Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File:                     ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier:          SRonWA2D7HGI8FLl6Pr4DKub1PHZ3RH7oyvgs/4a1GU=
Subject key identifier:   EE:76:36:53:8B:E2:07:02:AB:6F:18:DA:91:79:E7:BB:32:8F:97:A9
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer:       /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial:       019F92EE3B546C7ABE9AC0E2C950CE26F363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number:          18D8
Signing time:             Fri 24 Jul 2026 07:01:53 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:53 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:53 +0000
Files and hashes:         1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
                          2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: DzBTFAwIv4lVoebbbGsyblCB1kyqSozblaWgYAQbkwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ee:3b:54:6c:7a:be:9a:c0:e2:c9:50:ce:26:f3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
        Validity
            Not Before: Jul 24 07:01:53 2026 GMT
            Not After : Jul 25 07:01:53 2026 GMT
        Subject: CN=ee7636538be20702ab6f18da9179e7bb328f97a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:c2:d6:97:cf:bb:16:be:88:20:ff:29:70:
                    c0:c7:00:4e:37:80:20:70:c2:b6:87:a4:3f:eb:73:
                    7f:9a:5c:2a:af:e8:21:a2:4c:6b:13:a3:2a:24:6e:
                    f5:71:7c:ae:2f:6c:f2:50:d7:11:d2:d5:2d:a4:0a:
                    78:e0:fe:75:89:8a:8a:1b:f4:b9:b4:dd:62:f0:2b:
                    78:5c:e7:1a:3c:c5:31:c3:b2:e8:89:81:8c:1b:76:
                    32:cf:5d:a1:62:d6:dc:a8:84:98:63:c3:ba:7f:69:
                    1a:58:72:f9:82:a5:45:4b:fb:de:2e:e5:7c:14:99:
                    54:c1:fe:9e:74:72:0c:ff:fb:d7:97:82:0c:30:37:
                    19:de:0f:33:c3:98:80:f6:b6:a9:13:08:0c:27:fc:
                    92:d8:26:03:a9:21:88:1a:c3:b3:14:3b:80:9c:ed:
                    f9:0d:d3:0d:72:9b:ee:1b:eb:73:d4:8c:02:d0:34:
                    ac:bc:7e:62:29:b3:b1:88:e1:d4:43:1e:38:28:97:
                    e5:23:4c:b7:f8:c7:8b:2a:70:23:4a:7c:da:17:9e:
                    7d:03:96:7d:52:89:56:72:5c:64:96:dc:90:25:18:
                    2b:72:07:71:d2:d4:00:5b:7f:87:8b:bd:a5:0c:b8:
                    d7:d9:5b:71:6b:40:43:2b:a9:52:d4:c4:f0:ef:7e:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:76:36:53:8B:E2:07:02:AB:6F:18:DA:91:79:E7:BB:32:8F:97:A9
            X509v3 Authority Key Identifier:
                keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:64:78:b5:f9:35:7e:6f:97:b6:bc:84:6f:84:61:e7:52:
         6f:f8:7b:42:80:29:56:58:43:33:35:89:45:09:e9:3d:9a:b1:
         95:04:9a:09:fd:28:49:92:d1:d1:d0:0f:d0:e5:75:1e:d1:ce:
         b1:69:ad:12:e2:d1:a7:76:4e:48:a5:87:ab:7c:82:9e:51:6b:
         96:21:ba:fb:2f:74:9f:bb:2d:a1:f5:bd:31:3c:81:40:1c:cf:
         a8:3c:00:e0:0b:ea:ce:56:12:dd:8d:b3:57:c7:ca:b0:bf:b7:
         d4:6d:c7:81:f4:79:86:31:00:8d:41:b4:0a:ec:51:65:49:bf:
         78:4b:7a:c5:a4:ad:82:a5:f4:ab:6d:32:c1:55:48:37:94:d3:
         a7:b4:df:23:3b:28:d2:bd:28:1d:68:42:48:5b:8e:8b:57:99:
         59:88:6a:0c:0b:a8:4b:f7:35:17:c9:12:79:9b:63:73:bf:f1:
         64:21:89:e6:23:e2:19:66:e8:e6:a4:91:a6:3a:6e:22:12:be:
         40:d7:7f:8b:7b:b3:ed:af:11:f9:aa:c2:6f:27:b2:f7:0e:ba:
         c7:2c:67:ec:a2:4a:c3:54:38:7b:a1:6f:fc:d5:1b:05:3a:04:
         1b:09:87:21:1d:bb:dd:60:04:4e:37:68:a7:98:7f:e4:77:86:
         0e:cf:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:03:22 2026 by rpki-client