Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          vp9PeaVvdgZaSJzwaFdaJTJ4fCKtyLPsnSosHc3bESc=
Subject key identifier:   C0:B0:63:E1:BC:F1:C5:E0:A6:64:AC:85:D7:8E:61:71:B6:D2:98:41
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       01A17815256264508C1DEF889456CD42EC30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          0BCA
Signing time:             Mon 26 Oct 2026 12:00:14 +0000
Manifest this update:     Mon 26 Oct 2026 12:00:14 +0000
Manifest next update:     Tue 27 Oct 2026 12:00:14 +0000
Files and hashes:         1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: c6M2GYPnDTEuza45V/iBzqJ0asexAQO8XlWSGAi6TQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:25:62:64:50:8c:1d:ef:88:94:56:cd:42:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Oct 26 12:00:14 2026 GMT
            Not After : Oct 27 12:00:14 2026 GMT
        Subject: CN=c0b063e1bcf1c5e0a664ac85d78e6171b6d29841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:92:43:0a:1c:36:17:f7:e0:5d:b9:61:f6:
                    dc:58:3b:4b:3f:88:7f:7e:a9:1c:42:e9:d7:34:0e:
                    72:08:a1:40:74:3c:b2:cd:da:8e:94:ad:50:a1:02:
                    f3:c4:2b:03:77:c5:39:ea:a0:c4:11:c9:9e:09:aa:
                    f8:1c:1d:d1:7a:7a:04:1c:ee:be:70:cb:76:b0:86:
                    ee:fd:58:99:f9:c5:81:75:40:3c:33:58:93:82:87:
                    df:74:ab:9e:34:61:21:fc:72:14:da:51:73:74:f5:
                    62:92:56:70:75:f8:3f:ed:af:ea:f2:72:ee:aa:0d:
                    ae:c4:49:15:f5:a5:cd:ce:f6:72:f9:0b:78:ab:81:
                    f7:a2:27:d0:b1:fc:b4:58:04:21:a5:cb:f9:3b:52:
                    81:d7:84:5e:43:e3:ad:31:d4:f2:e7:e6:20:bf:b1:
                    27:b6:81:46:fa:1a:cc:ff:76:fc:3e:22:3b:9e:be:
                    c6:05:b8:15:88:a2:3a:ec:8e:08:57:e0:74:79:cc:
                    e8:2d:14:a4:d9:b0:cf:fd:b3:78:46:87:fd:d0:5b:
                    53:c2:e8:11:ae:78:09:3b:7b:a3:b7:4d:40:fd:4c:
                    bd:51:59:aa:fd:26:ca:f2:a4:90:8d:c3:bd:d8:66:
                    62:86:06:3e:56:53:74:b8:69:f5:2c:9a:2d:93:30:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:63:E1:BC:F1:C5:E0:A6:64:AC:85:D7:8E:61:71:B6:D2:98:41
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:7f:9e:8f:74:3d:12:9e:ca:1e:56:9d:20:5d:39:e5:cf:
         a8:55:6b:46:39:e4:b4:a1:19:b6:d1:30:91:f6:1f:e3:dd:6b:
         1e:a2:a3:ff:34:8f:c4:c5:9f:51:2b:d1:4a:28:b6:9e:45:85:
         14:cd:f9:75:90:cc:84:4f:e0:cd:d5:bd:14:ed:04:c3:43:cb:
         a0:b2:a0:d0:80:9a:4c:79:39:d4:19:81:3a:72:13:50:f3:46:
         63:fb:c9:44:91:b7:8f:25:19:01:85:d1:70:ad:7f:91:d6:70:
         1f:da:5f:ee:1e:58:12:80:57:f1:17:34:17:8f:fc:a0:d4:96:
         c8:d4:90:24:0d:7d:5e:21:db:df:f3:41:42:49:05:60:c6:3d:
         5c:e8:a5:20:ae:31:e5:5d:94:71:d9:a8:02:b2:10:5f:ff:a5:
         df:8f:54:33:4f:37:53:15:15:d1:d2:8e:3f:84:e7:12:b1:4a:
         80:3f:dc:64:43:e7:f9:0b:2c:6a:c5:ed:05:8d:49:83:c8:ba:
         82:6b:2e:d2:8f:47:25:a4:38:3c:ff:a2:aa:e7:5a:f3:fc:1c:
         00:bb:28:2d:a1:eb:79:44:9c:a5:ba:f2:da:68:54:d0:70:63:
         2b:02:39:07:42:34:a8:ca:84:93:fc:04:15:e4:4a:cd:70:b2:
         ec:d0:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:23 2026 by rpki-client