Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          14uLgipzHG24g+847BlyNnY4KJHWyQ+uMoCpKU+QyUg=
Subject key identifier:   A7:28:F7:D4:C0:51:77:17:6D:8E:07:57:BB:DE:8B:74:83:4B:C7:FA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019CAB34A233D151A5975A09214651ABEF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1989
Signing time:             Sun 01 Mar 2026 21:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:19 +0000
Files and hashes:         1: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          2: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          3: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          4: 2lv9helKrNfPc3TB_-Dn0Zts7o4.roa (hash: 3lbss2o2h4CuATLyv+l9XLy36OCfQLbW8RjB8nT2FBA=)
                          5: 44zPPgoQLefQJI3vtkJc6EwhCow.roa (hash: bzc7Uz3fgjL7VzDC/dK+5179ZuptpvJrsvVm26txhZQ=)
                          6: 4HvB4qFalo_1qqI_rKnfviOYztg.roa (hash: i5sRQ8F3389u+PgOM4VLQhEnQu/uifFpZ69tkzfRmgQ=)
                          7: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          8: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          9: BI9M--P6yLGe4jvwVFojo0TL6DI.roa (hash: 5Hp6U9vwmy3Qj1szDvn3XgKpwr1D7A9keYBfO772XNU=)
                          10: E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa (hash: FoPG6dVyzwLVkXmSRMrejZ4jHtCGpIoYrs3nixOj+9E=)
                          11: EIzTw546AijLugfy7SUrbXCZrhI.roa (hash: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=)
                          12: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          13: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: c8ODOIGPaT44R29isMUztNCLCNSYJt58wd2Aviw9il8=)
                          14: H0U-QwhyM4f-LroxZSMHz-CzAPY.roa (hash: MhaU73mm5gvH2KHOTeU3CA7DM/8hD7ZaBXh+Nkvn0g4=)
                          15: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          16: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          17: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          18: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          19: P_sY_DTCv1Io83bexzwolbWVhG0.roa (hash: +CAC6PIgcMMFmmqnaKSrVcGgLoSieAQ3jT8XfXqP3tY=)
                          20: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          21: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          22: WEP0VCf6tlIVIn9Tq8TAnO9f3gU.roa (hash: OAN56ro5s2M8ZYuTdInaxrnEK2SH54sYG7CxweXFkoE=)
                          23: WecI-YUOokwpuS7sS_2GRUcLq2Y.roa (hash: VRMrOuGyEpfADO/bJz+wvHG2GsTgLnM2L9Lw5B/6XRs=)
                          24: XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa (hash: 0BskkM0mLyzjYlWTURXWwr/DgTkFtz5de7yH1kzkwwc=)
                          25: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          26: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          27: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          28: b-FVgyj2WxJKvDOTs1CHimHwx64.roa (hash: g6LGlCtZqdZpFtvcghFvuv8LtWYwAAGTzOHdhuBat+k=)
                          29: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (hash: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM=)
                          30: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          31: iv-DGbHi7jhC6-KbaXRuWKrxSJw.roa (hash: DCqm4T/AKjotRXUc3PC/vHyXchhsUr3+zqTpdaE+yuM=)
                          32: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          33: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          34: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          35: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          36: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          37: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          38: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          39: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:a2:33:d1:51:a5:97:5a:09:21:46:51:ab:ef:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar  1 21:01:19 2026 GMT
            Not After : Mar  2 21:01:19 2026 GMT
        Subject: CN=a728f7d4c05177176d8e0757bbde8b74834bc7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:ba:24:6c:86:2d:73:2a:18:58:e1:ca:3d:
                    6f:39:00:cf:1a:58:f2:5b:a7:d7:fb:03:46:87:25:
                    7a:46:af:c7:20:12:9e:f5:d8:e4:3d:5e:30:c7:78:
                    d4:0d:8c:12:27:e7:f5:c1:76:b7:04:0d:80:7e:cb:
                    9c:3b:77:ae:58:88:ea:4c:a2:c6:50:d3:2b:a7:77:
                    fa:84:da:68:e1:7d:92:c0:77:92:62:39:d8:d8:41:
                    6e:cc:cd:64:b7:26:7f:e8:8b:ff:d3:a0:f3:c4:a5:
                    26:11:2f:a8:a4:0c:b4:c0:19:df:b5:23:31:c7:52:
                    11:d4:66:20:80:5f:5e:64:2e:56:d7:bb:7e:a3:ec:
                    45:06:61:16:c3:af:3b:a5:c3:1b:7b:00:57:35:de:
                    1d:52:03:37:45:e0:ce:48:60:92:a9:ed:d6:57:de:
                    f2:90:9f:40:ff:23:86:02:cd:15:3b:cf:51:68:3d:
                    75:79:d0:af:14:87:2c:8b:5f:2c:17:53:48:97:d7:
                    0a:05:79:4a:23:43:be:3e:a1:49:e6:0e:b2:9d:00:
                    c1:4b:6c:a2:e1:8b:d2:df:1a:b4:ff:50:1c:4e:69:
                    8c:d2:66:e8:62:c2:d3:b8:5a:1a:f1:7f:fb:0d:d3:
                    43:8f:c1:35:ac:85:49:46:82:a9:7c:86:7c:32:a5:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:28:F7:D4:C0:51:77:17:6D:8E:07:57:BB:DE:8B:74:83:4B:C7:FA
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:5e:a6:7d:eb:ad:62:89:53:cf:75:29:68:61:9e:70:9f:
         75:bb:c9:d4:3d:b9:2b:b8:81:96:74:8b:2d:2f:5c:89:4c:2a:
         24:0e:56:c6:0c:c8:1b:cd:76:c2:e7:52:28:c5:15:17:b8:13:
         55:e5:2a:25:44:b6:3b:85:5e:f6:cb:b5:e6:8a:46:ef:92:2c:
         79:49:c4:67:90:6c:5a:3d:02:72:1b:5d:53:23:d9:43:70:fe:
         75:f7:ba:93:59:df:a9:91:9a:a1:c1:97:b0:78:0c:01:42:ff:
         81:b7:ba:63:6e:a7:ec:d1:9e:ee:8e:31:41:8d:f0:06:0c:41:
         98:a2:79:8d:c0:56:01:04:20:98:f5:c6:6c:56:ff:6a:e4:66:
         ba:08:a8:24:b8:8c:b9:61:3e:1b:ea:b0:af:b6:94:bd:f7:51:
         af:a8:d6:d7:34:b4:3d:b7:24:42:6e:f9:1c:e5:25:4d:32:f2:
         86:28:e4:4a:5e:16:22:fc:e1:8a:42:e4:0e:cb:24:bd:82:b7:
         79:7d:6b:20:9e:2d:12:bc:22:29:a2:c0:fd:99:ad:2f:b6:c6:
         cc:c3:2f:70:63:c8:e3:58:19:74:09:a1:16:6c:7c:1c:b5:bf:
         61:76:3c:5f:e7:10:75:71:ca:8a:57:b8:f8:28:c2:97:c1:8b:
         cb:1d:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----