Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File:                     iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier:          sawrc10jCzMkl3tqG6jSfl1aYBB8GVp/P6D6kEs9CMk=
Subject key identifier:   E0:73:FF:AE:8E:09:10:06:9C:39:82:60:2B:2E:ED:12:21:16:61:34
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer:       /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial:       019F8FECDB013708DCD21B2E7C360FFD0C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number:          07AF
Signing time:             Thu 23 Jul 2026 17:01:32 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:32 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:32 +0000
Files and hashes:         1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
                          2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: +ld2QznjhPwcl7umMu8pRdJdg9igiE24gq/06w0RQ1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:db:01:37:08:dc:d2:1b:2e:7c:36:0f:fd:0c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
        Validity
            Not Before: Jul 23 17:01:32 2026 GMT
            Not After : Jul 24 17:01:32 2026 GMT
        Subject: CN=e073ffae8e0910069c3982602b2eed1221166134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:c9:8f:60:7d:3b:6f:ef:cb:3f:e1:6f:dc:
                    4a:c3:a6:eb:51:bf:09:39:be:ee:6c:ce:f6:41:20:
                    f1:06:15:0f:14:70:a3:af:f8:19:3a:7b:5d:1c:83:
                    1e:86:8e:f3:1a:cc:aa:ef:bd:eb:ff:e7:9b:fa:7b:
                    d4:ac:30:6c:60:73:91:4b:d9:94:01:d7:ea:79:aa:
                    05:dc:c9:84:ee:32:4a:c4:f6:92:91:c4:92:45:55:
                    44:cf:97:3f:9f:71:32:4b:b8:d3:82:30:8a:14:7a:
                    71:0b:d3:ac:3f:5f:4a:31:30:4f:0c:d0:8d:3a:77:
                    cd:2a:5f:65:7a:25:97:b2:64:fb:a0:ca:91:83:f3:
                    2e:17:63:b6:f3:8a:ff:a9:ef:ed:da:7d:90:11:42:
                    26:c7:5f:8c:97:b6:83:c5:ba:54:e6:68:1a:dc:2f:
                    66:15:f1:64:0f:e6:fb:e8:85:3c:a4:58:23:66:a9:
                    4f:ed:be:38:f8:55:a1:fe:47:89:16:89:71:b4:50:
                    3f:35:ee:4b:5a:e5:b0:6a:e1:96:bc:12:70:2d:13:
                    a8:f9:e2:43:7e:a0:33:31:7e:86:de:77:ba:8a:b0:
                    11:1e:8f:3f:5c:b0:16:06:9a:67:ae:c8:ee:02:1b:
                    cc:b5:f5:59:b9:1d:da:a2:ac:b4:61:11:dc:10:91:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:73:FF:AE:8E:09:10:06:9C:39:82:60:2B:2E:ED:12:21:16:61:34
            X509v3 Authority Key Identifier:
                keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:bf:9f:7f:8e:4a:6c:54:d7:ef:22:b8:74:b8:5d:c8:c5:
         ab:7a:e1:dd:36:34:2f:a3:7f:a9:06:5e:a4:81:36:9d:82:0a:
         19:cf:74:fe:26:0f:5c:35:ae:25:1f:62:ee:34:97:09:0a:4e:
         1a:51:0f:8c:41:94:4f:f7:33:ba:3e:08:a6:2a:8d:b3:6b:bc:
         46:36:e4:1f:2f:7c:14:0f:cf:c8:4c:77:7f:47:da:0e:45:c5:
         df:19:c6:c3:eb:71:f9:a2:48:d2:d5:95:7c:58:b7:0e:81:de:
         b6:1b:c3:df:bb:a5:db:7b:78:f8:51:c0:94:3e:14:6d:28:70:
         36:df:3d:81:50:0f:43:58:50:84:f2:ec:48:1f:c3:6f:6c:91:
         c4:55:7e:65:51:92:51:90:76:2b:5d:9c:c0:6c:53:ec:30:19:
         a2:df:2c:0d:6e:8a:03:c5:b2:b0:1a:b5:be:8f:52:a1:27:28:
         ba:15:b4:a8:e9:d3:f1:0c:27:b5:f7:c7:35:a9:a8:89:e2:24:
         7c:16:d2:e1:f3:9b:e7:6f:33:b4:92:15:db:d7:54:5b:20:7f:
         75:af:2b:69:79:4f:14:f1:b0:ec:0f:35:77:ce:f9:1f:04:1d:
         9c:e9:61:96:7f:62:c5:34:33:00:d9:86:e8:68:89:11:af:3c:
         3b:df:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:11 2026 by rpki-client