Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          sdVTpJIlBYKtFLOuc8XFTHwPsAA4EQE22potvQd1yJk=
Subject key identifier:   7F:15:6F:94:E9:9B:13:93:58:51:CB:DE:F5:BE:34:03:04:F2:8F:98
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019CD87AE70162A4EB2CBE050B3CB82339D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          19A7
Signing time:             Tue 10 Mar 2026 16:00:58 +0000
Manifest this update:     Tue 10 Mar 2026 16:00:58 +0000
Manifest next update:     Wed 11 Mar 2026 16:00:58 +0000
Files and hashes:         1: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          2: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          3: 2ATxWC0LpwAfJfvHqDtwuI8bNls.roa (hash: Bm5IQQ4PBSwytK8rm4bHoKQ0+XdV1o2+vJdyCZLCHhU=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 2pIKGVVs_fNWYkfePgnH0HhdLnE.roa (hash: 3l+UH1KBw86zTwHYg+1x5M9NbVVmmlSaZoIrAbfIe10=)
                          6: 44zPPgoQLefQJI3vtkJc6EwhCow.roa (hash: bzc7Uz3fgjL7VzDC/dK+5179ZuptpvJrsvVm26txhZQ=)
                          7: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          8: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          9: BI9M--P6yLGe4jvwVFojo0TL6DI.roa (hash: 5Hp6U9vwmy3Qj1szDvn3XgKpwr1D7A9keYBfO772XNU=)
                          10: E6T7ZYtNFsDiieVS0hbCmrrXBHs.roa (hash: FoPG6dVyzwLVkXmSRMrejZ4jHtCGpIoYrs3nixOj+9E=)
                          11: EIzTw546AijLugfy7SUrbXCZrhI.roa (hash: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=)
                          12: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          13: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: Cz6I7yotzEe1w4pkxa9QUOUG9qW5aXB5XF3Zn78E89Y=)
                          14: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          15: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: XJdLl-bPQ8q_zbXD4AS2SB-7kIo.roa (hash: 0BskkM0mLyzjYlWTURXWwr/DgTkFtz5de7yH1kzkwwc=)
                          21: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          24: b-FVgyj2WxJKvDOTs1CHimHwx64.roa (hash: g6LGlCtZqdZpFtvcghFvuv8LtWYwAAGTzOHdhuBat+k=)
                          25: dXJx4dK8ZEaZFkf2HvPQ_BKku_c.roa (hash: xxmOZVSWpnayyu1BmFI9+MLq01yx4gC/aV4bZ9x0fQs=)
                          26: dmCxKN3pj6wLriDLBw09G7VIsA8.roa (hash: Gic5YpTjA47EASsB0NfB6Ks84APwRPQifT8e3Gxj6KM=)
                          27: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          28: iv-DGbHi7jhC6-KbaXRuWKrxSJw.roa (hash: DCqm4T/AKjotRXUc3PC/vHyXchhsUr3+zqTpdaE+yuM=)
                          29: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          30: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          31: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          32: rT2GKqRNplkDcHzBqdD4vYquDdU.roa (hash: xq38FNJ36cgvD1QD920Vixq2fn3iuLkSD00qomnTpqg=)
                          33: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          34: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          35: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          36: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          37: zOPeWkCuS8JUBKa1vuwuZvTP_Ho.roa (hash: naZhH7fX9yCGlkQixJYSLA7X9AZuM2jPZyAz9ulFItY=)
                          38: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 15:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d8:7a:e7:01:62:a4:eb:2c:be:05:0b:3c:b8:23:39:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Mar 10 16:00:58 2026 GMT
            Not After : Mar 11 16:00:58 2026 GMT
        Subject: CN=7f156f94e99b13935851cbdef5be340304f28f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:2c:d8:3d:fc:38:fb:37:dd:9e:e0:d5:a0:
                    63:d6:23:d4:66:27:7d:ed:3c:93:51:fc:73:5d:7e:
                    0f:74:14:e7:02:a2:b3:f1:d8:1a:ef:0f:37:51:57:
                    4e:23:0a:ef:eb:53:2e:e5:41:eb:cb:5f:2a:40:ed:
                    fc:0c:9b:12:87:1f:77:20:a0:cf:b1:ed:80:9e:5a:
                    8a:65:68:25:5f:d7:c4:ca:9d:f3:41:f6:ec:5d:79:
                    f0:ee:28:16:55:b7:7a:95:2e:33:2a:16:e1:62:c1:
                    58:77:4a:2a:40:35:d9:3b:dc:e3:6b:ad:5a:f3:84:
                    6f:36:44:05:68:7d:97:07:77:d6:17:9e:08:7e:3e:
                    10:e5:2e:01:4b:70:f2:0d:b0:57:e1:ad:3b:39:9e:
                    47:0d:56:43:87:16:af:e8:65:df:06:4a:a6:a3:61:
                    3b:47:fc:93:3a:a7:93:ee:46:54:95:e9:b7:6e:d9:
                    cb:4e:0e:43:46:1e:f3:44:01:0a:52:05:69:84:71:
                    12:53:59:9a:9a:29:4a:6c:cb:c0:c6:51:b8:28:55:
                    df:37:3e:de:07:84:93:4c:d1:05:68:5e:9c:b6:ab:
                    0d:ff:ac:dc:65:aa:60:12:bf:32:24:02:60:b7:f2:
                    c7:58:50:3c:82:f4:e9:7e:4c:f9:f2:38:c2:a5:56:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:15:6F:94:E9:9B:13:93:58:51:CB:DE:F5:BE:34:03:04:F2:8F:98
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:a1:c6:d8:0b:9f:4c:c7:ef:90:df:59:a1:06:1f:0b:c6:
         69:26:eb:0b:de:d1:9a:cb:50:ab:11:a8:2a:68:42:84:50:f1:
         17:77:de:c9:b6:f4:b8:b2:d0:53:42:c3:c5:a3:58:ba:90:fe:
         14:fc:98:c9:0f:2c:c1:a2:f9:c1:24:d9:06:53:3f:14:9f:72:
         cb:2e:25:af:a2:3e:7c:2a:6c:c6:9c:8d:c6:d8:b9:f5:6b:f1:
         24:06:c9:26:e5:3a:95:7d:da:e4:b4:4f:94:dd:46:67:2d:29:
         f0:63:ec:25:a9:2b:43:eb:d5:d8:a8:32:b9:4b:08:99:46:aa:
         b5:56:b4:74:9b:f4:45:22:04:d1:5d:be:aa:fb:37:9d:8a:c7:
         d0:17:fc:51:0c:e2:af:e8:bf:ea:39:52:42:4c:a5:49:00:57:
         78:6e:08:ca:3a:05:bc:f6:c0:16:b7:ad:af:88:34:58:7f:e1:
         ce:b0:9a:89:f5:45:35:6d:78:0f:b0:f3:41:4c:26:1d:f5:7e:
         0b:aa:08:1f:43:0b:62:f1:ee:fc:98:9f:db:37:11:2d:50:98:
         95:1c:ae:22:06:00:dd:18:ec:1a:1f:ff:62:ae:81:42:e0:14:
         86:9c:cd:39:b2:d0:2f:1f:59:53:98:c0:39:db:fa:39:49:4c:
         c8:3a:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:02:04 2026 by rpki-client