Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          9wg4icaoaO5wMv9Il5LpGeAeUXVwnXjuzy95GE0KDZo=
Subject key identifier:   60:10:27:FB:18:90:5C:FB:53:10:7E:C4:35:E9:63:2B:2E:26:9C:D3
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       019F935C48B35E3B865A3F92BC26CA40DB27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          0ACF
Signing time:             Fri 24 Jul 2026 09:02:06 +0000
Manifest this update:     Fri 24 Jul 2026 09:02:06 +0000
Manifest next update:     Sat 25 Jul 2026 09:02:06 +0000
Files and hashes:         1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: l+WiW19Lskg8hkvZpS2YkUz6OKFL7YO7iwWRM0D/rkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:48:b3:5e:3b:86:5a:3f:92:bc:26:ca:40:db:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Jul 24 09:02:06 2026 GMT
            Not After : Jul 25 09:02:06 2026 GMT
        Subject: CN=601027fb18905cfb53107ec435e9632b2e269cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:e7:b7:47:b0:79:7c:a8:d1:c9:88:72:d4:
                    40:90:07:96:a8:c8:f0:44:f8:40:f4:a1:e8:a6:78:
                    a1:98:5c:8b:fd:5a:87:16:69:e3:56:90:e4:37:79:
                    ad:bf:cc:e7:f3:70:da:e1:70:6a:0f:d1:a1:67:0e:
                    88:83:d8:57:47:a8:6b:8f:d3:67:c2:d3:f2:90:8a:
                    42:51:84:1f:9e:e1:19:d8:b0:7e:70:ce:cb:29:f8:
                    f8:2a:a5:1f:e4:01:52:c9:dc:97:68:1f:f8:27:c1:
                    01:98:16:ca:49:31:04:ba:53:18:18:cd:ee:5f:2d:
                    71:ca:ab:ff:6f:c9:83:c6:2b:04:64:7f:4a:4c:28:
                    c8:ab:30:84:eb:e7:38:79:1f:09:18:90:e7:2a:fb:
                    67:42:be:8c:64:3c:70:fb:fc:6d:2f:cb:cf:aa:94:
                    ce:d4:53:5f:2b:f5:c2:3f:94:be:c5:b6:84:85:6a:
                    a1:c3:09:a5:4a:5f:da:a6:80:e2:0d:30:b4:84:d3:
                    28:84:f9:1b:bc:c9:c9:b3:9f:ea:60:3c:9f:e1:8d:
                    95:44:5d:ec:54:18:1c:47:49:55:60:44:bf:0d:e8:
                    7b:04:e4:49:a7:e9:0b:20:c0:38:de:f1:14:c5:48:
                    1d:e6:6c:b9:26:af:10:89:0d:3c:13:48:a1:a4:75:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:10:27:FB:18:90:5C:FB:53:10:7E:C4:35:E9:63:2B:2E:26:9C:D3
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:be:c2:25:c0:c6:10:20:e4:09:c2:fa:47:6e:ce:dd:69:23:
         88:99:6b:95:5f:72:de:dc:ea:0c:7d:89:71:51:39:80:3b:47:
         56:b5:be:2e:98:40:f6:ff:2d:7e:51:c1:ca:2f:85:cf:6e:e9:
         93:a8:67:55:97:b5:a3:67:61:a9:48:09:af:33:d4:c8:08:d8:
         6d:45:8a:1f:f9:c3:6b:a1:dd:5e:cf:c3:16:de:a6:cd:83:17:
         36:ad:39:47:c7:f6:48:20:6f:f6:38:5d:04:12:e1:89:01:8a:
         7f:1a:4b:e1:7b:c3:9b:82:c6:cd:32:e6:b5:a9:d9:81:d0:8d:
         56:9e:b9:4e:5d:14:ad:d3:d0:bb:02:3e:4b:4d:b2:8a:0d:56:
         c8:a9:35:b5:8e:3a:1a:7e:56:f5:8f:56:5c:8b:f7:62:e3:9e:
         fb:65:3c:51:be:3b:ea:81:9f:2a:90:9c:d5:d6:d6:0b:37:21:
         e8:26:26:29:e5:ed:16:1d:95:ff:db:ac:1a:38:ea:1a:fe:a6:
         e3:6a:44:14:b3:ea:90:9a:bc:b6:bd:29:1a:40:ea:13:78:51:
         60:dd:df:b3:53:66:35:34:1f:7d:4b:d2:9b:95:ff:4d:bf:a5:
         5d:42:61:30:c0:bf:a7:97:31:71:74:09:45:08:be:d6:48:ba:
         82:a7:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:00 2026 by rpki-client