Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          eIL/qiBA6bqPzCF5A3W6QT79Q7w+hu4a13Wtw/156og=
Subject key identifier:   23:C0:64:10:DC:10:01:F0:D7:44:B9:AE:9C:6B:ED:D0:FD:4E:6A:48
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01A0CA466AC2B771C15A6FCC4E71F829B691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1C0C
Signing time:             Tue 22 Sep 2026 18:00:07 +0000
Manifest this update:     Tue 22 Sep 2026 18:00:07 +0000
Manifest next update:     Wed 23 Sep 2026 18:00:07 +0000
Files and hashes:         1: 0svTDrSwReSoeecG4nyIp0Jz5pY.roa (hash: o11lsgsVY6lk24EO9d7feF4yhOoTDGHXRFHXxkeY3PI=)
                          2: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          3: 1-L34FiYhbIQq_2YUme4OBtXJ4_k.roa (hash: SsTyOm7ChF4zzf7JI9OTShfKGxMJF9oSGPkYYe9SULY=)
                          4: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          5: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (hash: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=)
                          6: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (hash: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=)
                          7: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          8: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          9: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (hash: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=)
                          10: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          11: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          12: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=)
                          13: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=)
                          14: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          15: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          16: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          17: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (hash: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=)
                          18: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          19: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          20: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          21: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          22: ZR8cdqV6QtDUIcFSAkUEoKejq3o.roa (hash: wxqypfRA+7HeYUNNOYo0W5htS2qjZnymm/0E/jIq1no=)
                          23: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          24: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          25: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          26: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          27: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          28: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          29: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          30: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (hash: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=)
                          31: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          32: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (hash: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=)
                          33: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (hash: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=)
                          34: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: TC7yuaw3nNBCRF+kx+78RDKwQE2T2gbw8PbvyvGMwHI=)
                          36: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (hash: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=)
                          37: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          38: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          39: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
