Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File:                     ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier:          xje6U7y4sSfgrAnkSFSX6id2GBb96/saqkpDxFb12lk=
Subject key identifier:   CD:48:87:C8:5C:77:03:BD:E6:38:66:0D:3A:2F:B2:F3:C8:B3:8B:6D
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer:       /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial:       019847778CD3D1EB7B859B5008E7D0C6CB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number:          045E
Signing time:             Sat 26 Jul 2025 16:01:13 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:13 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:13 +0000
Files and hashes:         1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: i1Xj9i95vmtnlBSoMt9+R8Jae1A6toN4K2DwLsTR1sg=)
                          2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:8c:d3:d1:eb:7b:85:9b:50:08:e7:d0:c6:cb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
        Validity
            Not Before: Jul 26 16:01:13 2025 GMT
            Not After : Jul 27 16:01:13 2025 GMT
        Subject: CN=cd4887c85c7703bde638660d3a2fb2f3c8b38b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:90:ce:80:fb:da:69:b8:d1:d5:96:4e:91:
                    fa:57:93:b9:b9:8b:a5:3a:d5:91:04:67:3f:37:93:
                    30:92:bf:f7:ae:22:ac:97:8d:31:af:20:70:b2:f2:
                    28:d2:c7:00:78:13:34:4e:ba:ad:e6:76:19:0f:be:
                    dd:8d:20:60:ff:3a:9d:45:15:9b:fa:af:14:57:c4:
                    c9:92:c3:2b:57:78:1c:6a:3f:6e:14:ae:95:a2:a3:
                    8e:6b:06:d4:5a:48:0e:8c:a8:bc:84:48:68:d7:8e:
                    e7:93:1a:91:9d:29:c4:7f:70:6a:81:cf:8a:b0:ad:
                    fd:b8:13:7e:9d:c8:09:31:36:f0:ed:e5:85:c9:b6:
                    d0:31:e2:16:1c:13:24:7b:3f:23:57:71:8c:7a:cd:
                    ad:14:e0:32:59:f6:ba:54:e4:40:55:94:59:52:37:
                    e7:0b:3a:e4:57:d3:2f:57:30:7b:88:54:47:0f:c4:
                    74:cb:ee:32:c2:00:b4:75:9b:5e:b1:26:93:b1:d8:
                    ea:d8:c5:36:c9:0f:32:c8:04:ff:77:8f:99:65:8a:
                    6d:53:66:45:a1:1d:19:7d:1b:8c:d3:d2:d1:56:47:
                    96:19:b2:69:0b:52:82:95:25:7b:5e:ad:15:db:ea:
                    b7:54:6a:3a:97:1f:a7:b0:eb:a5:9e:ed:f2:1a:6f:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:48:87:C8:5C:77:03:BD:E6:38:66:0D:3A:2F:B2:F3:C8:B3:8B:6D
            X509v3 Authority Key Identifier:
                keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1e:91:e0:7b:18:e3:a4:be:f2:4a:34:ba:fb:92:ce:f0:56:
         c4:ba:68:b9:6e:95:af:5a:09:a6:1c:e6:f4:79:f3:0d:dc:63:
         22:b1:70:16:14:72:59:8f:b2:d2:4b:79:83:e2:68:03:d9:3d:
         f9:da:d8:06:f9:a6:9e:22:ed:40:bf:0e:f2:e2:7c:4d:2d:66:
         a4:a2:11:35:08:ea:22:07:63:04:fd:4a:4f:e6:5c:7e:4d:d0:
         ff:08:ad:14:2d:c7:63:cd:72:ef:f8:72:b7:5c:40:ea:ae:98:
         51:93:59:d6:ed:35:cd:fc:f9:9c:af:81:19:16:65:87:c0:71:
         0a:5a:5f:d7:54:12:f5:1e:5b:85:00:11:e5:8b:b3:c4:a0:04:
         93:73:f9:11:e3:95:09:7c:66:87:79:12:50:fc:6d:e4:93:36:
         28:7d:d8:e8:40:d2:aa:b3:32:0e:cc:23:1b:be:37:c3:7b:df:
         2b:ce:dd:a3:29:89:37:51:1d:fb:96:a8:8b:16:58:e8:5f:8a:
         81:77:e2:05:99:f9:39:e4:d0:07:32:b2:d1:31:4c:a0:ca:dc:
         ab:67:35:c3:2f:6a:f4:e4:39:8f:96:e0:b9:5d:98:9c:9e:a0:
         3a:2c:4a:00:8d:b8:e4:14:ff:1e:7e:1d:24:86:37:0e:c5:19:
         de:60:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:44:41 2025 by rpki-client