Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          0Iore10LgrbZcabR5aXacY8Eh8dUIsfYpg9pSk1v7w8=
Subject key identifier:   B6:5E:56:1F:9D:3C:8B:00:10:17:9E:FC:9E:08:05:FE:42:52:8B:0F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019A560905A40875C38AF9FB5DB26BFDA2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1845
Signing time:             Wed 05 Nov 2025 22:00:23 +0000
Manifest this update:     Wed 05 Nov 2025 22:00:23 +0000
Manifest next update:     Thu 06 Nov 2025 22:00:23 +0000
Files and hashes:         1: 0NtgYlJJvTfGGSg9uWuXHVUtbKQ.roa (hash: VtmDCIwcBUvL2x6RB7kiXFf/1srq/NDHnxfxMMTUCk8=)
                          2: 1-WTtBjMSRrb4TAl7DySIOk7FY38.roa (hash: oHE7Yoyc0yluIv4batxOrntXR8UN3jcb6OoGC5ontY0=)
                          3: 326CMhRebacBUPQalSnj3YJYybQ.roa (hash: /NLGA7KLSgvqWOaQYDbgq4LbVYOg/ikPKnCGrwjkkCM=)
                          4: 39XR9gBKQrG6LxG2wzVWL_KkeMU.roa (hash: mU6/EG59BLaesa87kFWpZhizLk/RVNBRnMmVidKQ8CI=)
                          5: 5UkkEsoZ3w1YDscrSK5B387jdos.roa (hash: 8qV0H0M0l2IQGgcHERPCPwjcYOJi1LIxybA4/gYedMA=)
                          6: 6qt34O5r4AjAnQ0t5oZPoEzIqjE.roa (hash: pSLhM/hRoovgEjgf+bz81N5PCn36Sbq5zBr5OXVmzxA=)
                          7: 9hwIee2iKDmXri9_fQ5eY0haCLM.roa (hash: G8lHAVoCj8lJj6Xnagqlp/q17S/Fw+kEY201Sx1VbeI=)
                          8: BBjQDtjU4RjtZKKRvVC01fwnNLM.roa (hash: 2vzWYcFXPPrIUMgxlq3Ga7r31/5mwkF8fsLBR1SdEzQ=)
                          9: D2kQV4a4-SzltU8ixGA6WZgf16A.roa (hash: IkzSqVRSq6I840JQGk+rU8IQp9HSCfrIvv6qEOQgsX8=)
                          10: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (hash: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=)
                          11: EZzjf_-vQMrsYDAB6s-xQEYNxpE.roa (hash: Ea0xViQ1atBZU0IFe/rxesQiMWH6P2eDXrbPzxp0BHU=)
                          12: Efu7W7ymCVkMFnSxFobAtH6rcks.roa (hash: NwX73vNbaowMG9DfSLk1rZ0g5R19GmDzCqOAJqdwlL8=)
                          13: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (hash: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=)
                          14: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: L2onikodn2Exht2S/Mx/Tj8Zi3agjmTvWTf496F359s=)
                          15: GbxtRPQwfoQV6FvhVdB0jvr2vRA.roa (hash: sBV2MtYwt+QZhE+a75Mo+LifJiO4Kf/NRarvun19aJQ=)
                          16: LHFZ_8A1nB1N8zjUml3ZrGoW2eU.roa (hash: Oe+QcIqHf/AMmU3db+4I1/thFEAqfc4bB9KsP1qHtj8=)
                          17: MRG3_FOrOZR1ycbEYgpzuvXiwwg.roa (hash: G6Yjq9y1G/KTbpJTj8c9lYG4uMJ+BxAZW7rst977Pck=)
                          18: O4RqMFB6iMXl3vaqKCf9h6D4j-Q.roa (hash: J3IKFZhZs8J5eFV/+kyk+FnDqJZPNZpidNI4lxVgoMM=)
                          19: Pqg_2K1yOT0CSH_CM3Py0_-ARwo.roa (hash: SgTD8xqV3QXIoJic4+Z8sLVBeFsl/QsdUDPIEaZY1lc=)
                          20: Re37Ja-G7J0N9Ay2eCZ6qY8gvik.roa (hash: z5TsLpHb6KLUfsCQW7AKalpKIJngPwM3kIpXNuAM5qo=)
                          21: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (hash: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=)
                          22: ZgsJ4mKKbbIsgFOoVyjqV8FKBWE.roa (hash: EtvOvEJo6Cyf77jVld5ZTV+Rsw+jH9y+Q9afLM+AFLk=)
                          23: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (hash: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=)
                          24: aKH8fqPHe8R2liostKpVkUXBe_g.roa (hash: m9o9e5vF0yO4O4WdUCWYwnYdBqnXUgRsnmXxD8jWkXg=)
                          25: cKVkknJPAIk8alE1ewz9n9F_Cro.roa (hash: 89bpkreBP8I+Dvtz78KmzGyoqngiNKlMkxhHJoIoY/A=)
                          26: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (hash: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=)
                          27: k2CheNe1G0TsTMkgGnXQ5PjR9co.roa (hash: hsMFTDdX92aPiND6klOng6tQ7+N3QHWZTgVp/F3Xp7o=)
