Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          8Sv/UZYHJM31CEv55FW1X+IGE/7Pcde40NKcrm+w/I0=
Subject key identifier:   81:9E:72:47:EC:B9:E5:9C:70:FE:0F:2D:23:4B:38:12:A5:B6:B4:C8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       0198733D4795C8B9188843EB0F68C8FC089A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          173F
Signing time:             Mon 04 Aug 2025 04:00:52 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:52 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:52 +0000
Files and hashes:         1: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=)
                          2: 1-WTtBjMSRrb4TAl7DySIOk7FY38.roa (hash: oHE7Yoyc0yluIv4batxOrntXR8UN3jcb6OoGC5ontY0=)
                          3: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=)
                          4: 3HH58WmzWmQCD-OlTJN8dT8qa1M.roa (hash: of/nshXajmaTh0hvVJ+3GLNAI3gzOJPgVJPnBaDun6w=)
                          5: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=)
                          6: AlF6QUDYgPNFHoKES1GWsxqjDZg.roa (hash: b7yXTIUjvVlWzsxXNANwzdQ/qhc6RpUsiAkzEgXrpaU=)
                          7: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=)
                          8: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=)
                          9: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=)
                          10: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (hash: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=)
                          11: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=)
                          12: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: J1bhM82kDSl64f9ESd07aZ9uBWuTxIyz1x4JGH0Hn/0=)
                          13: H05bxxYxtoijKcQ7lhpPPlR8JdU.roa (hash: v4GsRYWU+dWPTkFjL7lY7n7wJBqCf67cIpnIDarcBUA=)
                          14: IQjgdPPcGOO-XEQSZxJ9maUCgq8.roa (hash: q4KGBpctUI3JXRA8plNcbzzfMeW2mF1ev2R4OL9CYXw=)
                          15: J4ZDk3-dcZfjy_jR31SKpOx3Pbg.roa (hash: AEYn++tQHhQRRbaUmP9Ws1Lj2XgUlFiLNVmikfCzb2I=)
                          16: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=)
                          17: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=)
                          18: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=)
                          19: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=)
                          20: Z0mVIzzwihiMrChjaUfgLAAcrzk.roa (hash: T5T6lkDC3yCNJIhSu0bJj6TNlxuLUdjE+FT03IFD5Mo=)
                          21: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=)
                          22: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=)
                          23: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=)
                          24: e0DnWMnFmTru3C2aoS2JyaRDfus.roa (hash: fqlHTmNWiwqv1CPk291HDWeErulj/q6A/K6RapftY6s=)
                          25: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (hash: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=)
                          26: ehdBxAB_s_oyu7mn2EhLWbwjh7U.roa (hash: 8ENm1zYmYI/0iufjtnkA4MrHv/iDYfzRKy9sjlfQWK8=)
                          27: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=)
                          28: luIF5RSE4UEeRnyDIACAMFK7ptU.roa (hash: prVzhZnIZRH6h67iHI2zHii5E9vi8C/WoWfLyxFMxMI=)
