Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          LF12/tVKnzYTYb1V0Pa/jaPwH/TG6FxFAg8BFRtYU2A=
Subject key identifier:   6C:28:09:8F:08:6C:12:D3:1F:71:05:BD:83:0B:78:B6:96:DE:CB:34
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       019D27725A8DBC53A885E76141161A036447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          098E
Signing time:             Thu 26 Mar 2026 00:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:38 +0000
Files and hashes:         1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: EG9MJfJhfomk42DbeHve8lxj7ohMJfZwIcQyLjCrySQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:5a:8d:bc:53:a8:85:e7:61:41:16:1a:03:64:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Mar 26 00:01:38 2026 GMT
            Not After : Mar 27 00:01:38 2026 GMT
        Subject: CN=6c28098f086c12d31f7105bd830b78b696decb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:ed:30:da:38:48:28:1c:87:86:4d:df:7c:
                    55:62:1e:83:dc:bd:1d:7c:a3:b6:b7:92:f4:17:7d:
                    9c:d8:91:44:bb:db:3c:87:52:d2:cb:b1:5c:fe:5b:
                    d7:a0:63:05:bd:dd:a1:c2:a5:af:da:77:76:bf:87:
                    53:c3:82:15:ec:4d:43:9b:7a:89:4b:bd:1e:04:0b:
                    97:38:15:ea:86:91:d0:bb:32:bd:95:b4:5f:8f:e8:
                    2e:fc:14:28:a2:2e:09:64:df:8d:f0:66:2a:aa:fd:
                    82:07:7a:6d:15:d0:6c:3d:6b:e9:9d:bc:df:46:02:
                    6d:2f:b9:b7:bf:3c:12:15:92:f4:f2:9c:9f:70:ad:
                    29:ac:3b:e8:ec:e6:57:91:43:6f:f7:b1:c8:47:c6:
                    f6:cd:cb:68:18:cc:fe:75:fb:bb:cc:56:02:14:d4:
                    ac:17:62:ec:e4:35:7b:d0:a5:07:9a:83:b3:9a:2c:
                    6d:e9:91:d3:44:99:cc:b4:68:dd:37:d4:93:fa:d1:
                    0b:0d:9e:75:ce:1f:d8:d7:35:2b:ac:92:ab:43:7f:
                    dd:21:e7:23:24:7b:04:81:2b:24:42:89:c7:25:8b:
                    61:dc:fe:3d:0e:1f:80:ca:93:2f:54:26:d8:98:d1:
                    94:17:a9:48:0c:c1:97:ef:84:4d:23:81:30:50:e9:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:09:8F:08:6C:12:D3:1F:71:05:BD:83:0B:78:B6:96:DE:CB:34
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:71:b5:a2:cc:f7:6d:49:a5:e8:b4:4d:a3:62:b9:23:e6:
         39:6a:cf:1f:63:5d:02:3a:10:14:43:df:96:1a:b3:4e:72:dd:
         09:29:d3:37:fc:fa:a9:f1:ba:40:8b:49:94:4d:73:42:bb:f4:
         fc:62:08:b1:f7:ff:03:42:2d:3c:24:db:66:91:26:3e:32:f2:
         25:13:46:8c:d9:39:4f:f3:e7:52:26:8d:02:e5:6e:39:bb:5a:
         07:f2:19:0d:08:61:29:a7:02:de:43:0d:e5:9d:ea:e3:70:6a:
         51:b8:87:da:7e:8b:00:82:4a:d7:e1:96:2f:a0:18:2c:18:68:
         58:18:e1:2b:2c:bc:cc:d4:b9:89:48:4d:36:cc:1c:97:f9:35:
         bd:5d:8e:08:3f:1b:84:05:53:55:fc:e0:0e:e9:65:60:7f:3b:
         fc:25:16:75:0f:16:df:9f:95:85:c0:79:4d:41:57:d3:1c:51:
         9e:d2:2b:c9:29:94:5e:36:c3:4f:3c:c5:41:48:28:dd:cf:22:
         67:ec:b3:f4:49:80:23:96:03:f0:1c:ed:e2:42:7a:1a:b6:0a:
         f5:b3:ef:fd:17:0e:f4:bd:3e:33:b2:8a:8c:1d:82:f5:e4:72:
         b7:da:28:6b:c3:31:f2:dd:5b:c0:46:1c:85:01:e4:b9:49:a9:
         7b:86:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:15 2026 by rpki-client