Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          bxIfFDPhHrNsNnE6gZXNCLPihi8wpissvO+WEsqx488=
Subject key identifier:   9A:A2:AD:16:6F:2F:43:72:2B:21:FB:49:17:91:2A:32:EA:76:38:02
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019EA89B543B51C4FCE47306D4554A2AE33A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1AA8
Signing time:             Mon 08 Jun 2026 19:00:12 +0000
Manifest this update:     Mon 08 Jun 2026 19:00:12 +0000
Manifest next update:     Tue 09 Jun 2026 19:00:12 +0000
Files and hashes:         1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
                          2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          7: 9mcCz1BF0nXdnaTlQ3QcSreUiPo.roa (hash: rRcvwbRRs/wuWNbtdMrKFp1XLC4v+K5i/ai2GW5ni0c=)
                          8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          9: EIzTw546AijLugfy7SUrbXCZrhI.roa (hash: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=)
                          10: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          11: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: Aazhq5YmL6R2M052wBvEhIg+NCencHfibRG9XbidbhM=)
                          12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          13: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          14: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
                          15: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          16: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          17: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          18: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          19: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          20: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          21: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          22: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          23: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (hash: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM=)
                          24: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
                          25: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          26: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
                          27: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          28: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          29: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          30: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
                          31: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          32: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          33: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 14:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a8:9b:54:3b:51:c4:fc:e4:73:06:d4:55:4a:2a:e3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jun  8 19:00:12 2026 GMT
            Not After : Jun  9 19:00:12 2026 GMT
        Subject: CN=9aa2ad166f2f43722b21fb4917912a32ea763802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:73:3e:9e:01:f7:75:62:de:fd:0b:4a:88:
                    fd:19:6c:cb:27:20:09:98:a7:9d:91:86:04:97:ac:
                    61:fa:0e:fa:41:b5:52:a3:bd:07:3c:fc:3c:42:d8:
                    63:ea:53:9d:27:cc:15:7d:49:ad:a1:d8:04:71:c4:
                    68:c5:b9:9d:4e:09:11:e8:a4:f4:b5:8e:5b:e9:55:
                    e1:17:c7:d0:6e:88:c6:1a:df:50:5d:b1:95:52:0e:
                    6b:bc:f6:59:8f:6b:67:eb:e5:12:0b:2f:ea:a0:f7:
                    e1:6a:a7:15:14:c2:9e:a4:a1:b9:4c:09:50:83:6f:
                    c5:68:26:fe:00:98:93:5b:32:7e:d8:21:34:31:72:
                    95:85:de:65:5f:98:76:d0:39:2a:2d:de:f5:d8:82:
                    27:9c:90:06:2b:ec:2d:29:92:40:ed:30:d9:7d:2c:
                    19:06:9a:a2:0e:42:af:15:aa:2d:62:73:90:d5:cc:
                    51:fc:62:07:20:e5:01:ac:4a:fc:b4:01:6e:df:59:
                    82:51:5d:8e:d3:de:2d:8d:58:66:58:a8:85:af:12:
                    ab:6c:f3:ad:05:a6:56:f7:fd:a4:8c:2e:ac:00:0d:
                    61:e9:f7:07:70:6e:2d:3d:ce:f7:60:4a:99:bb:c9:
                    07:35:d9:2b:25:e7:cc:8d:23:b8:e8:fb:bc:b9:bc:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:AD:16:6F:2F:43:72:2B:21:FB:49:17:91:2A:32:EA:76:38:02
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:07:e4:fd:7a:c9:38:33:43:20:9b:66:27:ea:b1:b9:86:be:
         b5:88:fc:7b:e1:d5:62:f4:fb:e9:ed:12:22:19:e5:56:60:f5:
         1e:7b:6f:8c:25:9d:9b:39:9e:d4:46:26:f5:c7:52:24:fa:54:
         f4:a4:04:54:6f:60:14:1a:79:17:21:08:91:81:94:d6:17:dd:
         f2:5a:34:c7:49:51:aa:12:60:e7:87:32:9e:a7:bf:dd:78:c0:
         c2:46:e6:d8:36:55:af:df:9f:d1:0b:57:e7:bb:97:d5:89:dc:
         53:e1:97:26:69:8c:ca:43:11:62:86:33:20:17:48:41:27:d6:
         59:3e:84:10:d1:68:7b:e5:38:4d:09:55:9b:62:1e:56:05:2c:
         01:d6:aa:e2:c9:ca:5c:3f:3a:a0:29:14:05:e8:d1:1f:bf:62:
         f9:df:c8:de:e1:24:75:51:62:03:45:ff:9c:63:30:2c:7a:ff:
         bf:6a:71:84:2b:dc:ff:11:30:88:c6:ce:01:a4:49:21:52:ba:
         9a:e7:70:bf:9c:40:12:f9:23:fa:2f:cc:cf:2f:36:3f:50:be:
         a2:ab:2f:9b:fd:30:c5:1b:38:72:24:e8:60:f8:99:5c:9c:4c:
         d6:0d:4e:53:85:98:b9:b7:65:e4:cd:5c:ea:98:0c:8c:48:20:
         66:92:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 21:43:32 2026 by rpki-client