Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          MQxcVc/LdSLHV3wVgCTgLR3lj4SQqLmh6TAWiYpzwNc=
Subject key identifier:   35:30:55:DB:FE:22:C0:94:12:B7:2D:B2:E1:6F:C6:3D:98:A9:72:C8
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       019FAC75A697DA45F878BD53927CF55A88E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          0ADC
Signing time:             Wed 29 Jul 2026 06:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:19 +0000
Files and hashes:         1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: uF0d/vi0P4etcZpx0TAhomvljebugMNkhozfPcXRLvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:a6:97:da:45:f8:78:bd:53:92:7c:f5:5a:88:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Jul 29 06:00:19 2026 GMT
            Not After : Jul 30 06:00:19 2026 GMT
        Subject: CN=353055dbfe22c09412b72db2e16fc63d98a972c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:c5:bc:38:e5:7b:dc:6e:0c:8a:66:cd:ba:
                    83:a0:1c:88:7d:c7:6e:a2:67:34:49:22:dc:ad:de:
                    f0:7f:b9:de:f8:eb:ad:2c:73:ba:c7:c0:2a:02:38:
                    f1:e1:c7:da:60:53:3c:2d:51:49:b7:a9:9a:25:26:
                    ae:fc:97:35:f0:6d:d3:74:67:42:e4:bf:b2:22:6e:
                    7f:a1:38:1f:23:c5:6f:55:b4:4b:f5:e5:a1:3b:a8:
                    33:e7:4c:01:68:77:3a:5e:91:ec:11:7b:cf:0a:c8:
                    9e:98:36:98:73:98:e3:30:a2:c1:b6:05:4a:16:3b:
                    ef:ae:23:b7:f4:64:7d:8a:2f:05:ba:6b:6c:9f:23:
                    9b:6e:ee:4c:f0:00:1f:7a:b4:3d:e8:0c:7a:0c:cd:
                    c3:02:99:02:e9:40:fd:09:06:73:e8:62:fe:e6:7d:
                    17:5a:0b:87:43:e1:fb:bd:08:93:a9:b2:f4:79:0a:
                    dc:1d:2f:85:3b:1e:76:23:3d:eb:63:e2:37:e2:78:
                    83:1c:ed:2f:7f:04:fd:f7:e7:26:9a:0f:a6:f4:ae:
                    38:57:b9:22:d7:2b:ac:75:34:a9:e5:f0:86:a2:a1:
                    2d:ca:2d:5f:58:7a:28:f1:56:52:e6:6a:d6:ec:85:
                    48:da:cb:09:3d:65:f7:0f:63:70:9d:7d:d3:de:eb:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:30:55:DB:FE:22:C0:94:12:B7:2D:B2:E1:6F:C6:3D:98:A9:72:C8
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e0:7f:ec:c5:22:bc:92:1a:d6:0a:ac:ca:bd:ff:7b:a4:65:
         c7:4b:d3:98:cf:e5:36:fb:f8:c3:8b:c0:be:51:bf:44:13:cc:
         58:48:00:31:b0:82:23:2a:91:dc:3b:42:bf:1f:c1:3b:31:e6:
         d7:52:66:21:14:8e:6b:6c:e7:a4:93:10:59:f4:4e:bc:60:f3:
         a1:5a:25:aa:cc:a7:16:96:12:05:49:df:3f:79:28:63:ca:1f:
         7b:a0:d1:8e:9a:dd:00:b9:f5:1d:4d:12:6f:34:00:ee:33:83:
         dc:b7:96:9b:77:db:bd:b8:64:83:66:e8:5f:da:01:74:1d:84:
         90:45:6a:ea:89:9d:db:b6:c6:ef:36:d2:0a:1b:69:bb:9b:9b:
         a1:d8:bc:9e:c8:8b:4d:6f:8e:5f:f8:4c:bd:32:f8:e3:bc:fe:
         3e:44:39:6a:e4:0d:2b:c6:49:e2:1d:ad:79:cb:b3:fc:68:cc:
         6a:a5:12:c6:7a:69:2b:30:54:8f:d6:d3:c0:fe:75:e2:12:3c:
         f9:e6:f0:58:cb:d7:d5:6b:73:37:bc:3a:fc:1c:a4:e4:16:24:
         70:af:5a:33:91:e7:86:1b:7f:22:97:c4:3d:a8:23:4b:60:df:
         8e:ab:ae:33:03:16:cd:d6:67:4a:63:f5:48:d3:4b:3e:a1:5f:
         be:b3:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:26 2026 by rpki-client