Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          YcM7bMssp6eBd0P1dQ2g4YzEznkWOc/kh+h03iDwpXg=
Subject key identifier:   36:71:00:9E:A7:D4:B4:84:6E:8D:44:CD:3A:B4:13:58:F6:6F:B6:60
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019CA945BB7AFA67868BA17778B710F6D18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1988
Signing time:             Sun 01 Mar 2026 12:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 12:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 12:00:45 +0000
Files and hashes:         1: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          2: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          3: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          4: 2lv9helKrNfPc3TB_-Dn0Zts7o4.roa (hash: 3lbss2o2h4CuATLyv+l9XLy36OCfQLbW8RjB8nT2FBA=)
                          5: 44zPPgoQLefQJI3vtkJc6EwhCow.roa (hash: bzc7Uz3fgjL7VzDC/dK+5179ZuptpvJrsvVm26txhZQ=)
                          6: 4HvB4qFalo_1qqI_rKnfviOYztg.roa (hash: i5sRQ8F3389u+PgOM4VLQhEnQu/uifFpZ69tkzfRmgQ=)
                          7: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          8: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          9: BI9M--P6yLGe4jvwVFojo0TL6DI.roa (hash: 5Hp6U9vwmy3Qj1szDvn3XgKpwr1D7A9keYBfO772XNU=)
                          10: E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa (hash: FoPG6dVyzwLVkXmSRMrejZ4jHtCGpIoYrs3nixOj+9E=)
                          11: EIzTw546AijLugfy7SUrbXCZrhI.roa (hash: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=)
                          12: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          13: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: QRKS6M9ZxA7kBt0Le5umm5NVBQWLrKytXpev8gZMZw0=)
                          14: H0U-QwhyM4f-LroxZSMHz-CzAPY.roa (hash: MhaU73mm5gvH2KHOTeU3CA7DM/8hD7ZaBXh+Nkvn0g4=)
                          15: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          16: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          17: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          18: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          19: P_sY_DTCv1Io83bexzwolbWVhG0.roa (hash: +CAC6PIgcMMFmmqnaKSrVcGgLoSieAQ3jT8XfXqP3tY=)
                          20: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          21: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          22: WEP0VCf6tlIVIn9Tq8TAnO9f3gU.roa (hash: OAN56ro5s2M8ZYuTdInaxrnEK2SH54sYG7CxweXFkoE=)
                          23: WecI-YUOokwpuS7sS_2GRUcLq2Y.roa (hash: VRMrOuGyEpfADO/bJz+wvHG2GsTgLnM2L9Lw5B/6XRs=)
                          24: XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa (hash: 0BskkM0mLyzjYlWTURXWwr/DgTkFtz5de7yH1kzkwwc=)
                          25: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          26: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          27: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          28: b-FVgyj2WxJKvDOTs1CHimHwx64.roa (hash: g6LGlCtZqdZpFtvcghFvuv8LtWYwAAGTzOHdhuBat+k=)
                          29: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (hash: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM=)
                          30: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          31: iv-DGbHi7jhC6-KbaXRuWKrxSJw.roa (hash: DCqm4T/AKjotRXUc3PC/vHyXchhsUr3+zqTpdaE+yuM=)
                          32: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          33: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          34: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          35: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          36: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          37: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          38: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          39: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:45:bb:7a:fa:67:86:8b:a1:77:78:b7:10:f6:d1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar  1 12:00:45 2026 GMT
            Not After : Mar  2 12:00:45 2026 GMT
        Subject: CN=3671009ea7d4b4846e8d44cd3ab41358f66fb660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:de:c6:af:16:aa:a7:1d:69:ae:85:9c:18:
                    c4:05:27:d5:f6:8c:fb:34:c5:0f:a4:5d:2d:02:d6:
                    16:ec:3c:df:bd:24:f0:12:94:e0:6f:23:be:b0:40:
                    6d:9e:3d:2c:30:36:08:85:9a:de:14:92:18:3f:d8:
                    bc:03:ba:31:b8:73:d3:8a:69:86:37:d2:3b:64:e8:
                    69:77:11:20:25:c9:37:2b:e3:cb:05:4c:e4:a4:3d:
                    9c:a4:da:49:51:28:e6:a6:31:ad:56:d8:b8:9a:77:
                    2c:a7:77:2d:b1:92:67:75:a1:3e:b3:88:df:f1:9e:
                    60:57:4b:50:98:97:66:94:73:6f:0c:ca:f5:b3:e7:
                    8d:f8:23:18:23:68:8e:34:8b:3e:ea:8f:a6:35:9b:
                    d7:6b:3a:5c:53:c6:a2:03:4d:01:09:35:d9:8d:e5:
                    1f:55:3b:f9:e6:d3:ab:20:25:33:de:04:eb:4e:41:
                    2a:77:a5:ba:21:52:14:39:48:3e:04:e0:3f:b6:5f:
                    dd:84:dc:79:9e:ef:a6:ab:b3:71:d1:cc:80:91:10:
                    b5:1f:0a:89:17:e8:10:c4:36:37:c0:fe:c8:e8:37:
                    45:12:0b:b5:5a:52:b6:dc:a1:e4:d8:0f:20:3c:df:
                    8f:53:50:c7:ae:c0:89:55:45:b0:fa:44:72:35:1d:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:71:00:9E:A7:D4:B4:84:6E:8D:44:CD:3A:B4:13:58:F6:6F:B6:60
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:dd:85:a3:5c:ec:08:b8:b0:6d:a4:50:4c:bf:30:9b:f9:
         6f:81:bd:93:b1:d6:42:df:c7:10:70:ce:e8:62:cc:8c:8f:80:
         fa:58:77:f3:cd:ae:53:ca:b0:46:1b:e1:c9:ef:5f:5f:e4:df:
         e2:ab:99:cb:39:c0:0c:9b:d7:23:7e:96:4c:a9:4a:39:ef:39:
         4e:a0:b7:1a:bd:e6:98:e1:75:f0:7e:be:40:72:d7:a7:0a:95:
         d3:7d:fc:5f:20:0f:28:15:81:4a:a0:65:dd:d3:dc:90:eb:5d:
         95:52:bf:27:85:27:c2:27:d7:cd:fd:22:5b:8b:e6:76:30:c5:
         5a:20:10:74:f5:e0:69:59:f5:ab:3e:6d:b3:50:b0:90:cd:6e:
         f5:05:50:0d:1a:bd:e5:ab:0e:8f:47:64:38:72:13:f0:a8:a4:
         a9:f0:ac:2e:0e:1d:05:4a:29:f8:53:42:dc:d1:41:bf:d8:b0:
         11:cf:4a:22:41:f5:28:6c:7b:6d:de:08:54:aa:e8:bd:7e:1b:
         ce:07:42:4d:3d:42:64:99:b7:ae:e7:c4:fc:f5:e2:56:ff:ad:
         f1:c1:df:47:58:91:7f:7b:21:33:fe:37:8c:ac:53:ae:fd:cc:
         bc:0f:49:d7:03:68:bb:a1:51:2d:cc:47:74:9c:6a:fb:bc:57:
         70:41:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:11 2026 by rpki-client