Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          +mYR/cEJrBbLot8ziAHbIE9ViZ3H1Rc0ig8Jtz5N3XQ=
Subject key identifier:   03:32:F5:61:13:F7:68:1B:31:AB:E7:63:D3:16:92:46:C7:D5:E2:2F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019D27042B704AFBCF5F968EFC2EAEAFC063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          19E6
Signing time:             Wed 25 Mar 2026 22:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:17 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 6Iosru2rgefqb-G1dkNZm3eQBbo.roa (hash: 1dV8hYXsGdshFlGk0ddmJ5AcxJeAQGJGdw+VePlaJr0=)
                          4: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          5: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          6: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          7: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          8: IuaBqY2GadGcg3FDyUG5eeweXtw.roa (hash: HkIMLZemJswFZ1lLlbUgk4yP8IDP4ASfJ/qPNB+Uu+w=)
                          9: JCKR_kg5e02kURKGqD4pGEuK3MI.roa (hash: 0tKito6h1TOQFLB50yP9m14KN7/k2N/3B5WbTDcVps0=)
                          10: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          11: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          12: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          13: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          14: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
                          15: SDSXodgEpy3sT9QG11ill2-rJrQ.roa (hash: 4aOwXPo+yY66jKQdXRo9AHFCLz4Nqpjdshvs7pg7XPg=)
                          16: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          17: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          18: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          19: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          20: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          21: bsx4FJoKXOBGtYfRQPeaP9fokuA.roa (hash: q36gfKZfIIkmCBj7MHa3B98hJW+E9SLJkVHBSknoDJo=)
                          22: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          23: e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (hash: DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=)
                          24: ei7gbLOT6z2qtdrScoHSrhXAc_Q.roa (hash: trEQXC8j4Fo/aHPIGgfrdhYdoDgInVHSvuOtLPmlVZY=)
                          25: h4B19M4fJna6bjarmHanNvdxzRk.roa (hash: mU49wrIx2TGe4N7KBWJ6hapg0RSH+SuZHSziFTcOhFs=)
                          26: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          27: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          28: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          29: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          30: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
                          31: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          32: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (hash: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys=)
                          33: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          34: rysq7eO4vXp0S0OQv26mA3TrdzQ.roa (hash: MTTZtESCfnweYPYxGyIIZ+AgFKSG59vjKxb+CBn5HyM=)
                          35: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (hash: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM=)
                          36: tml7s1FEM_9KEwjG1ZFBVK9B8KM.roa (hash: n8PMHdIGzbLhBNN6Xpxhp4apLQiZy0TRKprVqL0yAqc=)
                          37: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: 3EviGWcDXG+gmG6D2qozJN3lSUD+nzoNcww7O60jCAg=)
                          38: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          39: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          40: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:2b:70:4a:fb:cf:5f:96:8e:fc:2e:ae:af:c0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Mar 25 22:01:17 2026 GMT
            Not After : Mar 26 22:01:17 2026 GMT
        Subject: CN=0332f56113f7681b31abe763d3169246c7d5e22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:a1:16:e4:e1:bc:74:d7:53:1b:40:2f:cd:
                    e4:90:42:83:5f:76:7c:e1:16:c8:a7:54:30:21:a0:
                    f6:5a:3b:ee:ec:72:51:6d:5b:34:32:9c:8a:e1:60:
                    99:d3:ec:09:32:68:5d:c8:44:2a:10:5b:e2:74:be:
                    c2:e7:e5:bd:13:42:89:34:a6:df:7e:c4:c4:27:d9:
                    27:95:f9:07:56:68:fe:3f:e5:84:c7:b0:55:3a:00:
                    aa:bc:4a:d6:f6:30:69:df:91:d5:72:ec:3a:3a:60:
                    8b:f7:4c:19:ea:bf:94:64:10:b5:37:fd:ad:5d:63:
                    56:ef:e6:98:35:34:2d:41:9b:47:52:0d:b1:3a:08:
                    9f:5a:4b:b9:ee:6c:f6:1d:bb:63:4c:c0:f7:11:2f:
                    a9:85:dd:9c:3b:5a:aa:08:ff:a7:2d:82:c6:95:15:
                    b0:ed:c8:7f:59:95:8e:cf:bd:89:61:3b:e9:07:ad:
                    cc:65:54:1f:05:cd:bd:f6:17:cb:60:3f:98:3b:0e:
                    28:cd:de:97:15:92:7a:8b:f2:f3:a3:1a:6b:70:3a:
                    6a:9f:8a:40:6b:b8:c1:83:f8:5f:4d:66:31:e2:08:
                    1d:07:11:ff:49:63:fe:c8:c6:c5:5c:f2:94:92:be:
                    3e:24:40:bc:39:fc:8d:f1:c2:c9:d8:25:10:a6:ac:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:32:F5:61:13:F7:68:1B:31:AB:E7:63:D3:16:92:46:C7:D5:E2:2F
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:3b:a0:c1:98:d3:cc:4f:3c:a6:a4:13:24:1e:47:84:fd:
         6f:d5:fa:9d:c7:f3:1f:0b:37:71:16:a0:60:25:ef:87:79:1c:
         ef:20:88:95:60:23:f4:5b:e3:38:23:30:44:ce:ca:7f:56:3b:
         fa:ee:52:1a:1f:1c:e6:73:14:da:54:73:43:70:97:a7:f6:bf:
         d4:43:bf:40:73:e9:81:b6:77:99:23:f1:f2:65:58:ae:1c:2e:
         ed:2f:ce:71:96:ff:5a:43:c7:1d:5d:7c:cc:c2:4a:46:95:fd:
         3d:a6:4d:1d:d4:21:6b:30:12:45:f9:1b:3e:aa:20:c5:8e:7c:
         40:e6:53:7a:6c:14:eb:99:98:84:c6:23:e4:3a:a0:d9:d9:42:
         62:e0:0a:f9:47:d0:06:76:04:ea:14:28:16:09:1c:31:5b:a7:
         ef:1c:58:00:57:a9:d2:e3:d8:df:4b:fd:8c:d0:f7:6b:a8:a5:
         d5:af:3d:40:09:b1:27:84:26:c1:96:1f:aa:aa:e2:b3:b7:74:
         2f:24:c3:a8:bc:ef:fc:8d:04:68:45:00:fe:ee:88:aa:36:81:
         66:73:fe:aa:df:24:87:93:2c:7a:e4:6e:8e:6b:e4:38:91:1a:
         5f:b7:e4:a8:22:46:5d:65:f3:7f:ed:67:64:3a:f9:43:16:35:
         d4:53:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:28 2026 by rpki-client