Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          OH0t75NMik/W/sgKQhx/hC3QwhR9tI0oeAVWhNlIA2E=
Subject key identifier:   96:87:13:C3:BF:A6:B3:A7:81:E4:F3:6B:70:A9:E6:47:9F:AA:1E:89
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       0199FCC69BA3F7EAFB52F8E69C165DB305F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          07EA
Signing time:             Sun 19 Oct 2025 14:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:38 +0000
Files and hashes:         1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: 2Haa5nGPVI9JSH53FB51Gnb9XF4C/T20rVBcE/juSSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:9b:a3:f7:ea:fb:52:f8:e6:9c:16:5d:b3:05:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Oct 19 14:01:38 2025 GMT
            Not After : Oct 20 14:01:38 2025 GMT
        Subject: CN=968713c3bfa6b3a781e4f36b70a9e6479faa1e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:b3:97:50:d3:0e:f8:71:1f:37:c3:f6:37:
                    0a:32:15:a9:85:5b:86:db:b5:1c:21:e9:7f:2e:00:
                    55:84:f9:23:6b:22:04:80:2d:d0:31:8b:e7:8c:93:
                    e2:ed:fd:97:89:58:49:34:6c:df:0b:fc:45:75:02:
                    2e:42:53:8e:dd:d0:16:78:2e:4e:cd:12:11:53:8f:
                    ea:5d:0c:21:13:14:bf:b0:cb:bf:c6:99:6d:93:e4:
                    ee:24:82:af:2d:a5:a4:a2:26:51:d6:d8:92:c6:15:
                    14:be:b4:ac:16:e1:dd:84:f0:58:3f:08:ae:06:80:
                    2c:92:2c:05:f4:be:a2:0f:24:9b:08:8f:a8:85:a1:
                    89:ba:87:ae:ab:08:c5:cb:e5:2a:79:bd:6d:e2:70:
                    df:67:76:06:01:6d:2d:b2:87:70:49:99:d9:33:d9:
                    74:0e:f5:20:06:36:30:43:09:e2:7b:9d:c9:a1:4c:
                    a9:b7:b2:55:53:c4:9c:28:6d:14:62:ac:dd:df:f0:
                    8e:2c:9c:57:c3:a5:ca:f3:89:73:22:7e:a6:ad:94:
                    5b:b7:23:f7:a1:86:f8:6b:10:3c:17:34:f1:81:d1:
                    5b:c7:01:c0:15:b0:2d:58:81:3f:41:23:32:3a:7a:
                    07:ad:2d:f3:43:2e:0c:21:62:89:8a:8f:30:b5:cf:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:13:C3:BF:A6:B3:A7:81:E4:F3:6B:70:A9:E6:47:9F:AA:1E:89
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:28:e3:2d:e5:b4:d5:af:8d:00:4f:99:80:18:a1:a2:c8:8e:
         73:31:49:c4:17:5f:8a:a0:ff:03:04:ec:a0:fe:17:ec:b7:de:
         f9:eb:fc:72:ce:b7:96:84:b8:4b:1f:e1:f7:8a:27:e9:18:f6:
         ed:b9:4c:b3:b1:cd:7c:ea:e8:5b:2c:12:d7:ad:d6:ce:2f:41:
         50:f4:e1:d0:ef:98:51:31:fb:a1:c0:14:61:0b:d5:27:2e:a0:
         9c:ac:4b:ca:f4:ac:9b:c8:fe:ad:db:13:7f:5e:7e:be:de:ac:
         40:7b:6d:3d:56:ce:34:38:d4:42:2f:6a:29:f7:06:ed:bc:08:
         62:9f:76:00:3d:5a:15:a3:d6:a0:1f:00:6b:87:ad:92:39:b1:
         db:e3:2d:f2:70:f7:f4:65:f2:61:16:88:5a:ae:f8:01:dc:6b:
         bf:00:30:55:be:8f:9c:3b:73:60:8d:ee:01:94:1b:8b:86:88:
         9d:a0:53:17:72:7c:cc:b8:e0:cb:90:47:9e:f4:82:0b:f1:62:
         70:a1:4e:6f:a9:54:68:4c:7a:d9:f1:68:71:1a:f3:c8:d1:93:
         3e:67:a6:f5:04:c6:7f:e0:09:a6:c2:90:4d:7c:a1:94:90:a3:
         f4:e6:b1:b7:d2:3a:8f:3b:66:6a:6a:27:4b:7d:f0:88:4b:d2:
         43:9a:cb:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpuj9+r7UvjmnBZdswX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1
NTQzZjYwHhcNMjUxMDE5MTQwMTM4WhcNMjUxMDIwMTQwMTM4WjAzMTEwLwYDVQQD
Eyg5Njg3MTNjM2JmYTZiM2E3ODFlNGYzNmI3MGE5ZTY0NzlmYWExZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArayzl1DTDvhxHzfD9jcKMhWphVuG
27UcIel/LgBVhPkjayIEgC3QMYvnjJPi7f2XiVhJNGzfC/xFdQIuQlOO3dAWeC5O
zRIRU4/qXQwhExS/sMu/xpltk+TuJIKvLaWkoiZR1tiSxhUUvrSsFuHdhPBYPwiu
BoAskiwF9L6iDySbCI+ohaGJuoeuqwjFy+Uqeb1t4nDfZ3YGAW0tsodwSZnZM9l0
DvUgBjYwQwnie53JoUypt7JVU8ScKG0UYqzd3/COLJxXw6XK84lzIn6mrZRbtyP3
oYb4axA8FzTxgdFbxwHAFbAtWIE/QSMyOnoHrS3zQy4MIWKJio8wtc8xBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaHE8O/prOngeTza3Cp5kefqh6JMB8GA1UdIwQY
MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt
Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1
LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSjjLeW0
1a+NAE+ZgBihosiOczFJxBdfiqD/AwTsoP4X7Lfe+ev8cs63loS4Sx/h94on6Rj2
7blMs7HNfOroWywS163Wzi9BUPTh0O+YUTH7ocAUYQvVJy6gnKxLyvSsm8j+rdsT
f15+vt6sQHttPVbONDjUQi9qKfcG7bwIYp92AD1aFaPWoB8Aa4etkjmx2+Mt8nD3
9GXyYRaIWq74AdxrvwAwVb6PnDtzYI3uAZQbi4aInaBTF3J8zLjgy5BHnvSCC/Fi
cKFOb6lUaEx62fFocRrzyNGTPmem9QTGf+AJpsKQTXyhlJCj9Oaxt9I6jztmamon
S33wiEvSQ5rLHA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:48 2025 by rpki-client