Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          bYx/IDLFBWiCQZAyKehTcEgCFaCIYqcN3zxEnFSxO4g=
Subject key identifier:   D1:A1:36:23:0B:F8:C8:64:65:61:EB:A0:D0:D8:5F:49:1A:F3:66:29
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01A1DACAB1814E1ACFB53DEE1004C82CF169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1CA8
Signing time:             Sat 14 Nov 2026 16:01:19 +0000
Manifest this update:     Sat 14 Nov 2026 16:01:19 +0000
Manifest next update:     Sun 15 Nov 2026 16:01:19 +0000
Files and hashes:         1: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          2: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (hash: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=)
                          3: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (hash: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=)
                          4: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          5: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          6: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (hash: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=)
                          7: BeUkNQO_cdnu48sHYfC1elyCSio.roa (hash: 7sVPqLHSA4D6PHeDMrPSpWYC/Sl6UbP3BldX4qcJ3Cc=)
                          8: G1n7He6x1t8NmB9rAvLzwHuEcjM.roa (hash: 5OUXx05uJjdxC6uIjto8jF6O4msby3Y5qPdY8C2SnIo=)
                          9: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          10: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          11: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=)
                          12: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=)
                          13: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          14: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          15: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          16: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (hash: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=)
                          17: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          18: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          19: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          20: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          21: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          22: b3c9OArDr5n7oJdBoCaNxAQPtGQ.roa (hash: 76Vcgj6vFbf3sqezljIwnxYHhcEw9njhNMDBv9x6mCc=)
                          23: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          24: ekzOqt3czUs7Mi7O02eCqgUuxFM.roa (hash: vKijkLHD9I3QgOkLK59eBNEwCmJEZDSCnEGFMDeFAwQ=)
                          25: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          26: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          27: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          28: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (hash: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=)
                          29: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          30: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (hash: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=)
                          31: oVoIne9d0PbgOcz90Gp34SqUYjQ.roa (hash: DxwRmpjWdzxsqEyon1jtohChKPH4o/yxKpaJ39QA9iE=)
                          32: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (hash: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=)
                          33: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: JSiVXyym65aaAWWnsd53V7cwH5WKdsb5VZDhkOLMmxE=)
                          34: uAefFE7h6AhPFdngNeovdhnyaDU.roa (hash: fdQiFOvZ5avjDWrptZMQODB8fHfaE7R4r5R9jvixBAg=)
                          35: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (hash: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=)
                          36: vKEbkftYQui_XkJ6i7HwiUjNtZY.roa (hash: zqTYIj+1VKLQibjvTDJgwxIv4uXJnCqwT1UX3LLLEEo=)
                          37: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          38: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:ca:b1:81:4e:1a:cf:b5:3d:ee:10:04:c8:2c:f1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Nov 14 16:01:19 2026 GMT
            Not After : Nov 15 16:01:19 2026 GMT
        Subject: CN=d1a136230bf8c8646561eba0d0d85f491af36629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:38:b8:42:e7:23:3d:31:28:fb:b7:d5:e3:
                    3a:74:65:81:0f:65:73:1a:fb:53:1e:16:2a:1b:b1:
                    cc:12:2b:e4:1e:ee:3b:b3:e8:04:3d:eb:cf:0f:80:
                    df:65:c4:f5:cd:b1:c2:dd:b0:41:f8:a1:8b:96:d7:
                    c1:80:8d:7f:ce:fb:7d:7c:eb:62:22:33:ac:87:02:
                    e4:c3:7e:7a:d2:3f:df:1f:0d:59:4d:cb:4a:ec:69:
                    63:82:a7:7b:ba:30:9a:14:8a:b0:92:c6:d0:e9:b2:
                    71:8b:d4:73:28:b6:6c:1d:ed:db:af:75:a8:c1:2a:
                    de:bb:f2:57:99:80:3b:48:5c:16:fb:ad:4f:73:fa:
                    99:71:04:77:b5:f0:20:35:c3:0c:7a:01:dd:74:ef:
                    36:0f:9f:ac:b1:47:f6:1b:a6:54:98:b7:b9:b4:4b:
                    78:a1:27:ca:7e:b9:69:89:de:5b:5f:e8:eb:11:16:
                    ab:f4:80:d4:5a:bc:e8:c5:75:98:4e:3b:2c:c3:d5:
                    c3:74:29:a6:1d:25:c2:c5:ec:2a:02:4e:43:59:5b:
                    9e:17:7b:57:74:1d:ee:f9:b0:a6:63:44:4c:48:f5:
                    69:f2:5d:98:fb:3c:40:eb:94:38:37:87:5c:b2:44:
                    b9:70:a7:72:30:ff:ab:42:a5:38:12:0f:89:ec:5e:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A1:36:23:0B:F8:C8:64:65:61:EB:A0:D0:D8:5F:49:1A:F3:66:29
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:93:ff:99:bb:0a:a0:72:01:cc:23:16:a8:33:70:65:17:1e:
         19:fb:b2:50:86:25:be:35:54:e2:11:d2:e2:a5:bc:c2:f3:43:
         92:ba:74:72:61:3b:a5:ea:d5:2a:81:d5:bf:84:30:60:21:e1:
         da:9c:3d:a0:48:0e:68:50:37:d4:a6:09:a0:26:7b:7a:42:a5:
         35:c1:e6:af:4f:e2:27:0c:07:23:c8:9c:22:a1:86:05:e3:14:
         60:03:62:c4:2d:43:32:d2:d8:fe:44:e8:a5:a5:56:b4:69:61:
         80:0b:a5:ec:29:e0:c8:1e:0f:74:19:c7:91:20:27:db:3b:f0:
         3b:10:32:1a:1d:8d:ef:b8:c5:fe:d8:d8:24:a6:ab:9f:7c:7d:
         60:b4:80:eb:13:c4:fe:85:52:c9:42:c4:53:35:0d:c2:f7:2d:
         9c:b4:15:21:a4:21:23:29:a0:fd:30:f6:b9:a9:80:1e:cd:b9:
         0d:f4:92:d4:ac:3e:c1:2b:79:a8:1c:ce:75:f2:63:69:bf:46:
         a3:44:62:3d:7a:4b:7a:12:c2:7a:dd:75:06:f1:53:b8:64:01:
         77:63:5f:ec:e6:2a:af:7a:1a:e6:00:c0:f4:1d:a7:5d:30:a3:
         aa:7c:24:df:02:42:6b:a7:bd:27:18:79:99:7b:f8:a1:2d:3a:
         bb:84:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----