Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          ehRC6n5Jb9j+2FaY0NAkcSdiVwf6oOqAlTYtCkWUFEA=
Subject key identifier:   D9:CC:EC:5F:8B:F1:B7:B1:3C:92:C4:1A:53:D1:A6:10:7A:26:77:F1
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019A4E4F34F1FCA4984720D130D4F88A332F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1841
Signing time:             Tue 04 Nov 2025 10:00:04 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:04 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:04 +0000
Files and hashes:         1: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=)
                          2: 1-WTtBjMSRrb4TAl7DySIOk7FY38.roa (hash: oHE7Yoyc0yluIv4batxOrntXR8UN3jcb6OoGC5ontY0=)
                          3: 326CMhRebacBUPQalSnj3YJYybQ.roa (hash: /NLGA7KLSgvqWOaQYDbgq4LbVYOg/ikPKnCGrwjkkCM=)
                          4: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=)
                          5: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=)
                          6: 6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa (hash: pSLhM/hRoovgEjgf+bz81N5PCn36Sbq5zBr5OXVmzxA=)
                          7: 9hwIee2iKDmXri9_fQ5eY0haCLM.roa (hash: G8lHAVoCj8lJj6Xnagqlp/q17S/Fw+kEY201Sx1VbeI=)
                          8: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=)
                          9: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=)
                          10: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=)
                          11: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (hash: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=)
                          12: Efu7W7ymCVkMFnSxFobAtH6rcks.roa (hash: NwX73vNbaowMG9DfSLk1rZ0g5R19GmDzCqOAJqdwlL8=)
                          13: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=)
                          14: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: yK81DIjsjYXjhFA2becuCVSzoINmlkYHUt8N71NHeDk=)
                          15: GbxtRPQwfoQV6FvhVdB0jvr2vRA.roa (hash: sBV2MtYwt+QZhE+a75Mo+LifJiO4Kf/NRarvun19aJQ=)
                          16: LHFZ_8A1nB1N8zjUml3ZrGoW2eU.roa (hash: Oe+QcIqHf/AMmU3db+4I1/thFEAqfc4bB9KsP1qHtj8=)
                          17: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=)
                          18: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=)
                          19: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=)
                          20: Re37Ja-G7J0N9Ay2eCZ6qY8gvik.roa (hash: z5TsLpHb6KLUfsCQW7AKalpKIJngPwM3kIpXNuAM5qo=)
                          21: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=)
                          22: ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa (hash: EtvOvEJo6Cyf77jVld5ZTV+Rsw+jH9y+Q9afLM+AFLk=)
                          23: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=)
                          24: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=)
                          25: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=)
                          26: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (hash: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=)
                          27: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=)
                          28: lB0Y2eWw2fGl9D9NoUITBeh5ifY.roa (hash: cMwnQErfZS+RI9A5SCPbtMwp8CRjpQ5GBhjM47lkuFs=)
                          29: luIF5RSE4UEeRnyDIACAMFK7ptU.roa (hash: prVzhZnIZRH6h67iHI2zHii5E9vi8C/WoWfLyxFMxMI=)
                          30: nwVznY1vTte-l8XB9qszVQuk5Ok.roa (hash: J9RM0fwCWpkVRTQQXMJ9b/yvLhlgyRqxXrtW1KNskP8=)
                          31: q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa (hash: 5KGuyKJFaspfluOwOBDClndwqaUf6P40Y1cAOywOboE=)
                          32: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=)
                          33: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=)
                          34: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=)
                          35: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=)
                          36: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=)
                          37: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:34:f1:fc:a4:98:47:20:d1:30:d4:f8:8a:33:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Nov  4 10:00:04 2025 GMT
            Not After : Nov  5 10:00:04 2025 GMT
        Subject: CN=d9ccec5f8bf1b7b13c92c41a53d1a6107a2677f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:d9:4d:ff:32:82:39:f8:5a:94:08:a6:da:
                    d2:b5:b7:15:c5:f9:8c:10:a4:57:c7:fb:90:76:47:
                    24:1e:b1:07:9e:8f:8b:83:3e:5a:0e:35:b7:75:1c:
                    4c:ca:7f:67:fc:7e:ff:3b:a0:ef:c6:cc:de:3b:ae:
                    22:7f:6d:5d:1d:68:f1:f3:c1:8c:42:da:8c:cf:5d:
                    a0:95:ec:a0:e9:79:f8:03:b4:be:1b:52:35:97:a2:
                    cb:2d:c0:be:5a:cb:6a:10:f9:07:00:0c:24:b9:be:
                    9d:ca:8e:95:49:4d:78:93:af:d5:4e:1f:14:cb:35:
                    e4:64:c9:b3:62:9e:16:ba:13:f0:fe:65:73:e9:ac:
                    27:f7:ca:60:38:22:1b:bf:7a:f5:65:56:d9:f7:c1:
                    0d:6a:44:15:78:f3:29:74:67:da:1f:05:7e:65:07:
                    e1:7b:d0:47:5b:1a:07:be:a6:f7:f2:01:97:20:ce:
                    5d:4e:67:d1:58:10:82:ea:d1:db:ba:9d:4e:23:09:
                    88:7a:2f:31:af:4d:9f:ad:2f:cf:d5:44:ef:33:28:
                    82:61:c6:96:8c:d1:49:9f:3c:98:df:48:53:31:df:
                    16:54:bc:cc:8a:e6:da:2d:aa:f7:17:b7:9a:0d:16:
                    71:7d:9c:42:35:7d:b6:f2:19:4c:fe:b9:41:15:4d:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:EC:5F:8B:F1:B7:B1:3C:92:C4:1A:53:D1:A6:10:7A:26:77:F1
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:05:80:34:1a:aa:bd:8d:65:5f:c2:db:32:d5:4b:ac:ee:02:
         69:25:55:3e:b3:f1:d2:71:81:68:2c:88:54:46:bf:d0:c4:f8:
         59:e1:b5:38:2a:92:2d:46:96:5e:b1:70:be:21:c3:a8:98:c2:
         aa:b3:2a:56:9f:88:ce:e9:66:b2:ee:54:e2:a9:94:ef:1e:09:
         bb:16:cb:fc:a8:a9:04:44:51:33:57:fe:32:f1:13:69:36:f2:
         a7:ab:64:92:8e:f1:22:2a:59:ae:c5:42:fb:91:cb:3e:7c:57:
         c6:eb:92:2e:65:1d:d6:a9:81:30:0f:9c:1f:e2:05:1b:93:35:
         fb:5b:d2:4a:1e:82:e3:59:4c:12:e9:74:ae:3b:57:02:97:c9:
         f8:dd:3c:dd:c3:96:da:e1:fa:3a:35:c2:a4:bf:f4:67:3b:27:
         be:09:9a:e5:2c:85:20:af:9a:4d:5d:1c:1c:ff:be:30:31:50:
         59:d1:af:93:5c:b7:09:46:c8:4f:df:9f:c1:44:31:df:91:08:
         cd:f6:13:d1:46:69:c5:09:fa:df:d3:d3:42:3b:b4:3c:47:99:
         c1:c9:be:22:05:d2:fa:f2:96:43:b3:11:3d:b9:7a:20:3a:ae:
         1b:c5:c6:4e:a2:32:ca:13:15:a8:77:a1:10:5c:3c:ea:ec:7d:
         f1:82:30:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----