Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
File:                     GUJjJay4zmCaaG-mVbBYlogJs0Y.mft (raw, json)
Hash identifier:          2/3V1grmmQZ/eeLMyccTR7lAto0ABfNtO3sVF4aqb68=
Subject key identifier:   34:88:11:77:69:CA:6D:4A:A1:5F:5A:E8:8A:2D:93:18:46:31:E3:13
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019F435258ADB5F2987AD08BCB957A573058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
Manifest number:          1AFC
Signing time:             Wed 08 Jul 2026 20:01:37 +0000
Manifest this update:     Wed 08 Jul 2026 20:01:37 +0000
Manifest next update:     Thu 09 Jul 2026 20:01:37 +0000
Files and hashes:         1: 0RmJ0oWNUFzdrlNu1jmD_6qelT0.roa (hash: PS53B4WrvaBeWkHBS+GkBG7h8gTZB1XYm80R6e/3gog=)
                          2: 1-JZnhggQE_TbXo85vD0kFs0tnZY.roa (hash: idhOUTEBlp+m/SyBy30wTesKr0YEOoyGdXCmFeSMTz4=)
                          3: 1Yjgfutm5DnbWOKFjw22gv51x-M.roa (hash: FaSPbh1Wuwrp3aBT4Tz30+vRY/whGasHFL0WO3iZou8=)
                          4: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (hash: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk=)
                          5: 7Jdi8D5-g_sjENzbzaruqYS6JPk.roa (hash: 6HUBWnmIMkIr6s7QnVcjrotml8DdPve4p1zodEBw+ZM=)
                          6: 8QzrnFYYad02iQIDf3z71rNwwgg.roa (hash: /TV8cLYJ56VSgsNfmu5SUka0AmIh/wB9Qv7GFizgeDA=)
                          7: CB1RlJ-MsoW5c96mAUK_hbi7JE0.roa (hash: 5fJPe+eX7sQDBwrHzP9tK4pCYoIPbZwz6vPeuUSzBZo=)
                          8: CGMesv41p6arRgdmu59sWV_LTbg.roa (hash: vHHfTTfTp66kYxelMyA0pMKFUsWOmgvA1RM4B0b03Wo=)
                          9: FGqtnf6TyPbCwTCRNMgfE5ElE5w.roa (hash: IP8sItWkkBAhRfjY/SHImiuPFxLIkIVKl2CDA/PHVrI=)
                          10: GUJjJay4zmCaaG-mVbBYlogJs0Y.crl (hash: Yo/HA+pPAl69dmrJeLdECCbV65uQyFjlzC9lxrlndkU=)
                          11: HgmGhHhflSc83-12eOaUVFkQZ7A.roa (hash: TVfWDXrhIGbWC7iEdqwCMqeSIvitThoDMENS1YOjOUg=)
                          12: J8FCtrgBkWVKDExtzrqO2O610GY.roa (hash: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=)
                          13: JhKGEy3yN9RGFH7neVX_QRgQgCM.roa (hash: HoGwkfjFFe5gr9hjtd2+/eclOoHDyifUnnXWLBjGwA4=)
                          14: L3_ye7DPVI366Ic6Ngz0rx8KNS0.roa (hash: M35zUOYT/3wfQtDZmc6mQI7KYPlIQlA+Fde0pk0Wiks=)
                          15: L6pA6dqo4JBMSuF5ROGNzwk-AWM.roa (hash: eZHdi1uoI4O0n9vGs1id6DxX8FOaQEq3LrkqkgiYU50=)
                          16: MhLTRicNbR4m0VYAij5fN5tzTaE.roa (hash: FWUJFULNbB4Npk26A3OdpsEOxut/ysZJUtd+FVmxywo=)
                          17: OwwcOi8wVAr9srD7XnX1ElkaXQI.roa (hash: izBviqfJNNsSBHsTzx+LBMz0yVb7gvf0oMXW5446X3k=)
                          18: P_yuLjWbsEnPJRri0sPdIAJwtIE.roa (hash: OWw6475ue2CyouQdZseNajAOA39IhXLc9Jah+PLT7PA=)
                          19: TqPtGzYoLspunrwYwjZawqiHS4s.roa (hash: YZMEyVa4a7dd+CqogixeL6+a0S/5nnQm0Sd2vgm2qdk=)
                          20: YgaEaBPbEzI_TnIF4yh7SCgESPs.roa (hash: aQDgVhVzA5loAtoWGvRU4RS6WbRON2Ftu8TRVlznkww=)
                          21: _VHpXcuxCNgWVUFdEL6JjYzFdvc.roa (hash: egMfawhK+jcJ0v0KX4LlR7Y7XWXtaJR0Baa6miCKt6s=)
                          22: a6ojSWctijnSg8Ci1EEFReUXCiE.roa (hash: dbzoLVYRJXZ/LADro8oV1Pfy95eExKX/RbkyCegFXLc=)
                          23: aMt7dQqxO17JsD3Qpf3pES1OiDs.roa (hash: prHDntIpg3WYe2PiUap0RT0C1RNJIg+ZNZut4BOlk+8=)
                          24: egYWRu7pYjFhPGLCQzQa4aLHYMw.roa (hash: I3B6Xal7vfQPZ9RmGSAv4ydK9M3uVrA0mOyKz6lQg80=)
                          25: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (hash: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM=)
                          26: glzgkwZylfRsndKgZJ2KYakfBL8.roa (hash: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=)
