Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          R4kjkD/3KN9hrgdrz0tPEKEJ9KLqA+6dw4Jxr+NOc4I=
Subject key identifier:   94:E3:64:28:F0:76:56:00:55:33:34:4A:78:BD:30:5D:DA:3A:CA:4C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01A0D3155C220F33A9B033D14995F024AAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1BD8
Signing time:             Thu 24 Sep 2026 11:03:07 +0000
Manifest this update:     Thu 24 Sep 2026 11:03:07 +0000
Manifest next update:     Fri 25 Sep 2026 11:03:07 +0000
Files and hashes:         1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
                          2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          7: B2I17pBheusyOC7ocM9qlUDXh-I.roa (hash: GoFBrOWQVYy+Yfy42b64TQVPz8wmZmZuRwWMVQ1qgcQ=)
                          8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          9: CPP_xRW2A0WJfAuBSIiZNh9s2jk.roa (hash: RoRRyMaN6wn3ECV69tj01wk77kgumZZwueyOHn8JloA=)
                          10: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          11: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: kOjR3zktlSTXpXBXUgPPAeOHt7osDBfAEFIib5h/nnk=)
                          12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          13: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
                          14: LJ4iDcRl7E-gdEb-9gtcvGqTGJw.roa (hash: OC3AbI1Yu5s1CkdaqL/nWsIUoKb4V/o/i1I9B4PRUfs=)
                          15: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          16: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          17: Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa (hash: vftAEz3x91u1Hc7eUFmPCsiTfON2YdeF+0OPnpeRYCs=)
                          18: SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa (hash: iZdqEuhLKPZUUK2YbA/Np/er8XGu26nbBYz75XXIsXY=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: UiJd6YTZpwcRxL_MZ8S7bv8c500.roa (hash: 3gXPtJg8GpqC0O+77QNOsj779ZWJdMvL9obpa2jP6Jk=)
                          21: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          22: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          23: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          24: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          25: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
                          26: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          27: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
                          28: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          29: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          30: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          31: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
                          32: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          33: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          34: taiwWvpw25ppA7g9Q1XuWsE_s34.roa (hash: He6fUV5BcE5qyrTu375pyEkyqiLeAHLfPkSkUA8RSOI=)
                          35: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          36: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:5c:22:0f:33:a9:b0:33:d1:49:95:f0:24:aa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Sep 24 11:03:07 2026 GMT
            Not After : Sep 25 11:03:07 2026 GMT
        Subject: CN=94e36428f07656005533344a78bd305dda3aca4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:f0:a7:8d:7d:bd:9f:15:ca:d4:8f:1c:ec:
                    96:c8:d5:d3:74:c7:fb:33:78:12:f2:5f:69:c3:b5:
                    27:31:11:e7:56:a7:7c:40:cb:c5:c8:70:e0:d0:41:
                    26:9f:6d:60:be:5c:86:84:56:f9:6d:85:c5:02:ab:
                    25:00:fc:6c:35:bf:84:a2:b7:4d:45:53:30:1b:9e:
                    fb:3c:57:ff:a9:0c:12:89:ab:c0:69:5d:4c:f5:03:
                    f4:b3:51:7a:38:43:94:c7:b1:63:39:40:68:ca:2d:
                    c3:80:59:35:22:a4:a0:fb:9c:7f:6e:85:2e:a5:8d:
                    b2:f7:f1:a6:56:1d:55:a6:12:a3:46:7e:85:58:74:
                    51:38:9e:51:31:c3:51:ff:80:b9:f5:e8:7f:f3:c2:
                    90:33:52:68:12:14:45:40:63:33:74:d7:0c:15:c9:
                    5a:06:36:9b:88:28:64:b6:c2:cf:da:72:b9:65:15:
                    7d:7b:44:15:f5:c6:ab:f9:a6:71:a1:82:37:6a:c4:
                    e3:91:2b:e3:4d:cf:4e:11:45:0d:fa:19:8a:f4:99:
                    7c:7e:80:49:e9:1d:10:83:bf:bc:ec:01:22:a6:f4:
                    72:36:10:f6:83:ae:11:2e:6b:cd:ff:d7:e6:bd:9f:
                    f8:95:6b:a1:9f:14:0b:e2:b7:1c:8b:c8:c0:39:5d:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:64:28:F0:76:56:00:55:33:34:4A:78:BD:30:5D:DA:3A:CA:4C
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:ce:dd:fe:23:8b:12:d5:eb:e0:12:c7:b9:d1:1c:3f:cf:
         db:ed:28:14:51:40:c4:f2:27:27:09:cd:5c:7a:58:8c:9d:88:
         56:09:47:67:76:ef:0c:65:04:bc:67:4a:d2:be:21:80:78:bc:
         1b:36:ee:47:f7:00:73:a3:e6:77:52:1e:83:ed:8d:66:0e:62:
         1d:37:1d:d6:1c:8a:a0:b4:5e:96:44:8f:d8:a4:fe:65:9e:8e:
         ba:19:04:07:0f:7a:1a:64:6d:95:e0:bb:e6:39:72:06:17:9d:
         60:3f:fb:21:bb:08:0d:73:3f:d3:78:f2:eb:9c:84:fd:8f:2a:
         80:19:6a:0a:8f:d1:0b:d0:4d:62:38:51:47:f1:21:8a:c9:91:
         20:2a:04:2f:ae:fb:c2:7f:ce:99:f1:62:ff:ab:c3:9d:b1:8b:
         f8:1c:69:8d:4f:5d:73:d5:fe:c5:23:99:e1:9e:2a:83:73:b0:
         1c:ca:84:a4:ae:63:e3:f8:32:b9:0d:7e:44:7d:93:b7:5c:97:
         1c:32:0d:f2:05:b2:9f:2f:02:99:6b:70:0a:28:a6:3e:51:13:
         20:27:a2:72:7b:06:dd:33:1c:27:a5:5f:be:5f:51:a3:14:c5:
         41:5e:49:6b:fb:40:a6:da:78:f3:33:41:bc:9f:56:e6:14:d3:
         f5:1f:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:12 2026 by rpki-client