Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File:                     ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier:          hWGKKvc4r1khYyGMV/BW5dTvrqzytr24A/qtAGqx/Lo=
Subject key identifier:   18:0B:8D:16:A6:F8:C0:38:C8:98:D5:0B:84:F4:5C:19:77:E5:79:8A
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer:       /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial:       019758DADAF8CD1026F2645FF667A71767D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number:          068C
Signing time:             Tue 10 Jun 2025 08:00:27 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:27 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:27 +0000
Files and hashes:         1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=)
                          2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: MZH2251J4jF8Vd2QImqcGqRqULFmIAHO0kylkpFw0CM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:da:f8:cd:10:26:f2:64:5f:f6:67:a7:17:67:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
        Validity
            Not Before: Jun 10 08:00:27 2025 GMT
            Not After : Jun 11 08:00:27 2025 GMT
        Subject: CN=180b8d16a6f8c038c898d50b84f45c1977e5798a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:48:36:1c:95:43:27:6a:39:cc:83:16:5d:
                    8c:88:76:c1:b6:c7:20:89:50:09:e9:b5:6b:e3:70:
                    fc:ae:df:1c:51:1e:cc:65:31:f1:68:00:c8:6d:93:
                    60:d5:75:6d:10:b3:9f:ed:11:d7:24:d8:bf:03:f8:
                    ad:3a:a5:ce:50:1f:85:f0:be:97:23:02:59:ec:13:
                    d9:bd:0c:94:1d:b3:69:8b:51:76:c3:8b:a6:05:e3:
                    7f:a9:6c:db:64:55:73:0b:e5:7b:eb:7b:aa:ba:18:
                    df:d0:6e:4f:6c:72:75:14:0e:f6:79:8e:52:de:ba:
                    15:b4:c4:bd:f4:7a:d2:fb:3a:10:0d:75:09:e2:e7:
                    36:7c:39:49:6d:ef:a3:a4:8a:68:69:88:e9:f3:9d:
                    e5:80:87:95:43:56:de:38:e0:20:2d:e4:17:cd:36:
                    ad:3b:a1:8f:04:27:ec:4a:73:7f:22:ba:94:cc:91:
                    34:d2:43:05:e4:42:a3:32:da:31:fd:c9:a0:b9:7c:
                    11:bc:ba:fe:7d:46:53:a6:c7:e4:f8:5f:d7:21:03:
                    a2:09:56:9f:5b:2f:65:8b:71:6d:ce:4d:88:73:13:
                    98:f7:af:db:da:1c:63:59:6a:85:d0:67:1c:cf:b9:
                    6d:0d:81:14:86:3b:0e:6f:43:7e:a0:a1:a7:ca:1e:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0B:8D:16:A6:F8:C0:38:C8:98:D5:0B:84:F4:5C:19:77:E5:79:8A
            X509v3 Authority Key Identifier:
                keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:d7:08:8b:d9:54:3a:21:47:3b:47:c5:80:66:c0:c5:fc:
         5b:62:20:54:dd:f0:9e:01:d6:f9:35:21:9a:72:54:68:ef:fb:
         85:08:59:78:e6:43:6a:bb:6e:af:c3:a3:55:5f:1c:a3:ea:96:
         60:1f:f3:df:22:15:40:8b:18:43:16:54:b8:7f:86:45:45:4c:
         66:b5:0a:1a:be:58:ee:48:e1:fe:3e:6b:01:db:ca:99:ea:fe:
         07:9f:d6:c9:0e:03:1d:b8:95:70:7f:fd:cf:23:0c:8d:47:a0:
         9e:ae:c6:13:2b:de:03:36:67:8c:f5:77:87:6f:20:01:e3:4a:
         ef:32:8f:70:05:48:84:a4:fd:b4:8f:11:b9:f5:e7:8b:c5:20:
         8e:61:36:a9:52:a1:7c:20:c4:3a:09:77:d0:3c:58:6f:db:f0:
         c0:81:b2:31:8c:1c:be:f6:25:9f:8f:32:b4:b1:0f:be:97:43:
         37:52:82:c9:63:cf:a1:3e:61:dd:ee:e5:36:77:a7:d6:f7:fa:
         2f:b8:65:de:0d:3a:e1:32:a9:16:64:78:18:48:05:b3:7f:bc:
         ce:3c:f2:4f:6e:c1:e1:fc:bb:3a:ed:21:cb:c0:30:2e:a5:25:
         03:d8:a6:93:60:63:97:c3:51:72:83:3d:a7:74:e6:28:87:de:
         c0:9b:aa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY2tr4zRAm8mRf9menF2fQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1
NTQzZjYwHhcNMjUwNjEwMDgwMDI3WhcNMjUwNjExMDgwMDI3WjAzMTEwLwYDVQQD
EygxODBiOGQxNmE2ZjhjMDM4Yzg5OGQ1MGI4NGY0NWMxOTc3ZTU3OThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1hINhyVQydqOcyDFl2MiHbBtscg
iVAJ6bVr43D8rt8cUR7MZTHxaADIbZNg1XVtELOf7RHXJNi/A/itOqXOUB+F8L6X
IwJZ7BPZvQyUHbNpi1F2w4umBeN/qWzbZFVzC+V763uquhjf0G5PbHJ1FA72eY5S
3roVtMS99HrS+zoQDXUJ4uc2fDlJbe+jpIpoaYjp853lgIeVQ1beOOAgLeQXzTat
O6GPBCfsSnN/IrqUzJE00kMF5EKjMtox/cmguXwRvLr+fUZTpsfk+F/XIQOiCVaf
Wy9li3Ftzk2IcxOY96/b2hxjWWqF0Gccz7ltDYEUhjsOb0N+oKGnyh6hcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgLjRam+MA4yJjVC4T0XBl35XmKMB8GA1UdIwQY
MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt
Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1
LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+DXCIvZ
VDohRztHxYBmwMX8W2IgVN3wngHW+TUhmnJUaO/7hQhZeOZDartur8OjVV8co+qW
YB/z3yIVQIsYQxZUuH+GRUVMZrUKGr5Y7kjh/j5rAdvKmer+B5/WyQ4DHbiVcH/9
zyMMjUegnq7GEyveAzZnjPV3h28gAeNK7zKPcAVIhKT9tI8RufXni8UgjmE2qVKh
fCDEOgl30DxYb9vwwIGyMYwcvvYln48ytLEPvpdDN1KCyWPPoT5h3e7lNnen1vf6
L7hl3g064TKpFmR4GEgFs3+8zjzyT27B4fy7Ou0hy8AwLqUlA9imk2Bjl8NRcoM9
p3TmKIfewJuqrw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:37:11 2025 by rpki-client