:37:91:87:13:29:
         af:06:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:39:08 2025 by rpki-client