Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File:                     iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier:          OPgN0lFYQMhqJuRtfmcN3laAaO+hv/RbnyO911m41B8=
Subject key identifier:   7E:0D:33:ED:79:74:F1:2A:12:B1:12:9C:39:D0:72:96:9F:5B:0E:10
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer:       /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial:       019F86448EB94432B836EA0D7F19478757B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number:          07AA
Signing time:             Tue 21 Jul 2026 20:01:07 +0000
Manifest this update:     Tue 21 Jul 2026 20:01:07 +0000
Manifest next update:     Wed 22 Jul 2026 20:01:07 +0000
Files and hashes:         1: ATrUCafiE1uHZv1VRXUBlVvz3XY.asa (hash: G6idk/KOPAuyobNUCA7+7o82BURsIjva246TWzSzW1A=)
                          2: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: E1TALWpkn/gNVfJu/8txhOOBlTwWabB4LEDilj5Qsfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:8e:b9:44:32:b8:36:ea:0d:7f:19:47:87:57:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
        Validity
            Not Before: Jul 21 20:01:07 2026 GMT
            Not After : Jul 22 20:01:07 2026 GMT
        Subject: CN=7e0d33ed7974f12a12b1129c39d072969f5b0e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3b:79:f0:11:2c:18:64:5f:10:af:67:33:f0:
                    7b:52:fa:df:2c:89:23:1f:a6:50:05:75:f7:a9:6b:
                    c4:a3:72:05:4b:af:b6:39:3d:03:06:89:d4:54:d4:
                    a9:be:09:1d:4f:d9:5b:72:5b:7e:1a:e9:16:16:69:
                    30:87:93:e7:ef:12:11:5d:94:c4:42:04:ca:fa:6d:
                    30:47:ca:33:81:00:ef:07:55:28:1d:75:95:70:ef:
                    87:bb:5c:67:47:e7:7f:45:77:02:0f:fe:18:4c:21:
                    b5:9d:f0:e3:6a:36:e6:7a:54:11:3a:57:79:db:39:
                    08:e9:e0:89:44:62:cd:bd:bb:4a:e1:0d:02:da:7f:
                    7f:96:e5:16:1d:37:1a:9a:b2:f2:8f:20:b9:4e:45:
                    e1:de:63:d3:d9:6e:a9:1f:35:c3:67:61:90:99:e9:
                    ad:05:84:4b:41:93:c6:b2:c4:3f:d8:68:1e:f0:b0:
                    00:4b:28:72:2d:08:99:57:a2:e5:a1:70:68:60:26:
                    a4:43:2f:ae:47:58:db:ab:3d:37:59:67:8e:84:d3:
                    1c:e0:32:5f:7b:18:aa:fe:f1:cf:41:d7:5f:20:75:
                    10:0c:80:8a:e4:88:84:3c:3e:12:15:d3:a6:1c:82:
                    af:88:8a:eb:9b:9a:ab:f8:b8:01:05:40:1e:95:e7:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:33:ED:79:74:F1:2A:12:B1:12:9C:39:D0:72:96:9F:5B:0E:10
            X509v3 Authority Key Identifier:
                keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9b:52:09:5c:7f:87:50:ae:1f:c4:4f:10:27:db:b0:31:de:
         ce:9d:e0:e3:32:b2:4f:a3:08:fb:b6:45:96:63:04:5c:a5:48:
         89:9f:e0:65:31:41:94:79:23:84:96:b5:d0:41:6f:67:9f:32:
         e1:a8:d3:1f:9f:de:5e:8a:8e:6a:e8:94:44:27:97:85:77:08:
         ad:7e:aa:07:15:2b:bf:b2:7e:49:98:ea:3a:7d:9a:ac:16:3c:
         85:69:ef:32:87:6e:9a:a4:c8:df:ed:ae:81:46:3e:e1:24:6a:
         04:81:f3:65:e9:87:87:ce:ae:c6:06:3f:36:e0:e6:51:cf:f5:
         9a:2b:a9:c7:1f:6d:59:9c:66:30:f2:cd:44:dc:10:ae:aa:53:
         5e:cb:8c:3c:c5:ec:02:cf:3a:ce:db:e8:f3:e7:98:b5:6b:f6:
         cb:c6:9b:bf:5b:6a:7e:b4:3e:71:9e:61:db:71:cf:04:a7:77:
         d1:2e:54:0a:c0:eb:ff:58:59:70:7c:a7:70:ac:85:82:d4:b1:
         c7:39:99:9e:a8:e0:a9:a6:f7:a9:60:f5:7d:77:39:dc:ac:60:
         b8:ad:88:74:37:17:b6:bb:5a:b6:b8:da:31:c2:67:86:a6:7a:
         a3:cd:52:8b:7b:af:48:19:96:cf:a3:f7:da:2b:31:d6:8e:34:
         40:55:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:18 2026 by rpki-client