Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          HGBHtE0pR0Bc1nqD9hffoYefJ1X3/ZdNbA9K8WKjlw8=
Subject key identifier:   DA:DC:AA:55:03:D4:AB:4C:49:4D:80:C9:EA:DD:D4:E0:78:F9:93:A5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01A0C09E81DE97611A7A2BEF59DEE4928482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1C07
Signing time:             Sun 20 Sep 2026 21:00:08 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:08 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:08 +0000
Files and hashes:         1: 0svTDrSwReSoeecG4nyIp0Jz5pY.roa (hash: o11lsgsVY6lk24EO9d7feF4yhOoTDGHXRFHXxkeY3PI=)
                          2: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          3: 1-L34FiYhbIQq_2YUme4OBtXJ4_k.roa (hash: SsTyOm7ChF4zzf7JI9OTShfKGxMJF9oSGPkYYe9SULY=)
                          4: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          5: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (hash: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=)
                          6: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (hash: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=)
                          7: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          8: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          9: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (hash: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=)
                          10: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          11: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          12: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=)
                          13: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=)
                          14: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          15: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          16: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          17: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (hash: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=)
                          18: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          19: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          20: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          21: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          22: ZR8cdqV6QtDUIcFSAkUEoKejq3o.roa (hash: wxqypfRA+7HeYUNNOYo0W5htS2qjZnymm/0E/jIq1no=)
                          23: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          24: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          25: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          26: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          27: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          28: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          29: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          30: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (hash: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=)
                          31: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          32: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (hash: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=)
                          33: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (hash: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=)
                          34: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: klEqrdZN4XcpHDUtCArOxdOIp6U+7E3Hp9XtT/ccYuc=)
                          36: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (hash: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=)
                          37: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          38: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          39: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
                          40: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9e:81:de:97:61:1a:7a:2b:ef:59:de:e4:92:84:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Sep 20 21:00:08 2026 GMT
            Not After : Sep 21 21:00:08 2026 GMT
        Subject: CN=dadcaa5503d4ab4c494d80c9eaddd4e078f993a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:f7:33:f3:3b:a3:67:7c:56:cc:4d:e3:7a:
                    b0:5d:a9:fa:e5:0d:9f:8b:5f:0f:c4:a8:69:80:ee:
                    2a:54:4c:ae:fa:94:e2:76:48:23:e5:a8:46:c1:68:
                    f5:f4:66:2c:5a:08:50:d3:6e:20:fb:12:38:e4:f5:
                    92:9b:0a:6f:39:0b:f7:14:87:cd:ac:ea:d3:7c:35:
                    d3:23:b5:5d:1a:04:c3:d6:b0:d0:1d:1a:d8:aa:5f:
                    a5:aa:59:71:06:22:46:5f:23:8d:c0:df:a7:af:f5:
                    bc:49:25:d1:ea:e0:95:ab:f7:77:0d:20:f5:93:a7:
                    39:46:92:cb:98:22:95:a5:55:ea:7c:0f:78:d0:3b:
                    39:f7:a5:e5:de:1b:9f:6f:1a:13:5b:4a:1d:0c:10:
                    63:03:15:99:4d:35:a9:f8:46:fc:4a:09:e6:ef:9c:
                    09:22:a4:eb:c6:45:f9:a6:08:06:b4:08:ff:56:cd:
                    13:53:6c:fe:b6:be:fa:0e:4d:03:89:49:a0:f2:95:
                    58:86:af:4c:f7:91:46:7d:ce:97:67:f9:ab:df:05:
                    8e:b9:4d:46:eb:e8:1d:9a:ec:e9:c8:4b:5e:1b:f9:
                    65:0f:29:c7:f5:5b:46:51:ab:b8:ad:c5:ce:f5:0c:
                    e5:10:94:05:b1:d9:7b:cb:34:9b:d5:09:6d:a2:42:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DC:AA:55:03:D4:AB:4C:49:4D:80:C9:EA:DD:D4:E0:78:F9:93:A5
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:36:ec:ec:b0:cd:37:c6:66:f2:42:10:6e:35:cd:ef:80:a9:
         e8:05:a0:36:93:f2:22:e7:0b:53:35:d1:40:86:b8:ba:4e:9f:
         42:ad:2b:52:83:29:64:08:a1:22:b7:f3:12:88:bc:1f:85:9b:
         e8:39:20:20:95:6c:f6:7c:0f:9c:b8:39:83:7d:6f:bc:98:bf:
         6d:2e:50:33:83:3d:d0:8d:40:5e:30:24:b2:da:5a:6b:89:4c:
         d7:ae:cd:4d:93:47:ce:39:f2:c1:8e:ec:f8:58:7a:26:8f:dd:
         75:89:6c:f2:a2:e4:a4:48:19:9a:56:ab:ba:98:8a:51:0b:aa:
         3c:53:83:4b:52:f0:da:de:8e:0e:00:9f:d0:7b:43:f9:52:86:
         86:3a:7e:11:f5:aa:dc:2b:4b:25:ae:d2:d9:25:69:bb:49:3a:
         bb:ea:35:87:45:af:9d:6f:15:7b:c9:11:e2:43:d2:96:1c:e3:
         09:48:7d:e8:26:01:5d:89:ad:73:64:2e:88:21:1f:30:08:90:
         e0:67:39:c5:7c:a8:0b:57:ae:d7:cb:08:d6:f5:e0:2d:8c:74:
         35:3e:ef:28:3f:69:fd:ba:4a:ae:db:b4:f3:21:4d:36:03:c1:
         e8:59:f6:28:39:d4:5b:3f:ee:36:b1:ac:78:15:23:3e:16:f1:
         21:ee:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:27:30 2026 by rpki-client