Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File:                     ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier:          Poh+g6CAsI0mPJRHtrBpUPjrzKOY1FrPwIFepi4zSe8=
Subject key identifier:   91:0F:92:80:DD:44:23:CD:03:F8:E4:65:98:00:5B:73:1C:B4:65:4B
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer:       /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial:       019873E30B810F8229828D8FC54B0A486987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number:          0475
Signing time:             Mon 04 Aug 2025 07:01:55 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:55 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:55 +0000
Files and hashes:         1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: TGH359CxgU/4VUc5NofVzimi5K4I/xfIrHHVeKIktLQ=)
                          2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:0b:81:0f:82:29:82:8d:8f:c5:4b:0a:48:69:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
        Validity
            Not Before: Aug  4 07:01:55 2025 GMT
            Not After : Aug  5 07:01:55 2025 GMT
        Subject: CN=910f9280dd4423cd03f8e46598005b731cb4654b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:64:15:38:07:c8:1f:fb:fd:d2:1e:c3:5d:
                    4a:72:33:a7:15:13:c2:3e:71:d4:20:06:74:1e:e1:
                    e9:3c:2b:c8:38:81:2f:4f:9a:b6:19:a8:69:8a:1c:
                    37:ce:95:bb:1e:86:ec:f7:dd:e5:03:2f:7b:21:11:
                    be:1a:9b:1b:9a:e4:c2:ed:de:ce:6f:8c:15:16:29:
                    2e:32:93:b6:78:b2:72:76:63:ae:1e:be:15:ee:3b:
                    d6:8a:3e:87:05:74:8f:b8:db:e8:fd:61:c9:5f:81:
                    91:81:6d:b4:f5:ad:cf:67:cb:58:ed:2a:46:38:c3:
                    c8:3e:a4:03:fb:be:85:28:f3:a9:c6:20:83:9c:3d:
                    26:ba:5a:0e:c3:5e:96:40:3a:35:22:cd:47:6c:0a:
                    5f:7f:f3:cc:56:20:14:eb:ee:8f:03:47:ab:be:ac:
                    b0:94:54:19:64:f1:16:41:0e:05:8f:01:3e:a1:dc:
                    1a:5f:58:49:10:5a:ff:ae:ce:ce:d0:8f:10:55:8f:
                    82:c3:e6:34:7e:e9:95:2d:b4:cb:4a:d6:79:27:04:
                    95:0a:6f:ba:13:41:70:a0:d0:77:04:57:ff:b4:ae:
                    3e:0b:e0:32:d2:17:8c:05:8b:1e:71:3b:93:50:92:
                    2a:51:7b:cb:91:64:49:73:06:77:e0:ce:45:75:26:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0F:92:80:DD:44:23:CD:03:F8:E4:65:98:00:5B:73:1C:B4:65:4B
            X509v3 Authority Key Identifier:
                keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:28:1b:92:ea:5d:9d:f2:d6:eb:64:ff:31:f5:83:25:fb:e4:
         03:b0:7c:0a:94:b2:b3:02:8b:f2:a9:5e:f2:14:8c:17:3e:fc:
         65:94:e6:d7:20:cf:57:0d:8f:d4:e4:cf:0a:ec:fc:8a:61:48:
         43:05:96:13:0e:5e:08:75:4d:d9:35:e2:66:87:dd:6a:e5:10:
         4c:94:ce:4b:14:9a:59:88:37:50:10:2e:35:04:50:c8:c6:2d:
         af:1c:cc:fa:2d:7a:0f:3f:ac:72:ab:d3:eb:4a:39:20:b7:6e:
         cd:ea:df:00:d4:97:9e:66:d0:6a:e2:99:6e:4b:5f:d7:73:e5:
         de:50:e5:e9:84:65:1e:3a:a5:e0:98:54:31:4b:41:d4:58:5b:
         a7:38:1b:1f:34:11:75:27:01:ed:a8:3a:94:9e:8f:9c:68:af:
         e0:a4:03:4f:cf:c8:d5:d0:91:2c:0d:28:fa:54:93:a8:f0:a9:
         fa:80:5b:29:8f:9e:9d:03:91:5a:ec:82:6b:b9:56:8f:b8:d8:
         23:c6:74:78:12:d2:8d:db:b8:7f:71:02:02:98:f0:1b:4b:0d:
         22:8c:aa:77:09:0a:fe:4d:e2:05:23:62:db:ff:a3:b2:11:0a:
         d5:b4:73:c0:3f:bb:3a:49:4e:9c:aa:3c:7a:92:90:2a:0a:00:
         f8:e7:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:54 2025 by rpki-client