                          27: kiLT9Vczqv8xV9ONX9odOLSa97U.roa (hash: CvAgS1xZmshcPQYL4l8kfTyrMoD4259w49Pkw+0OBzY=)
                          28: kkBbL5GQCXbcPIlpra9BISH413A.roa (hash: vCdkmwPxJu59m+M9IjhfPHDw9m/ikpb4ndaI0+l1XvI=)
                          29: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (hash: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw=)
                          30: njcv1S0zFlZVfkeF7_3Vlol-DoE.roa (hash: inR3oOtjsIbQDT5x9YgwyxFNYwWCphFwCjDaytA5qmk=)
                          31: s87JXAJZovXeQZZ0akQUapnLHmM.roa (hash: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw=)
                          32: tEigU09Y1xklyo5lH2d4mnfMDy0.roa (hash: Khvr3Ou5aLA13xdYvArauAVHMETcmY117KH+5asDKKk=)
                          33: xUiEOdMZD90K11XwaXn_ebriw94.roa (hash: jkqN1ZeOZ0ZOeU7yNnO80po0a5R9fVycdJjtANd999I=)
                          34: ylfmJrp85I_qOqqz2l4b4Odj_Xo.roa (hash: 03IcsobSeks5i/SJ+CZbWdhfHBAxRqllB7O3PPMnVXU=)
                          35: zcqMhixr9fT9pKIQ4LHcg33Y2ro.roa (hash: oe68aCPfd70KdapXzw7LAHpLRKLBsO3z0ncIioG7/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 13:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:43:52:58:ad:b5:f2:98:7a:d0:8b:cb:95:7a:57:30:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jul  8 20:01:37 2026 GMT
            Not After : Jul  9 20:01:37 2026 GMT
        Subject: CN=3488117769ca6d4aa15f5ae88a2d93184631e313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:ec:24:fc:05:94:49:6f:bd:9d:1a:32:4c:
                    d1:9d:8f:bc:15:43:90:6e:0e:62:56:e8:99:3e:d2:
                    4e:c7:54:e6:64:9e:53:d9:0f:a7:57:7c:fb:2f:ef:
                    5f:ad:61:3e:89:b7:c7:02:31:77:73:fa:31:f6:14:
                    3d:9f:a3:74:aa:77:fe:c4:dc:14:3d:07:04:98:a1:
                    02:e6:61:e6:e5:f6:c8:26:c9:33:0d:d3:4e:0d:c2:
                    c3:30:01:9f:45:ac:3a:bd:6d:31:dd:70:52:89:fb:
                    bf:d8:16:91:19:29:0e:34:36:d9:4c:1b:9d:53:bd:
                    fb:e8:f9:9e:83:91:4b:d2:c4:81:39:93:1c:a7:56:
                    ba:1e:43:93:2a:12:56:9d:37:81:08:fb:be:45:3a:
                    3b:0d:e3:27:31:20:55:62:f6:12:9b:d5:9a:7a:bb:
                    9b:3d:73:a8:8f:cd:18:0b:aa:f6:b1:9a:eb:95:2b:
                    c6:57:1d:87:bf:6b:e6:fb:44:5d:1c:ab:8d:57:ce:
                    d6:21:39:76:f8:20:51:2d:ae:67:4f:1d:0b:c9:c6:
                    0e:df:35:36:6f:98:65:d6:ed:b0:0f:34:4f:6a:62:
                    05:3a:1f:8f:97:a2:a9:dd:f9:a3:a5:bc:75:aa:27:
                    d9:1e:7c:73:5e:e7:1b:c7:72:0d:e7:c7:72:81:1a:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:11:77:69:CA:6D:4A:A1:5F:5A:E8:8A:2D:93:18:46:31:E3:13
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:37:2b:a9:34:5d:79:1a:b6:a0:64:43:96:35:ec:96:23:85:
         af:53:18:3a:89:ec:c7:6e:1b:91:40:96:c8:f4:1f:aa:bc:98:
         bf:75:24:c2:24:d5:9d:52:94:fd:50:c4:9a:2b:a0:89:42:ab:
         05:14:b3:09:b1:cf:cb:a0:d9:cf:be:5c:89:0b:52:24:22:a8:
         f8:27:a8:b6:58:ec:01:db:dc:13:f8:6d:82:29:20:e3:76:b2:
         d9:57:ff:32:b1:1c:58:dc:d6:4e:94:9a:91:00:e5:3a:1d:8a:
         9a:7c:86:55:62:33:91:b4:54:21:4d:bd:a2:fd:82:a9:f0:d9:
         1e:87:c5:af:5e:f6:24:9a:e3:49:9e:28:88:e3:3c:d9:ca:d5:
         fb:f3:a0:21:71:c4:33:d3:5c:80:b1:fe:d7:29:ab:a5:e1:5a:
         f8:a7:a7:92:44:d8:3d:78:06:8b:92:cd:06:cb:4a:30:64:ac:
         6f:0c:b9:7d:c1:7b:13:a6:5a:f8:16:2b:14:42:36:f3:7e:42:
         a2:59:85:2b:bb:8f:a4:8b:b4:e7:05:f9:90:12:d4:ed:57:d9:
         31:97:d2:cf:a5:66:7d:8e:b3:1c:94:de:e6:c1:45:94:6f:b6:
         26:bd:8e:73:f2:c5:23:90:7c:3b:55:2f:3f:5a:08:a4:f1:b2:
         83:09:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:48:27 2026 by rpki-client