Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          kqHKcLN3K9qIuFAkmqxI1vTo3wJWTxtIxj0jcL5kAfU=
Subject key identifier:   71:B3:A9:1A:EF:F0:CB:EC:CA:14:25:E8:6E:86:C7:24:D6:D0:3C:6F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019F8EA298FE28FE1E845E500D49CCD54305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1B23
Signing time:             Thu 23 Jul 2026 11:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:48 +0000
Files and hashes:         1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
                          2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          7: CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa (hash: 5fJPe+eX7sQDBwrHzP9tK4pCYoIPbZwz6vPeuUSzBZo=)
                          8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          9: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          10: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: IltSuyau4g7lJVuSUlRA4JpeUkrtNRCK92D1dOnrVgs=)
                          11: HgmGhHhflSc83-12eOaUVFkQZ7A.roa (hash: TVfWDXrhIGbWC7iEdqwCMqeSIvitThoDMENS1YOjOUg=)
                          12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          13: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          14: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
                          15: L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa (hash: eZHdi1uoI4O0n9vGs1id6DxX8FOaQEq3LrkqkgiYU50=)
                          16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          24: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
                          25: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          26: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
                          27: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          28: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          29: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          30: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
                          31: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          32: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          33: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:98:fe:28:fe:1e:84:5e:50:0d:49:cc:d5:43:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jul 23 11:00:48 2026 GMT
            Not After : Jul 24 11:00:48 2026 GMT
        Subject: CN=71b3a91aeff0cbecca1425e86e86c724d6d03c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:22:89:83:95:25:73:26:fa:fd:f4:5b:88:
                    02:e6:a7:18:d5:04:93:8a:66:5d:86:85:f8:11:bc:
                    4c:88:03:b7:2e:d7:9e:77:ba:03:90:1c:b0:05:52:
                    c5:e3:47:51:f7:3d:1b:9d:f6:69:6f:54:77:27:44:
                    97:a2:83:9b:28:35:99:a6:d0:b4:6a:9a:0c:58:7b:
                    43:bc:f2:58:f4:e5:89:7a:0a:b1:1a:c4:60:2b:7a:
                    fd:12:41:90:9e:de:2d:eb:d5:35:83:30:f3:1c:78:
                    7a:54:6a:18:9c:c0:ca:82:63:f7:75:b1:c4:8b:07:
                    af:b2:a1:03:9a:b4:63:c9:31:04:20:37:c6:06:d1:
                    ea:6e:cc:92:87:30:76:39:17:df:f8:02:91:aa:12:
                    77:97:e4:b8:30:15:4f:f1:84:1f:b3:48:a4:88:38:
                    b2:df:cb:29:39:07:ee:15:da:8e:a9:d7:94:b8:0c:
                    1c:b8:57:14:87:e1:e9:93:3f:3b:84:b4:2f:2d:8e:
                    46:3c:de:da:a5:93:52:9e:75:9d:90:a1:93:e6:28:
                    83:54:af:6f:08:ee:c7:90:90:11:3a:95:08:df:ab:
                    bf:da:bd:2b:f3:bf:6a:6b:2a:f3:4b:1c:5c:ab:ec:
                    c3:80:a4:6a:67:7d:71:45:80:05:ca:11:d9:65:0d:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:A9:1A:EF:F0:CB:EC:CA:14:25:E8:6E:86:C7:24:D6:D0:3C:6F
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:d7:ff:6f:bc:c7:ee:a5:ea:89:de:13:c3:a5:41:df:81:
         18:52:6a:61:02:d8:9f:3c:04:91:b8:b0:ad:41:91:4f:9c:8a:
         44:bd:60:09:d5:1d:bf:2d:6f:b1:aa:78:7e:c7:ea:1c:40:43:
         0b:4d:51:39:4b:fc:bc:1f:b1:6a:70:1f:bf:c6:06:52:e4:f5:
         23:e3:2d:ba:e6:d8:83:97:d6:d4:85:3a:b3:30:1f:cb:ed:9d:
         a2:e1:dd:f9:5a:80:06:73:8e:79:6d:22:4d:0e:72:a0:fc:81:
         84:67:57:67:f2:bf:c0:20:1d:3e:28:fe:8d:d9:5c:e8:a8:cd:
         07:7f:01:e8:23:ab:bc:81:3b:ad:a7:8c:5a:fc:cb:8d:ab:64:
         af:0c:99:1f:f6:52:7b:c6:1b:0b:63:01:c1:52:6b:7c:7b:7c:
         73:9b:df:f3:98:83:b7:11:f7:1c:54:b8:4f:d5:e2:04:3e:4b:
         e1:5c:f8:06:9a:77:d2:7b:d5:a2:b1:3a:91:aa:7a:c8:c6:1a:
         9d:29:0f:1c:cf:31:e5:df:f2:f1:21:bf:7c:94:4a:92:0f:cf:
         9b:98:73:1f:72:2b:60:76:20:88:ac:bc:5d:4a:52:0e:d6:2f:
         59:9f:2e:46:cc:5e:c8:75:ed:8a:4c:3f:e0:06:d3:8c:70:d9:
         e9:e9:96:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:52 2026 by rpki-client