Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          0mUM/I0u27f5oqKuqqUSQRLj3wEE+F2Za5TZj6RPJIs=
Subject key identifier:   A9:17:00:13:06:58:28:4D:B5:6D:A4:0A:64:79:91:B2:F0:97:FE:2F
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       01A08C7BEC8E192F59BF6FBF6EC333124CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          0B50
Signing time:             Thu 10 Sep 2026 18:02:06 +0000
Manifest this update:     Thu 10 Sep 2026 18:02:06 +0000
Manifest next update:     Fri 11 Sep 2026 18:02:06 +0000
Files and hashes:         1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: o8aQ8/IhgxmjSy+6Q+79YMdwcbOfCG75G6DF7vpna6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:ec:8e:19:2f:59:bf:6f:bf:6e:c3:33:12:4c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Sep 10 18:02:06 2026 GMT
            Not After : Sep 11 18:02:06 2026 GMT
        Subject: CN=a91700130658284db56da40a647991b2f097fe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:4f:ca:91:4e:81:11:7f:2b:3e:30:e3:e2:
                    eb:69:49:e6:45:45:8c:a3:53:07:9f:b0:c7:f2:86:
                    22:1b:dc:92:5c:ba:f5:90:e5:9a:02:32:47:f1:3a:
                    0c:d4:66:a5:86:91:4c:be:fd:63:27:f5:ac:71:9d:
                    80:85:12:12:de:36:d4:0a:83:ee:42:4e:cb:d2:fc:
                    21:6b:ae:70:bb:4b:1a:1d:17:36:6f:33:2c:65:4d:
                    04:bd:69:e7:f3:a2:10:37:7f:2d:64:bf:24:17:f4:
                    3d:84:f4:82:38:87:71:6b:65:f7:c7:77:24:44:05:
                    d0:8e:b9:ad:e6:46:c8:0d:35:f2:40:77:9b:af:14:
                    96:27:84:3b:7d:e8:d6:a1:b6:93:14:df:57:42:bb:
                    1f:e5:72:ec:91:c2:04:f5:40:8f:8a:57:be:11:f1:
                    10:43:23:11:b1:bc:f9:5a:0d:64:14:37:9e:15:95:
                    65:69:ec:f8:89:1e:c7:c7:41:09:9d:58:11:f4:cc:
                    0b:42:4c:7f:a3:c4:8f:6c:3b:82:7a:e5:a5:b7:72:
                    9b:37:e4:8f:f0:2d:c2:c2:a0:01:3d:03:9b:80:1b:
                    2b:b6:67:94:0f:2a:8b:62:a3:23:02:18:63:0c:d0:
                    51:b7:a2:b4:a1:d7:33:4e:d6:9c:4f:c4:c2:15:b8:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:00:13:06:58:28:4D:B5:6D:A4:0A:64:79:91:B2:F0:97:FE:2F
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:fc:bd:66:41:27:0d:1d:f3:33:30:43:9b:a6:b0:2f:b7:
         e2:32:bf:d7:05:fb:7d:96:6e:37:fe:bb:e1:73:3c:f5:b1:f1:
         77:aa:67:15:a3:ab:5a:81:49:2c:87:8c:ae:42:fd:f0:ed:77:
         43:97:68:64:fe:87:99:fb:f9:12:14:9a:c7:66:7b:c3:27:4d:
         15:2c:f6:c6:6a:45:a6:44:8e:8c:af:23:e7:ce:dc:b3:4b:1a:
         73:4f:d1:45:d1:5f:89:a6:d6:f6:94:17:6f:a9:92:bb:b5:96:
         17:6c:81:d6:d7:6f:61:d6:20:c5:de:bd:9f:03:ea:0f:3b:6f:
         58:41:0a:93:55:97:76:2c:d2:14:a2:05:d7:9e:f6:f0:9b:08:
         8c:aa:a2:49:4a:98:65:d6:ad:b2:f6:5f:20:17:7e:ec:43:30:
         04:36:51:d2:29:17:74:88:dc:3a:38:64:e4:3c:36:24:da:51:
         3d:9c:79:c0:29:7a:f3:f9:86:8b:a7:28:23:2e:7f:34:f7:43:
         68:a3:03:dc:c9:99:57:5d:c6:55:a1:37:f8:33:66:5e:66:ec:
         e0:84:7f:d5:8f:9a:ea:45:1a:5f:27:4a:1a:d8:b6:74:a1:10:
         d7:3a:a3:9c:48:f1:14:60:ea:7d:3e:02:cf:5e:c5:d3:99:72:
         31:dc:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:03 2026 by rpki-client