Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          Muao3d86aRt8AqLFn5lR+yyxYCRR9sZfrLE6MrJfpJc=
Subject key identifier:   EF:BE:00:33:35:55:F0:9E:9A:39:95:E1:1F:CA:31:42:86:28:7F:72
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       01A1DE70D69874E844B45729244ECD67963F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          0BFF
Signing time:             Sun 15 Nov 2026 09:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:39 +0000
Files and hashes:         1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: alghOac6KfxzmIiYDcmjv5SbxELW+fnSlpGqV31w7w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:d6:98:74:e8:44:b4:57:29:24:4e:cd:67:96:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Nov 15 09:01:39 2026 GMT
            Not After : Nov 16 09:01:39 2026 GMT
        Subject: CN=efbe00333555f09e9a3995e11fca314286287f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:18:0f:f9:47:0a:f0:03:6c:fb:c1:5e:09:
                    30:1f:d6:15:b2:8e:77:74:56:6d:82:c4:df:b6:ea:
                    d7:b7:b9:86:cd:12:0f:5c:97:6b:66:89:f6:6b:5c:
                    d0:21:44:99:da:55:97:1f:a7:23:fa:2a:ff:9c:76:
                    9c:2d:23:2f:ee:a9:7d:15:8e:3f:e6:e2:0c:14:eb:
                    c9:ad:c5:f7:34:05:b3:d3:73:3e:ee:0c:73:02:41:
                    e0:1a:e0:39:09:da:19:b7:ce:1b:67:a1:0f:b9:81:
                    ec:ac:67:2a:34:89:c4:70:b3:d2:24:dd:48:6a:12:
                    3e:bf:74:6e:59:69:43:86:46:18:16:0f:80:60:71:
                    17:7d:40:9f:29:32:2f:0f:82:05:b7:c4:b0:5b:13:
                    7c:98:06:86:1f:7b:84:b2:9f:0b:02:d6:2c:99:da:
                    2b:00:4b:f3:93:2b:dc:f8:67:8e:e0:4c:fc:dd:e6:
                    6b:b5:6b:52:97:17:29:93:34:5d:64:7b:8d:68:2a:
                    ef:b9:55:05:06:ca:99:da:94:29:cf:c2:44:7d:be:
                    e7:66:61:2e:04:54:50:d6:b6:0c:1e:d0:82:d0:36:
                    70:ef:86:78:d4:e3:ba:1d:68:dd:6d:39:19:7e:d4:
                    80:11:a5:a9:01:d1:52:3e:04:6d:e8:86:ce:fb:d4:
                    5e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:00:33:35:55:F0:9E:9A:39:95:E1:1F:CA:31:42:86:28:7F:72
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b3:e7:7a:d4:57:82:68:c4:7d:53:54:19:2d:a5:4d:0c:e6:
         39:da:78:cd:59:8c:7d:6f:9b:17:b7:30:56:33:2f:b6:2d:e4:
         18:93:f0:68:a3:47:49:49:bd:78:9e:8a:ed:43:c2:f2:80:88:
         f5:a2:8a:f1:d6:19:7a:4e:8f:2e:4f:e6:11:01:70:fd:36:62:
         c3:41:5a:19:5c:a5:47:c2:cc:0e:f0:0b:9d:28:1b:8c:9e:5a:
         e6:01:cb:de:ba:9d:9a:05:6b:96:3c:4b:d5:20:10:72:6d:a7:
         e0:8a:aa:02:80:81:9f:5f:40:11:b2:0b:80:35:f1:08:c1:d2:
         3a:81:91:57:c0:28:00:da:2e:12:e8:ab:f1:30:56:93:0b:2d:
         8c:15:b6:72:a2:a0:a3:79:f9:97:98:b8:87:bb:0f:38:29:d9:
         48:a4:87:3f:67:9e:a2:e9:16:88:a1:4b:e3:df:f3:10:47:e6:
         88:f9:62:f2:22:48:e1:d7:47:f1:4a:e3:af:eb:fe:63:f2:22:
         24:2f:d3:f0:bf:84:6b:37:34:09:da:23:83:c8:0e:96:d4:70:
         73:94:31:a4:0f:17:e5:ee:c0:85:09:e5:4c:33:de:d4:8b:c5:
         29:35:44:6b:48:cf:b2:bf:97:bc:1d:87:2e:83:6b:69:e2:5f:
         b0:af:51:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecNaYdOhEtFcpJE7NZ5Y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1
NTQzZjYwHhcNMjYxMTE1MDkwMTM5WhcNMjYxMTE2MDkwMTM5WjAzMTEwLwYDVQQD
EyhlZmJlMDAzMzM1NTVmMDllOWEzOTk1ZTExZmNhMzE0Mjg2Mjg3ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21cYD/lHCvADbPvBXgkwH9YVso53
dFZtgsTfturXt7mGzRIPXJdrZon2a1zQIUSZ2lWXH6cj+ir/nHacLSMv7ql9FY4/
5uIMFOvJrcX3NAWz03M+7gxzAkHgGuA5CdoZt84bZ6EPuYHsrGcqNInEcLPSJN1I
ahI+v3RuWWlDhkYYFg+AYHEXfUCfKTIvD4IFt8SwWxN8mAaGH3uEsp8LAtYsmdor
AEvzkyvc+GeO4Ez83eZrtWtSlxcpkzRdZHuNaCrvuVUFBsqZ2pQpz8JEfb7nZmEu
BFRQ1rYMHtCC0DZw74Z41OO6HWjdbTkZftSAEaWpAdFSPgRt6IbO+9ReGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO++ADM1VfCemjmV4R/KMUKGKH9yMB8GA1UdIwQY
MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt
Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1
LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObPnetRX
gmjEfVNUGS2lTQzmOdp4zVmMfW+bF7cwVjMvti3kGJPwaKNHSUm9eJ6K7UPC8oCI
9aKK8dYZek6PLk/mEQFw/TZiw0FaGVylR8LMDvALnSgbjJ5a5gHL3rqdmgVrljxL
1SAQcm2n4IqqAoCBn19AEbILgDXxCMHSOoGRV8AoANouEuir8TBWkwstjBW2cqKg
o3n5l5i4h7sPOCnZSKSHP2eeoukWiKFL49/zEEfmiPli8iJI4ddH8Urjr+v+Y/Ii
JC/T8L+Eazc0Cdojg8gOltRwc5QxpA8X5e7AhQnlTDPe1IvFKTVEa0jPsr+XvB2H
LoNraeJfsK9RKA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:00 2026 by rpki-client