Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          b20UhIlVb945SqzBYeMkcf8EHbT++hpw+i7V5LU647g=
Subject key identifier:   71:BB:18:70:03:48:82:33:B1:ED:F6:74:47:FA:18:A5:23:9C:A2:20
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019D27A8BE0912FB549D6A4BD4E199DB779C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          19D1
Signing time:             Thu 26 Mar 2026 01:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:03 +0000
Files and hashes:         1: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          2: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          3: 2ATxWC0LpwAfJfvHqDtwuI8bNls.roa (hash: Bm5IQQ4PBSwytK8rm4bHoKQ0+XdV1o2+vJdyCZLCHhU=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 44zPPgoQLefQJI3vtkJc6EwhCow.roa (hash: bzc7Uz3fgjL7VzDC/dK+5179ZuptpvJrsvVm26txhZQ=)
                          6: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          7: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          8: BI9M--P6yLGe4jvwVFojo0TL6DI.roa (hash: 5Hp6U9vwmy3Qj1szDvn3XgKpwr1D7A9keYBfO772XNU=)
                          9: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          10: E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa (hash: FoPG6dVyzwLVkXmSRMrejZ4jHtCGpIoYrs3nixOj+9E=)
                          11: EIzTw546AijLugfy7SUrbXCZrhI.roa (hash: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=)
                          12: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          13: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: 7nFblLMFiefnZYnOKXnjTLhAmWfNnH09PwjGubSbWoE=)
                          14: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          15: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          24: dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa (hash: xxmOZVSWpnayyu1BmFI9+MLq01yx4gC/aV4bZ9x0fQs=)
                          25: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (hash: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM=)
                          26: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          27: iv-DGbHi7jhC6-KbaXRuWKrxSJw.roa (hash: DCqm4T/AKjotRXUc3PC/vHyXchhsUr3+zqTpdaE+yuM=)
                          28: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          29: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          30: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          31: nPVcTbTK-fvP0ndgKJb_TVb3vms.roa (hash: 28mXD5Sps1UGHXUOMJ1VyXDyOke/hS4eNJgc9wW/KkI=)
                          32: rT2GKqRNplkDcHzBqdD4vYquDdU.roa (hash: xq38FNJ36cgvD1QD920Vixq2fn3iuLkSD00qomnTpqg=)
                          33: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          34: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          35: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          36: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          37: zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa (hash: naZhH7fX9yCGlkQixJYSLA7X9AZuM2jPZyAz9ulFItY=)
                          38: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:be:09:12:fb:54:9d:6a:4b:d4:e1:99:db:77:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar 26 01:01:03 2026 GMT
            Not After : Mar 27 01:01:03 2026 GMT
        Subject: CN=71bb187003488233b1edf67447fa18a5239ca220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:dc:ff:51:db:95:29:f0:01:ce:b7:5b:2d:
                    aa:65:93:85:ca:15:cd:cf:90:d8:3d:27:fb:22:df:
                    5b:37:40:4d:49:9a:4c:f1:83:44:13:f4:91:c5:ae:
                    b6:72:e8:79:58:b6:26:de:10:91:28:87:5c:bc:09:
                    a4:3c:a0:3c:77:a5:44:a1:30:a4:03:40:a3:90:35:
                    f4:69:5e:ab:48:48:67:56:d4:4a:c1:73:90:ce:15:
                    0a:20:d7:a2:39:5a:91:ac:d4:ca:ba:1b:65:8f:ba:
                    88:09:db:d4:8d:ff:64:77:09:bd:ce:dd:c2:4d:e8:
                    61:30:a3:6d:01:4c:24:55:86:b4:04:b8:8f:1e:33:
                    10:a8:08:16:76:fa:8c:07:e1:e5:4b:cc:75:4e:89:
                    19:e4:28:a9:bf:f2:c0:31:1b:e0:0d:22:af:d0:ea:
                    5c:4d:c5:4c:2f:1c:97:9c:fc:97:0b:32:62:d4:87:
                    d1:e1:6c:cb:70:35:73:ca:ca:f9:cc:45:66:54:79:
                    27:6e:ea:44:a9:a6:fe:74:d0:a5:09:b0:db:05:66:
                    e8:bf:95:9c:d9:24:49:9b:86:79:c1:46:e6:56:88:
                    fa:fe:c8:1d:b8:72:dc:24:cc:9b:ad:58:86:c2:15:
                    bc:98:40:b5:5b:0d:24:dc:51:48:7e:df:64:39:70:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:18:70:03:48:82:33:B1:ED:F6:74:47:FA:18:A5:23:9C:A2:20
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:86:1c:03:49:a4:79:6d:24:02:6c:3e:db:15:3f:28:56:
         1e:46:68:54:34:9c:bb:e4:26:d2:0a:97:14:41:77:d1:13:c7:
         e3:0d:5b:1f:76:75:48:2c:cb:9e:c5:2a:a1:12:2f:5f:7b:25:
         d5:c1:0e:01:b1:b0:d3:32:5b:74:78:bc:46:6c:cb:07:1e:96:
         97:0c:6c:8a:a5:0e:49:7e:b6:6f:08:21:47:b0:e5:17:86:5e:
         22:41:7d:d4:1e:ee:ce:e7:4f:e4:45:f3:3e:24:4c:cc:0f:c0:
         b0:e2:31:62:9b:d8:07:e0:cc:f7:ce:2a:4e:b2:00:47:09:38:
         dd:b4:f2:fd:f7:b5:f3:d1:b8:93:86:dd:e5:89:7a:19:c9:1e:
         b7:14:21:47:96:f7:eb:1f:cd:ab:4a:9b:4a:d9:64:ba:f7:9c:
         8f:da:34:14:53:5c:ae:55:c0:fc:4d:92:3a:9c:60:4c:15:16:
         af:db:c4:f0:6e:55:5e:90:8a:81:03:52:15:6e:59:fa:01:49:
         ab:b9:e2:63:32:95:66:4b:06:cb:a0:5d:7c:21:6f:fa:19:c5:
         15:33:5d:8b:04:72:b8:1a:00:3f:18:b9:66:2d:ec:68:10:38:
         28:19:17:f6:fa:55:07:1c:0d:6c:58:86:d3:fa:44:c8:60:1f:
         18:c2:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----