                          28: lB0Y2eWw2fGl9D9NoUITBeh5ifY.roa (hash: cMwnQErfZS+RI9A5SCPbtMwp8CRjpQ5GBhjM47lkuFs=)
                          29: luIF5RSE4UEeRnyDIACAMFK7ptU.roa (hash: prVzhZnIZRH6h67iHI2zHii5E9vi8C/WoWfLyxFMxMI=)
                          30: nwVznY1vTte-l8XB9qszVQuk5Ok.roa (hash: J9RM0fwCWpkVRTQQXMJ9b/yvLhlgyRqxXrtW1KNskP8=)
                          31: q6_j7ZJumtWy4CDdqEMJZHxEteQ.roa (hash: 5KGuyKJFaspfluOwOBDClndwqaUf6P40Y1cAOywOboE=)
                          32: rkZrhmXXyE1TZG2S5wTEEIL8XSE.roa (hash: BvHeSA9IkomLWVMOuV01WcdC0lVpTd606NLDuKQDK88=)
                          33: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (hash: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=)
                          34: u89KnzApRWyGhcPTLdgZ7ML8tNU.roa (hash: 54E9dW23liJpNppUbOc3IsBoo6a7GdvgeqO/K6cGNJE=)
                          35: vWkR2ommemciEbtTvGipPteD6Gk.roa (hash: +cFByUubHRF8bqG70hJkaXj+aJ6pP9FCyRPJEyQ6yYw=)
                          36: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (hash: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=)
                          37: zPCX-UEPVanoEkB1oXKg59MDOug.roa (hash: 5LzabEg6mOtGkQ6DWBw64aSFfUgZe3PXcUpOjBmk5Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:09:05:a4:08:75:c3:8a:f9:fb:5d:b2:6b:fd:a2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Nov  5 22:00:23 2025 GMT
            Not After : Nov  6 22:00:23 2025 GMT
        Subject: CN=b65e561f9d3c8b0010179efc9e0805fe42528b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:52:1d:b6:19:d6:d6:82:d7:51:54:56:44:
                    91:30:f3:d0:a4:56:ac:11:84:84:a9:a1:ba:46:2a:
                    15:6e:2f:96:25:32:20:40:03:22:a1:86:38:2b:24:
                    93:78:de:2f:7a:34:10:e4:f0:4d:bb:50:b0:c0:a2:
                    bf:2c:cf:50:04:9d:12:e1:be:04:da:df:3c:fd:90:
                    bc:10:88:2c:f5:ad:4d:3c:b7:39:3f:b8:0e:af:f3:
                    6a:e8:f5:e6:17:aa:b7:63:df:77:eb:31:13:49:8b:
                    86:9a:40:46:d4:7a:78:f6:e4:62:a2:e2:a9:bf:15:
                    e5:ce:e2:d1:08:33:fb:8f:e3:8f:91:3c:c4:76:c4:
                    72:fb:b7:5c:f6:96:48:e4:ca:61:9b:4d:ac:d3:ba:
                    ed:ff:21:51:b8:29:c9:8a:c1:bb:5b:c6:81:b8:42:
                    01:da:ab:a1:fd:ca:e5:c2:e8:1d:0d:b6:b3:58:1a:
                    20:2c:a2:b9:ff:4e:ed:ab:50:2e:17:ce:0c:d6:7e:
                    04:e4:43:4f:d8:03:93:74:1d:c6:e3:74:0e:13:d2:
                    61:6e:21:57:2e:25:d1:cc:79:e8:ba:f5:2c:31:5a:
                    e5:d3:bd:45:21:ce:a1:ef:cd:b3:16:2b:f6:1e:f5:
                    d7:86:7b:dc:86:db:e2:c2:8d:4d:78:9a:c1:ca:68:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5E:56:1F:9D:3C:8B:00:10:17:9E:FC:9E:08:05:FE:42:52:8B:0F
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c0:ba:6c:a1:c7:05:af:db:ed:69:ba:82:45:26:8e:4a:6f:
         63:e8:12:74:c1:6b:d7:3c:94:ec:61:66:ee:b6:07:da:60:99:
         35:3e:73:63:69:7c:d4:c5:c4:7b:e3:69:6f:88:6d:45:3b:b8:
         7a:34:7d:c8:d7:99:11:e7:62:c4:b2:5f:b0:bb:9a:e3:50:b7:
         c3:ec:59:2e:4b:32:63:eb:c8:5a:9e:ae:f1:94:cb:f7:3c:5f:
         48:04:ae:5d:3a:c2:0f:1f:d9:ab:d7:be:2f:a3:43:29:6b:f2:
         ff:1f:8e:a9:a0:82:52:21:68:46:aa:66:2f:b2:c0:49:44:91:
         2e:5f:31:a0:06:9b:0f:f2:e9:c7:3c:44:0a:24:d6:6c:0f:ca:
         b1:6f:24:f8:8a:41:85:0d:3e:fc:fd:af:64:21:16:fc:37:ab:
         31:8c:93:c0:2c:b1:c6:59:af:01:ed:9f:39:86:08:22:06:b7:
         4f:62:d0:67:c8:00:e5:22:8c:13:48:e0:bc:26:c8:59:54:aa:
         12:c9:f0:9f:47:fe:e8:0d:73:88:60:a7:01:05:0d:71:8d:2f:
         04:af:35:c9:4e:f7:cc:13:06:fd:b9:b3:0a:b3:f4:ed:73:34:
         96:73:30:a7:2e:ee:5b:db:2e:af:ce:53:d2:89:03:f5:64:bd:
         f3:13:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----