Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File:                     ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier:          keZgSZVqLFO4Y08jTvM+r4B96xWw8BDHYfdHCxyAEdU=
Subject key identifier:   06:FD:F5:91:19:48:FD:E7:87:C9:AD:DA:25:25:88:88:64:37:87:2F
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer:       /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial:       01A08C7B54834506D6CC35092F84D3C74F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number:          08A7
Signing time:             Thu 10 Sep 2026 18:01:27 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:27 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:27 +0000
Files and hashes:         1: DbhDBOu-4RlIo0LqivfKmdkWxlg.roa (hash: x5EChnPdDWgKtRO63MP5f9gNs9e/wtDm0vinLAhafF8=)
                          2: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: ZRAbxH6dr3NJ5mEahePLnywF+1rw795a0/FkUeaEgBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:54:83:45:06:d6:cc:35:09:2f:84:d3:c7:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
        Validity
            Not Before: Sep 10 18:01:27 2026 GMT
            Not After : Sep 11 18:01:27 2026 GMT
        Subject: CN=06fdf5911948fde787c9adda252588886437872f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:c1:d3:90:bf:c4:66:da:be:54:7b:3f:f8:
                    24:8e:37:81:29:c6:b0:eb:07:87:10:0a:ab:b2:0e:
                    72:11:68:e0:81:88:a9:22:26:74:89:54:38:0e:a8:
                    5b:19:6e:b7:8b:00:f5:f1:22:8c:66:07:84:cf:3f:
                    df:b2:92:a8:c7:89:38:50:73:e1:1d:a0:f5:f5:fc:
                    cc:1b:1f:2e:e1:fb:1b:9c:e8:0d:9f:7d:94:72:6a:
                    f8:c9:32:2f:48:c9:49:bb:75:85:44:81:06:a9:0b:
                    96:95:6c:5f:ba:7d:b2:92:2d:3c:d4:e5:05:f8:9c:
                    d1:b3:00:76:c2:e6:ca:a8:9f:0c:fc:a8:7d:90:8a:
                    3e:49:e4:b2:aa:eb:66:04:18:9c:4e:5e:da:b2:a0:
                    ba:49:12:5d:60:40:e7:0f:95:86:fc:43:8c:1b:f7:
                    55:d8:19:eb:e5:27:85:48:e3:83:5c:7f:f5:a1:e4:
                    e1:a6:c0:40:86:1b:32:65:45:0f:0c:1b:2d:c2:b0:
                    da:44:48:a3:6f:a1:da:84:3e:c5:cc:3f:68:4a:37:
                    43:1e:46:dd:af:cb:fc:c3:02:3d:28:d1:56:0d:69:
                    b4:bf:e1:86:5d:85:8f:e1:52:de:84:7c:58:71:32:
                    56:73:52:28:90:69:ff:85:fc:b8:cd:f2:e5:00:af:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FD:F5:91:19:48:FD:E7:87:C9:AD:DA:25:25:88:88:64:37:87:2F
            X509v3 Authority Key Identifier:
                keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0f:b1:88:5f:29:41:95:52:8f:83:58:72:b0:f4:fd:7c:f2:
         f4:ef:19:1a:57:c0:9f:53:b2:69:95:43:bf:a5:29:48:86:cf:
         87:90:91:67:cd:58:3a:f3:d5:b5:73:81:19:de:54:d8:f1:6f:
         9a:07:53:1c:b4:e6:b8:3c:a3:64:26:ab:ba:35:66:40:5a:ba:
         e7:8e:22:4a:ed:a1:40:6b:90:39:26:45:a5:1e:2e:64:c9:ba:
         81:39:42:9e:ce:42:02:97:23:1a:9b:4a:00:47:16:d9:95:ee:
         ea:24:23:9b:85:2c:0d:32:9b:21:4b:2d:5d:34:0e:fa:61:a9:
         67:74:0d:dc:1d:46:22:0e:4c:fb:45:82:9d:20:d3:27:6b:5c:
         98:71:0d:6a:3c:06:0e:8c:56:4e:1d:8b:5b:1e:e8:cc:75:70:
         d6:6d:9c:08:a3:b6:d2:13:ff:b3:54:3d:32:40:67:3d:12:f9:
         8c:6e:8b:25:58:fc:f9:dd:c1:24:e2:cb:a6:6a:e7:7a:de:6d:
         77:d6:37:e6:dc:c4:4c:f7:64:d4:ed:4e:ff:a6:ef:ed:a3:5f:
         cf:15:d4:5b:0f:cb:f9:47:1f:ee:7b:70:8a:e9:23:bb:c9:12:
         14:3f:9e:e7:a9:6d:79:e3:ba:7f:2d:50:ae:30:f0:d2:6f:5d:
         1a:44:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:14 2026 by rpki-client