                          29: o2x-oVc1zQxFkOL6DbwKH34fpBI.roa (hash: 8mQR+Hkf1kUDohUWdvvrhz0M3trQS0HeWkXhCUEMUBM=)
                          30: pnd3YojRi7DZYpXBXFp9kwat45Y.roa (hash: L/sfRRwnOa3q3wB7hNxXjSMDs2syDkgziLpoLHkufh4=)
                          31: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=)
                          32: sW_Pe5AiNGRK8YU3M9QNoMiFE0k.roa (hash: OI9qX7YhyRhGAGILyJE9MQsxymJKu7dbedIOFUkDFak=)
                          33: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=)
                          34: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=)
                          35: uXGJLAkLx9YFzntYRYNs8t7Agh8.roa (hash: UoPuFA4VH9eXYN9tJa/5gFxX302v7sxeA3qQO26shzE=)
                          36: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=)
                          37: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=)
                          38: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:47:95:c8:b9:18:88:43:eb:0f:68:c8:fc:08:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Aug  4 04:00:52 2025 GMT
            Not After : Aug  5 04:00:52 2025 GMT
        Subject: CN=819e7247ecb9e59c70fe0f2d234b3812a5b6b4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:76:04:ad:61:e0:e1:98:9e:70:c9:20:03:
                    1d:3e:e3:d3:86:8c:9e:96:d9:8f:da:c6:f0:ce:ca:
                    72:1e:d5:96:ce:9c:8d:88:6c:cb:e4:5f:81:d9:dd:
                    05:93:22:4d:7b:9e:53:23:dc:94:8c:2d:45:bf:9c:
                    d7:13:80:81:d7:3b:b4:d7:40:a6:9d:98:ee:2c:8f:
                    cf:a4:2c:39:64:bf:e7:3b:07:4c:c0:58:6b:a3:9f:
                    6b:55:c1:66:a8:b7:a4:75:4f:0a:45:e3:21:89:a7:
                    e9:d1:d0:d7:b1:92:f7:64:4b:44:11:39:c6:00:60:
                    15:f2:ec:9d:a2:14:3c:a2:f6:24:7d:1b:d9:89:47:
                    26:13:df:b8:2b:a0:7a:a1:9c:98:2d:2d:56:62:fe:
                    01:9b:24:a7:b3:35:6f:7f:31:52:64:0f:95:16:d6:
                    6b:10:24:79:5c:c4:1e:5a:12:9b:0b:5b:92:6a:23:
                    42:a7:a4:ee:97:ad:c0:c8:91:af:86:82:07:d2:97:
                    d8:11:cd:1e:53:bb:92:43:ca:38:43:42:85:0b:a6:
                    30:07:ef:f5:32:af:ca:5f:d5:8a:03:6a:cf:ea:2b:
                    2b:0b:a2:ab:4f:d3:ee:6d:ee:77:71:39:a3:78:ab:
                    f8:36:e9:30:41:28:be:a8:6d:10:8f:5e:e6:d5:06:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:72:47:EC:B9:E5:9C:70:FE:0F:2D:23:4B:38:12:A5:B6:B4:C8
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:64:f9:d1:64:12:e2:44:97:f3:b4:fe:1d:6b:a9:41:3a:03:
         7c:77:e4:f8:77:a7:46:c1:5e:f0:e4:5e:c9:86:98:77:bd:af:
         26:97:8a:ff:cf:50:ba:2f:15:fd:2e:32:c6:af:c9:d8:e6:f8:
         80:1f:94:30:ca:c9:63:2d:d0:ff:4c:ed:32:33:c6:96:8b:5d:
         a5:9b:b2:e2:d9:a3:99:8d:19:f4:a7:db:7a:12:60:90:9e:26:
         4b:5d:79:e8:bd:26:4d:ee:a4:7e:0f:14:ab:7b:1d:54:0d:71:
         e2:6c:5f:67:ae:27:7b:12:0e:df:60:dc:46:14:27:c3:db:98:
         38:c7:60:eb:b2:6b:69:68:bc:27:79:59:4a:e8:52:b8:32:32:
         85:fa:6d:ca:e9:3e:c9:c7:b9:0d:08:1d:b0:39:ac:c1:7b:94:
         67:b9:3f:e2:83:7b:40:75:46:be:1b:db:1b:17:67:fd:8b:7b:
         d2:0f:c9:df:61:8f:ca:91:28:11:a1:15:35:57:2c:16:70:c2:
         0a:2b:5a:30:b7:ea:29:25:65:bc:f4:09:40:cf:2f:e2:29:d8:
         f1:1a:c6:2e:f6:f8:17:fe:58:93:21:8f:aa:7b:a5:3e:f5:59:
         e9:e2:10:92:d8:85:13:f2:40:18:aa:80:7c:8e:46:08:b5:af:
         96:48:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:51 2025 by rpki-client