Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          qADMOy1AHeZQ8t12qnkXMuwO+4FPZwTYp/Bv8xjyFmU=
Subject key identifier:   FB:97:82:EA:B5:19:0B:3E:27:AD:67:AC:DE:E2:B8:EF:55:13:A6:94
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019FA9ABB48D527835E7B558661DF986F0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1B31
Signing time:             Tue 28 Jul 2026 17:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:30 +0000
Files and hashes:         1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
                          2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          7: CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa (hash: 5fJPe+eX7sQDBwrHzP9tK4pCYoIPbZwz6vPeuUSzBZo=)
                          8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          9: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          10: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: e9u0tp/La8srr12HnpThfyZMOGv5sMvu4D2xbsnjxcI=)
                          11: HgmGhHhflSc83-12eOaUVFkQZ7A.roa (hash: TVfWDXrhIGbWC7iEdqwCMqeSIvitThoDMENS1YOjOUg=)
                          12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          13: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          14: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
                          15: L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa (hash: eZHdi1uoI4O0n9vGs1id6DxX8FOaQEq3LrkqkgiYU50=)
                          16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          24: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
                          25: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          26: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
                          27: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          28: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          29: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          30: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
                          31: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          32: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          33: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:b4:8d:52:78:35:e7:b5:58:66:1d:f9:86:f0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jul 28 17:00:30 2026 GMT
            Not After : Jul 29 17:00:30 2026 GMT
        Subject: CN=fb9782eab5190b3e27ad67acdee2b8ef5513a694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:c7:2b:71:0e:b6:cc:ae:b4:9f:9e:9a:d5:
                    9a:f1:a8:49:48:64:56:3d:19:c0:c7:99:b4:7e:87:
                    c4:33:4a:7f:99:9b:5b:81:39:3b:a6:5c:2d:fd:30:
                    26:31:e1:fb:d6:8c:0c:df:23:ef:70:97:dd:3d:df:
                    13:6b:ee:95:e7:6d:e2:d8:4f:b6:7e:b4:6e:12:a9:
                    cc:e8:fd:fe:8d:89:aa:ca:31:99:ca:cc:a1:e0:05:
                    73:b9:fb:fa:0c:5e:54:6c:8d:c2:ed:0b:0f:70:b4:
                    22:fc:78:54:bb:a1:98:f9:44:33:4e:82:ee:8c:71:
                    76:7e:2f:c4:44:c1:56:d8:79:bf:f2:89:18:b0:89:
                    7f:ce:e0:b4:ae:0f:c5:78:f4:d1:3a:d2:08:b5:3f:
                    7a:50:73:84:43:96:07:df:f9:c2:30:b4:85:5e:7a:
                    38:34:45:24:8f:ec:03:ef:7a:08:ae:f5:a6:96:7e:
                    5f:f8:a3:ad:d3:a3:4f:fb:91:1d:52:b6:40:2b:8c:
                    48:38:fc:1a:44:27:ef:7b:0f:8a:fe:b4:64:fd:59:
                    7e:d0:71:8a:9e:91:8e:c4:76:46:fb:89:2b:f8:29:
                    42:b0:23:c3:8a:05:ee:1a:f1:eb:a6:3c:bb:78:fe:
                    e4:1a:b5:d0:c4:8e:80:d1:8b:35:16:b1:40:62:e2:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:82:EA:B5:19:0B:3E:27:AD:67:AC:DE:E2:B8:EF:55:13:A6:94
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:eb:9c:89:2d:7a:23:0c:47:2a:2a:77:40:12:30:66:e0:
         b3:50:04:c8:f0:c1:23:06:2d:5c:34:54:26:95:e5:60:77:b4:
         d4:ff:47:9e:2d:f2:b1:dd:c4:1c:ac:14:f0:f1:b9:45:40:70:
         03:97:38:3f:32:9b:a5:4f:30:7b:c0:73:4d:cc:57:1b:8a:a3:
         6a:ee:96:49:78:ff:df:13:b4:60:dd:21:41:ff:37:de:75:49:
         ef:07:11:ff:1c:59:12:38:c0:d2:52:cb:67:23:6f:57:48:c6:
         5c:64:9e:c8:30:e5:be:1c:0e:cb:84:df:6e:d4:c8:4f:ec:cc:
         5f:d1:4a:d4:c1:8b:24:95:c5:8a:01:45:a3:c1:b8:34:d8:81:
         20:9e:64:2d:50:ba:f2:f3:55:3b:5a:09:d4:ce:4e:ab:09:6c:
         ae:22:a5:bc:50:4e:af:f5:36:b2:3a:4b:ee:61:7e:96:f2:9f:
         1a:3f:57:2d:1b:c1:e5:a8:dd:4b:2f:24:60:44:6c:37:ce:18:
         dd:af:8e:15:06:d0:25:aa:0d:78:28:23:e6:2d:e7:3f:93:5c:
         9e:27:34:a1:d8:b4:1d:bb:26:ac:a8:f3:de:dc:94:9a:78:11:
         c1:fd:56:b9:33:38:48:de:4d:de:17:1a:4d:11:0a:c6:88:b2:
         41:bb:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:39 2026 by rpki-client