                          40: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:46:6a:c2:b7:71:c1:5a:6f:cc:4e:71:f8:29:b6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Sep 22 18:00:07 2026 GMT
            Not After : Sep 23 18:00:07 2026 GMT
        Subject: CN=23c06410dc1001f0d744b9ae9c6bedd0fd4e6a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:88:7c:e7:54:fa:98:3f:0a:13:57:d6:dc:
                    33:dd:9b:6d:fb:aa:ca:a5:ee:1c:f6:35:7f:d5:50:
                    5b:0c:34:6d:60:11:de:da:d2:eb:51:36:33:5f:36:
                    03:25:12:44:2d:2b:ea:bf:bd:cf:50:e3:b5:6b:75:
                    d1:69:e7:c3:26:fd:2e:89:b0:bb:da:b4:bc:73:26:
                    7d:08:9e:91:78:87:fd:53:bc:c7:df:02:22:c7:7c:
                    6f:c1:36:05:5a:6a:89:52:44:9c:c3:86:71:a1:c2:
                    cb:fd:60:51:62:44:89:79:a0:7d:a5:cb:0b:dc:d0:
                    43:b1:e0:3d:9a:cc:92:e2:b2:13:ee:ac:81:be:4e:
                    1e:d1:f1:36:84:05:f1:87:60:c4:14:55:0f:6c:01:
                    16:e6:44:73:f1:9b:70:a5:49:76:e8:59:ac:46:a7:
                    33:3e:43:97:58:bd:88:d0:91:d0:30:8d:d5:40:21:
                    52:fb:48:d3:e4:a0:d3:ad:6f:4e:b8:f7:17:44:3f:
                    51:34:4c:6e:3f:de:8e:53:6b:45:00:f1:86:5e:9e:
                    92:de:7e:ad:14:1c:a8:7e:da:b0:4a:52:2b:9f:ef:
                    14:27:bd:1c:e0:02:70:5b:a6:da:2e:af:ab:97:9b:
                    7b:7c:06:13:44:13:55:6b:6a:7a:1e:74:cc:42:29:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:64:10:DC:10:01:F0:D7:44:B9:AE:9C:6B:ED:D0:FD:4E:6A:48
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:8b:d3:69:a9:ef:a2:58:20:e3:14:f8:23:5e:eb:50:12:
         24:e6:00:b9:22:82:40:1b:16:8d:0d:e5:b3:1a:f6:8f:55:b6:
         22:34:0c:a1:a8:ca:81:73:ec:94:b4:ca:8b:f8:38:d9:80:c1:
         a0:f6:18:21:80:60:20:ed:f8:18:c5:b2:ac:0a:9c:7d:87:bf:
         2b:8d:4f:fc:a0:2b:63:ab:97:84:e8:23:cb:1a:e2:2a:da:f2:
         97:7b:2f:2d:64:cd:ab:8f:4f:ef:75:e4:95:8f:8d:cb:63:47:
         8a:c9:e9:c2:64:1e:91:cd:52:20:76:95:14:2f:28:cc:0a:ab:
         9a:ec:95:db:a6:5d:d3:06:19:39:d8:35:43:88:ca:2c:d9:b6:
         5f:8e:9c:65:4b:67:4e:44:f7:97:5a:f3:c9:66:00:05:47:e9:
         18:c5:3f:d8:f6:c2:cc:53:82:a6:b7:ea:87:dc:b7:0f:18:36:
         7d:55:41:fa:9d:4f:6b:a1:8b:4f:9d:b8:6f:4a:8a:d1:7d:f8:
         fd:05:6b:7c:bb:da:3b:d0:73:14:22:a9:bb:4c:60:6a:aa:e0:
         a1:78:2d:36:01:bb:17:93:a7:7b:e2:d7:91:1a:40:b8:e1:47:
         0b:6d:a4:cb:30:06:9e:65:8f:a4:25:2c:87:7d:1e:2a:13:6f:
         c0:a3:43:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRmrCt3HBWm/MTnH4KbaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwOTIyMTgwMDA3WhcNMjYwOTIzMTgwMDA3WjAzMTEwLwYDVQQD
EygyM2MwNjQxMGRjMTAwMWYwZDc0NGI5YWU5YzZiZWRkMGZkNGU2YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/6IfOdU+pg/ChNX1twz3Ztt+6rK
pe4c9jV/1VBbDDRtYBHe2tLrUTYzXzYDJRJELSvqv73PUOO1a3XRaefDJv0uibC7
2rS8cyZ9CJ6ReIf9U7zH3wIix3xvwTYFWmqJUkScw4ZxocLL/WBRYkSJeaB9pcsL
3NBDseA9msyS4rIT7qyBvk4e0fE2hAXxh2DEFFUPbAEW5kRz8ZtwpUl26FmsRqcz
PkOXWL2I0JHQMI3VQCFS+0jT5KDTrW9OuPcXRD9RNExuP96OU2tFAPGGXp6S3n6t
FByoftqwSlIrn+8UJ70c4AJwW6baLq+rl5t7fAYTRBNVa2p6HnTMQimpnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPAZBDcEAHw10S5rpxr7dD9TmpIMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBqL02mp
76JYIOMU+CNe61ASJOYAuSKCQBsWjQ3lsxr2j1W2IjQMoajKgXPslLTKi/g42YDB
oPYYIYBgIO34GMWyrAqcfYe/K41P/KArY6uXhOgjyxriKtryl3svLWTNq49P73Xk
lY+Ny2NHisnpwmQekc1SIHaVFC8ozAqrmuyV26Zd0wYZOdg1Q4jKLNm2X46cZUtn
TkT3l1rzyWYABUfpGMU/2PbCzFOCprfqh9y3Dxg2fVVB+p1Pa6GLT524b0qK0X34
/QVrfLvaO9BzFCKpu0xgaqrgoXgtNgG7F5One+LXkRpAuOFHC22kyzAGnmWPpCUs
h30eKhNvwKND+Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:52:46 2026 by rpki-client