Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File:                     ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier:          PkKSqfRgHHvy38vCP/Qq+spDJfRcvaKS/hg/S65l5XI=
Subject key identifier:   6C:BA:6E:11:3E:06:8F:B6:F1:95:83:DF:12:ED:9C:5A:71:07:A9:43
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer:       /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial:       019F935B1C033F1CB1D6781C90DF1016D2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number:          0826
Signing time:             Fri 24 Jul 2026 09:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:49 +0000
Files and hashes:         1: DbhDBOu-4RlIo0LqivfKmdkWxlg.roa (hash: x5EChnPdDWgKtRO63MP5f9gNs9e/wtDm0vinLAhafF8=)
                          2: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: S8pAnBgOa1rORO1UEiBOgBOkY6RIKIMalnBGbr3lK0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:1c:03:3f:1c:b1:d6:78:1c:90:df:10:16:d2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
        Validity
            Not Before: Jul 24 09:00:49 2026 GMT
            Not After : Jul 25 09:00:49 2026 GMT
        Subject: CN=6cba6e113e068fb6f19583df12ed9c5a7107a943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:f2:aa:b5:7a:30:cf:9b:90:d2:32:69:ca:
                    41:7a:15:00:a0:27:ee:e7:7f:5d:53:5d:3c:bf:9d:
                    62:9f:6b:c4:ff:37:4d:d4:52:eb:c1:ce:35:0e:dc:
                    69:4f:ed:9e:62:55:71:92:3b:ab:8c:a7:8e:eb:41:
                    a4:c3:c7:26:f5:79:e6:f4:fd:6a:43:50:6c:36:49:
                    9c:20:6d:39:cc:d0:ec:6b:40:0f:1f:1f:54:92:5b:
                    52:7f:6e:bc:3e:1e:7f:a7:21:b9:8f:bb:4f:97:2f:
                    8c:93:a4:5f:24:11:e2:2e:d4:cd:3a:ff:a5:dc:a7:
                    b0:17:e5:5f:84:73:19:1e:43:32:c6:59:bb:30:e5:
                    4d:a7:9f:a9:e0:c8:11:c4:f7:4b:3f:04:ea:ce:7f:
                    5d:22:3e:d6:60:78:11:23:dd:bc:83:d9:8c:ce:e5:
                    58:09:77:d0:d4:b1:71:ea:b7:1b:73:32:90:7d:60:
                    47:cd:7c:bc:c4:87:16:27:ff:4c:a2:02:0c:4b:08:
                    81:87:ea:2d:b6:e6:07:60:c7:b0:be:d6:a0:7d:7a:
                    7b:36:8a:da:aa:c7:85:71:aa:e5:78:2d:b0:39:45:
                    54:fd:a7:91:49:a1:53:6a:be:c0:bf:90:4d:e1:9d:
                    89:64:5a:7d:3c:73:8b:0c:a5:71:29:17:6e:e9:ad:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:6E:11:3E:06:8F:B6:F1:95:83:DF:12:ED:9C:5A:71:07:A9:43
            X509v3 Authority Key Identifier:
                keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:31:11:c0:68:f4:f1:09:8d:e0:28:10:ed:67:88:62:f1:
         17:ea:7b:2e:5e:65:d8:9c:b7:88:63:6f:b1:2c:ee:ef:da:1c:
         31:19:b2:05:10:4c:fb:8a:b3:4d:71:e2:6a:e3:14:dc:ac:12:
         c0:e6:f7:4a:c4:09:9d:0a:e6:e5:de:a8:89:5a:10:9f:1e:82:
         f4:b2:9b:df:55:78:19:c9:25:c0:18:ad:48:f0:59:b6:56:30:
         46:f8:22:02:98:fe:20:88:95:e4:cf:af:b3:da:b0:33:14:c6:
         b1:9b:ab:4d:8d:f5:a0:80:70:9c:06:0a:7c:b3:a9:0e:13:63:
         f7:c5:e4:2d:bc:74:7f:a9:65:d7:2d:7f:cd:36:60:a0:00:75:
         a4:a9:f3:eb:8e:35:2b:b4:5b:f8:79:ab:ea:42:f2:e7:b0:8d:
         3a:0c:ec:eb:06:cb:9a:94:4a:be:5e:6a:27:c6:59:6d:14:36:
         9a:f0:fa:68:4d:42:90:85:50:a7:af:df:a2:8a:2f:c4:7a:ac:
         27:85:dc:4f:a5:80:d3:1a:ab:a0:1d:55:c9:ef:a9:3b:38:36:
         61:86:ba:69:42:e1:a8:a0:4d:e7:cd:fc:4d:4a:83:42:03:d5:
         18:66:fe:15:c1:2a:c3:dd:e6:f2:48:18:db:84:a9:8b:bf:9c:
         3e:1e:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:30 2026 by rpki-client