Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          TTG5JyBXlzRmPUEFjROvki7wEH6HJo38dsrhwwOwcPo=
Subject key identifier:   C3:35:CD:00:36:80:2B:74:A8:38:42:B9:9B:D1:5F:EF:17:30:58:24
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       01A1DE70D839F575C59411B3CA8C98DFBD24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1C65
Signing time:             Sun 15 Nov 2026 09:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:39 +0000
Files and hashes:         1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
                          2: 0p0fIfuXTazqPXkq9HuhfT2nQc0.roa (hash: A7pUsQ1minL0kDox7J4uEyrSjsZpy2Td5KKaa3dxrd0=)
                          3: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          4: 1F4OSU0Vz5KKhfBZ_KpfzQ_BQvk.roa (hash: eldiXuZz4n54D134GX7o1Y+AnCwgkTbm72ZfHbE+cTw=)
                          5: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          6: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          7: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          8: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          9: B2I17pBheusyOC7ocM9qlUDXh-I.roa (hash: GoFBrOWQVYy+Yfy42b64TQVPz8wmZmZuRwWMVQ1qgcQ=)
                          10: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          11: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          12: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: ugu5/it+hr6J2CruAa2DAmJchWuGFeQhKW10DYSXYco=)
                          13: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          14: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
                          15: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          16: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          17: Rz9L-fsw4a_mbNQNxF8L8eBmEHM.roa (hash: vftAEz3x91u1Hc7eUFmPCsiTfON2YdeF+0OPnpeRYCs=)
                          18: SKlhQV9DBZq5SQGBj4LQRBa4pDY.roa (hash: iZdqEuhLKPZUUK2YbA/Np/er8XGu26nbBYz75XXIsXY=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: UiJd6YTZpwcRxL_MZ8S7bv8c500.roa (hash: 3gXPtJg8GpqC0O+77QNOsj779ZWJdMvL9obpa2jP6Jk=)
                          21: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          22: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          23: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          24: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          25: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
                          26: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          27: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
                          28: hCvAf3NmUPcZlenLL0FGkTa9Nz8.roa (hash: 5orvTDol3eTXI5dXq43C7qALvr3w4s4tGZvD+NFaA48=)
                          29: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          30: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          31: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
                          32: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          33: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:d8:39:f5:75:c5:94:11:b3:ca:8c:98:df:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Nov 15 09:01:39 2026 GMT
            Not After : Nov 16 09:01:39 2026 GMT
        Subject: CN=c335cd0036802b74a83842b99bd15fef17305824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:80:a9:fd:6e:76:60:f8:57:c8:cb:8d:ea:
                    b5:97:03:ca:d6:07:4e:3b:e5:f7:1a:28:73:50:4e:
                    78:a0:0b:aa:e7:b4:5b:7f:ec:ae:94:54:e5:86:c6:
                    0e:61:2d:26:90:11:c7:aa:c7:0e:75:d3:f0:9b:f4:
                    fb:3e:1b:18:c3:f5:d2:64:67:93:03:27:3c:1e:34:
                    6f:ff:84:7e:f5:c2:50:70:98:65:10:7d:a4:0a:0c:
                    0e:e0:0a:e8:ee:f2:25:a6:f1:fc:0b:b9:61:37:a9:
                    a7:ea:29:f2:8e:8d:84:25:9d:10:5a:44:eb:6d:54:
                    81:1c:ed:ff:e3:f5:ae:27:11:ad:e9:bf:c9:33:97:
                    50:85:e4:cc:cc:7c:6f:eb:d5:14:f1:23:90:6e:1e:
                    4d:16:d7:cb:5d:9b:69:46:84:3c:dc:b2:bd:94:c0:
                    59:96:6b:6e:fb:35:cc:1c:83:7b:00:27:a4:b9:42:
                    5f:67:bf:ea:0c:bc:92:19:7c:80:d1:3a:b2:ae:2d:
                    00:7f:19:e2:ab:53:65:27:29:88:8d:8e:ce:64:e9:
                    b8:49:81:d3:a8:c4:61:25:de:59:55:26:31:9a:d4:
                    69:f9:a9:1b:48:26:42:d2:25:3a:dc:57:ee:96:d0:
                    91:b1:92:53:1c:9e:d8:2f:f0:60:96:57:fc:b3:46:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:35:CD:00:36:80:2B:74:A8:38:42:B9:9B:D1:5F:EF:17:30:58:24
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:9f:c5:fb:6b:d8:4f:5b:e5:f4:cc:18:da:bb:f6:ee:0f:
         68:4d:1a:41:38:38:c8:dd:b7:a8:1a:bf:31:3e:1c:95:3d:b3:
         73:5f:1e:65:fe:38:96:52:c0:43:fa:e0:1d:32:5f:4a:5c:26:
         94:d6:af:73:22:ed:6e:ab:80:f5:0a:33:ca:a9:37:d1:89:d6:
         9c:99:3c:0f:b4:de:72:18:84:1b:f1:22:d8:3a:a1:fb:89:9e:
         15:f4:55:10:76:7e:65:9d:e3:d6:52:dd:77:6b:ca:01:0a:5a:
         5d:ac:00:f2:17:69:e6:47:7e:c4:cb:c8:63:fe:03:c8:a7:39:
         3d:7b:80:3b:d8:49:e3:73:76:d6:a2:90:c9:8a:fd:06:3f:8c:
         db:4c:c6:0c:7c:de:50:05:d7:1d:07:ae:16:21:9c:d9:a0:b9:
         7b:7a:a7:28:51:8d:45:62:55:63:1e:d8:3b:79:33:53:80:60:
         d4:10:19:84:d0:d6:90:57:07:a2:0b:72:f5:ce:48:66:a5:11:
         72:1e:1a:21:f4:ca:85:79:f9:d7:de:e6:39:08:53:08:09:19:
         d9:36:00:40:71:4c:81:b5:40:d0:a9:3f:fb:b5:cc:c7:4a:79:
         b3:82:ce:18:b3:d1:9c:47:bb:bb:66:05:d5:16:5a:28:e5:37:
         81:e8:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:38 2026 by rpki-client