Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          iNk0lPUxIVKXOvNakANNbjRa9kppB4o/9l5XqYa4D1M=
Subject key identifier:   C0:DC:33:47:B6:80:06:C0:97:30:4F:E9:75:F8:5A:D4:A9:85:6A:55
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01A1C254560AFF75B633A7C5A3007614828A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1C99
Signing time:             Mon 09 Nov 2026 22:01:09 +0000
Manifest this update:     Mon 09 Nov 2026 22:01:09 +0000
Manifest next update:     Tue 10 Nov 2026 22:01:09 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (hash: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=)
                          4: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (hash: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=)
                          5: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          6: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          7: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (hash: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=)
                          8: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          9: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          10: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=)
                          11: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=)
                          12: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          13: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          14: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          15: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (hash: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=)
                          16: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          17: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          18: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          19: Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa (hash: GJtGGgvojDwXFlZv8aLVok2bhFiJ4o3T2AhZH4yUbsE=)
                          20: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          21: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          22: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          23: ekzOqt3czUs7Mi7O02eCqgUuxFM.roa (hash: vKijkLHD9I3QgOkLK59eBNEwCmJEZDSCnEGFMDeFAwQ=)
                          24: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          25: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          26: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          27: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (hash: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=)
                          28: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          29: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (hash: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=)
                          30: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (hash: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=)
                          31: r9JdtIjgWYLFN73CkIvKhzfgVDc.roa (hash: CmPRSN6yeUsikZFK6wziOdnLgCPwIkPYHU4ZmfC9JiI=)
                          32: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: G6jNcI5VpV5YJIhFlKvH8f1F5m+XxxF2wGjKu41JbCQ=)
                          33: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (hash: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=)
                          34: vKEbkftYQui_XkJ6i7HwiUjNtZY.roa (hash: zqTYIj+1VKLQibjvTDJgwxIv4uXJnCqwT1UX3LLLEEo=)
                          35: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          36: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c2:54:56:0a:ff:75:b6:33:a7:c5:a3:00:76:14:82:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Nov  9 22:01:09 2026 GMT
            Not After : Nov 10 22:01:09 2026 GMT
        Subject: CN=c0dc3347b68006c097304fe975f85ad4a9856a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:c2:c4:56:ac:96:81:de:61:d5:3e:16:e0:
                    52:a5:a3:fe:b0:6c:ab:6a:b1:84:01:52:d6:69:3f:
                    dc:44:9c:de:8f:7e:a7:b5:c1:2f:fe:4b:21:24:fe:
                    17:ba:f7:9e:8c:e3:65:fb:1f:95:01:93:4d:52:6b:
                    7d:8e:a9:85:a8:d0:41:ee:9c:33:46:8f:04:7c:52:
                    9d:1b:6f:42:73:35:90:de:8b:76:37:96:1c:ad:73:
                    48:6f:5c:8b:e7:f7:94:ec:7a:92:1d:76:65:9d:c0:
                    67:92:d1:14:f1:4c:a2:1d:51:dd:fe:94:a1:a8:b5:
                    72:8e:ea:fe:41:bc:49:2a:b9:d3:12:7e:39:d1:41:
                    29:07:15:1d:f4:65:39:5e:59:47:9f:cb:67:30:59:
                    7b:7d:cb:77:8c:96:b2:ee:f1:5b:1c:f1:63:cf:b9:
                    8f:7e:c7:f7:d0:cf:bd:f6:c9:bf:80:88:71:11:53:
                    45:0e:aa:1a:00:b4:6e:40:00:02:05:2c:da:fe:64:
                    e3:34:08:d1:d1:40:6d:bd:4a:95:58:45:59:37:dd:
                    f7:6a:6a:80:96:64:60:cd:70:f7:67:b3:16:16:dd:
                    34:32:52:04:f3:9d:50:4b:2b:80:b6:11:ba:d3:40:
                    ee:6c:6b:bb:f6:3b:c1:05:a6:99:3d:31:22:a5:47:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DC:33:47:B6:80:06:C0:97:30:4F:E9:75:F8:5A:D4:A9:85:6A:55
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:b4:42:62:af:ff:ae:49:db:39:b4:ef:f2:46:16:f3:cf:
         b2:30:d5:a8:90:d8:17:af:d8:d0:d3:55:91:77:a7:1f:2d:b8:
         29:19:a0:62:bd:a7:1d:fe:b6:2c:69:d7:c4:ad:f7:b8:5b:66:
         9d:4d:53:1b:85:be:01:cd:b2:b7:e2:82:65:3d:4e:ff:b6:c7:
         65:65:b1:3c:45:b1:c0:ce:6d:8e:cb:f7:11:aa:ee:e7:72:59:
         c5:18:6a:0e:33:b1:24:22:3a:11:67:b9:20:6b:83:32:91:23:
         98:02:af:9d:8c:32:2d:5c:11:d1:16:e8:75:f8:18:4f:61:b3:
         ae:64:2d:65:3d:59:67:c5:e8:82:d3:75:94:fb:82:49:a3:85:
         6b:07:6f:fa:23:31:f3:3c:9e:16:97:b0:bc:b6:6e:03:4d:56:
         7c:63:5e:ae:98:b0:c1:25:9f:fc:02:23:6f:fd:5e:bd:a4:d2:
         ae:85:18:68:ce:e3:36:ab:6c:9d:df:21:0d:55:0c:0f:d8:10:
         67:6d:8e:9d:cf:9a:15:0f:34:95:ea:55:64:9c:02:d9:4c:c9:
         9b:7a:cd:6e:85:d4:e8:9a:db:fa:95:bc:d7:f8:1a:de:81:0a:
         eb:34:5e:cc:49:bb:a8:e6:9f:93:71:c1:a5:6e:50:cc:67:18:
         4e:41:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----