Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          yqno/96rJM5SPT7Dqm1M+T84PHxa9Mn1nSvSvdyEcls=
Subject key identifier:   13:9E:06:76:A8:9A:20:A9:13:35:69:E3:98:D8:0D:75:7B:74:19:96
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019CAA215FBEFB04BFAC0936BE3F00EE0CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          19A2
Signing time:             Sun 01 Mar 2026 16:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:39 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 6Iosru2rgefqb-G1dkNZm3eQBbo.roa (hash: 1dV8hYXsGdshFlGk0ddmJ5AcxJeAQGJGdw+VePlaJr0=)
                          4: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          5: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          6: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          7: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          8: IuaBqY2GadGcg3FDyUG5eeweXtw.roa (hash: HkIMLZemJswFZ1lLlbUgk4yP8IDP4ASfJ/qPNB+Uu+w=)
                          9: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          10: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          11: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          12: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          13: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
                          14: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          15: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          16: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          17: _0-U_dvkW7gAc4cTDIIkcm_9VOw.roa (hash: MWzK0oFmUyO4WRUo2MGNJz+fYJhtySMZ4mGR30tXxn0=)
                          18: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          19: bsx4FJoKXOBGtYfRQPeaP9fokuA.roa (hash: q36gfKZfIIkmCBj7MHa3B98hJW+E9SLJkVHBSknoDJo=)
                          20: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          21: e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (hash: DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=)
                          22: ei7gbLOT6z2qtdrScoHSrhXAc_Q.roa (hash: trEQXC8j4Fo/aHPIGgfrdhYdoDgInVHSvuOtLPmlVZY=)
                          23: h4B19M4fJna6bjarmHanNvdxzRk.roa (hash: mU49wrIx2TGe4N7KBWJ6hapg0RSH+SuZHSziFTcOhFs=)
                          24: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          25: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          26: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          27: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          28: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
                          29: m5jHreeQ4z9KRhKurDrnV0MKOgE.roa (hash: 3hVvPZGhCr8fr8Ag3CkkypFJXNKDQDPy5oAw3gz/NcI=)
                          30: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          31: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (hash: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys=)
                          32: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          33: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (hash: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM=)
                          34: tml7s1FEM_9KEwjG1ZFBVK9B8KM.roa (hash: n8PMHdIGzbLhBNN6Xpxhp4apLQiZy0TRKprVqL0yAqc=)
                          35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: +5JZSWp9Tb2OdUZj2N7p40x5n31jlamannF12sj9niA=)
                          36: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          37: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          38: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:5f:be:fb:04:bf:ac:09:36:be:3f:00:ee:0c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Mar  1 16:00:39 2026 GMT
            Not After : Mar  2 16:00:39 2026 GMT
        Subject: CN=139e0676a89a20a9133569e398d80d757b741996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:12:c6:6d:5c:4b:12:25:81:6a:13:e8:e6:
                    9b:48:0a:c4:80:8a:f0:da:72:c9:c7:9e:ff:7f:76:
                    17:6d:16:1f:68:67:3c:99:57:ac:a8:f9:dc:42:c7:
                    49:5f:b3:da:4f:35:46:27:b3:32:bd:27:0f:71:99:
                    9e:77:e1:8a:5c:be:01:2e:2e:cc:1f:f1:e1:59:d5:
                    b8:a8:48:5f:e5:d6:60:73:d3:ff:60:b1:f5:1d:e4:
                    30:09:19:95:2c:16:2b:cd:a0:70:56:d4:a9:b1:71:
                    0a:ae:ef:9b:6b:e7:f3:73:e1:c8:f4:f9:71:ba:9e:
                    15:b3:2e:6a:c7:00:80:36:19:75:08:b4:4f:04:db:
                    e9:9c:f2:ec:9e:53:84:8d:32:40:8c:c4:56:e9:bd:
                    59:4a:5f:08:d4:4a:6e:51:31:6b:88:5e:5c:c1:4e:
                    07:5a:0d:11:a2:a7:01:20:e4:11:56:e8:33:31:a9:
                    16:cc:96:63:67:3b:85:7c:c0:f3:5b:d1:57:a8:89:
                    58:7a:ec:2c:e1:2c:25:1c:20:5e:41:72:80:10:45:
                    cf:ee:d9:d6:36:9d:fd:cb:8a:35:9e:b1:58:e8:5a:
                    97:55:50:6a:4e:46:8f:d3:98:43:11:6e:7b:e4:1f:
                    1d:46:35:eb:c4:e4:6d:d9:cd:90:4b:25:d4:bb:b8:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9E:06:76:A8:9A:20:A9:13:35:69:E3:98:D8:0D:75:7B:74:19:96
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d8:f4:45:35:18:67:be:24:b4:8b:2c:38:c6:68:c1:d3:81:
         a7:4a:d0:ee:85:46:07:4c:3d:39:55:b6:88:63:08:ea:18:50:
         d5:17:4e:de:e6:cc:c4:64:23:f6:50:92:f6:81:e0:3b:e0:55:
         7c:21:84:7e:08:31:e7:f2:30:71:ad:4e:f2:b6:a6:29:34:7e:
         6b:43:ac:1b:b8:54:14:2a:2b:1e:0c:7e:54:a7:cc:2f:e2:9a:
         f5:9f:52:d7:68:db:b0:07:fe:89:47:cb:c0:af:71:b0:c4:bc:
         80:fc:d6:1a:49:42:ec:c0:45:d5:99:3b:f6:d0:8b:fd:d2:32:
         77:99:8d:11:8b:b2:5f:6a:64:d3:4f:02:0a:0d:92:3d:3a:15:
         a9:12:a0:88:86:60:ec:1a:09:9c:ca:9c:dc:ee:b5:8c:86:26:
         3c:15:8c:d2:e6:c1:1f:f1:48:83:1d:05:56:59:aa:72:7c:f4:
         8d:79:3d:36:bc:81:fa:ce:47:f8:bd:dd:57:6f:db:a7:5b:bf:
         d8:a4:b2:c9:3f:9f:d7:50:cb:6c:bf:d3:c4:41:65:03:15:8b:
         f5:ee:9b:fc:b6:6d:48:ff:98:bb:bc:eb:a8:6d:4b:4e:86:dd:
         78:ad:a8:0f:67:e3:f4:e3:a8:46:07:dd:85:6b:7b:54:1d:65:
         4c:24:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:31 2026 by rpki-client