Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          P8/R00YHop5T8cSaV/Yb1VxwCz3e8OV3oz2nLs2wtXM=
Subject key identifier:   4F:ED:37:A8:5C:01:1C:00:8D:FD:1C:1B:6F:23:39:4A:81:F0:B7:E0
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01A15C312A5400B83F16A99C59249F38872A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1C61
Signing time:             Wed 21 Oct 2026 02:01:28 +0000
Manifest this update:     Wed 21 Oct 2026 02:01:28 +0000
Manifest next update:     Thu 22 Oct 2026 02:01:28 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (hash: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=)
                          4: 3g3AwnbeaqZPr3A9brFAbY3P3dE.roa (hash: 8aOH2/zU5FPPODRcb0ddkOMfY7MVnHVcuObzyJ5jOSg=)
                          5: 5FC50pkU1E72pxyO1nEXEesXTqA.roa (hash: 9QcTgjCEi8AdzWRryyEXjK5VA6gvDY8vKOVvNFB3v0k=)
                          6: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          7: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          8: 9DpA3Zhij4iEPYu7haA1YIOqXMo.roa (hash: 7BabnBdFjs0bo4OkSb+3suEDrQswo6ddE0I0n82UnLs=)
                          9: AslLusFgDFPPE7t41smLzW6s-Ls.roa (hash: rq5TrcLRyuOEA3h5a7I8IJzcKULtSjHcKrfXhJxVLNo=)
                          10: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          11: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          12: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=)
                          13: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=)
                          14: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          15: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          16: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          17: ORZDsHph5eHXFHRzWNh5a9BXHBE.roa (hash: pZ63MWL54t3M8TTURqSwCxfa7MbN1Q+ESSbwXqAgw+g=)
                          18: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          19: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          20: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          21: Z2DHR1sumS0RA2QWTG0U4Jj74Q4.roa (hash: GJtGGgvojDwXFlZv8aLVok2bhFiJ4o3T2AhZH4yUbsE=)
                          22: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          23: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          24: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          25: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          26: ekzOqt3czUs7Mi7O02eCqgUuxFM.roa (hash: vKijkLHD9I3QgOkLK59eBNEwCmJEZDSCnEGFMDeFAwQ=)
                          27: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          28: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          29: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          30: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          31: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (hash: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=)
                          32: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          33: nvmiHh7hvoXBMF2l9Luau9aPlyM.roa (hash: qhfMJQhMoSz8x8qUio2M4noD+p0a/clSmOw00cUm+dQ=)
                          34: phY6ZCk8aqSttC6-yTKQykjbTyE.roa (hash: exlZn0QuTXCMh9FQhgXHs9KQ4ozOsEVMgXXaoQJ4z6o=)
                          35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: guYkjC/EqIA56ouIKq+pctL9+MP0iMcoVG0H9IgDuAw=)
                          36: v3lcN-3PJkV6JRmB5czMMfO4dqU.roa (hash: sg2KAw7ZZXyDTNYMhZ7i5rf1DVb+oQd2B7G+i5csZW0=)
                          37: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          38: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5c:31:2a:54:00:b8:3f:16:a9:9c:59:24:9f:38:87:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Oct 21 02:01:28 2026 GMT
            Not After : Oct 22 02:01:28 2026 GMT
        Subject: CN=4fed37a85c011c008dfd1c1b6f23394a81f0b7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:69:79:5a:7c:2b:a3:42:78:c0:bd:1d:a6:
                    86:f4:42:fc:60:0a:20:c6:a8:7a:4a:3a:b8:f2:80:
                    e1:4e:4c:b5:01:4b:52:bc:d3:fa:02:20:d9:72:2d:
                    e4:d5:d7:ce:84:37:8c:14:46:63:fe:a0:25:6d:30:
                    4a:a3:6c:a2:fb:87:fa:76:92:4a:20:fd:74:2d:c0:
                    d6:aa:ff:69:7c:01:6f:f5:af:6f:cc:96:1e:e2:7a:
                    ec:83:e6:15:9a:3a:d2:98:bc:30:20:56:c0:30:25:
                    bf:55:69:45:9b:f9:90:9c:31:b0:17:d9:3c:89:40:
                    f2:50:3b:06:0d:18:68:49:70:98:4b:90:01:97:34:
                    01:94:04:45:75:f9:a1:be:aa:9a:51:c8:0d:b6:64:
                    74:6a:8c:c0:73:f0:e6:b1:63:9f:0b:70:f5:dd:c8:
                    93:d9:59:90:89:c0:9c:9d:4e:fc:e2:ee:37:2a:1c:
                    6a:93:75:8e:23:c8:6b:d4:27:65:d4:47:31:a2:a8:
                    93:3f:f2:63:75:5a:da:d6:88:f7:7c:fa:68:da:12:
                    59:82:24:5e:b0:c1:38:34:ed:39:56:8c:56:f1:46:
                    14:c7:d3:8a:c1:87:77:94:92:fa:e0:54:91:86:51:
                    9a:d3:1e:f0:39:b7:96:3e:a6:22:7d:b4:b3:a6:77:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:37:A8:5C:01:1C:00:8D:FD:1C:1B:6F:23:39:4A:81:F0:B7:E0
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:b6:94:ca:38:a4:9a:52:e0:de:e9:73:29:87:ea:44:42:
         fa:a6:6b:c8:7e:41:de:95:a5:30:2a:e8:0a:87:27:6e:16:a2:
         f2:b8:ac:d6:47:85:9c:5f:00:82:9d:c0:4c:82:d8:26:f9:cf:
         76:65:17:b5:27:81:2c:5c:ab:ae:0f:82:b2:ab:38:06:55:ac:
         ff:be:14:61:f8:3c:89:fb:4c:35:cc:b8:91:c7:b4:de:70:5d:
         ae:f1:93:5e:8d:2d:70:17:12:e3:c7:fe:27:69:dc:80:64:d3:
         55:f8:5e:b6:a8:5d:c0:ab:d3:75:09:21:f5:8a:db:ea:1c:c9:
         a7:c3:c4:a0:92:b0:4f:85:72:a1:64:25:9a:35:a5:99:2a:e4:
         97:42:36:8a:ee:bc:8c:0d:d3:74:bb:18:2b:5b:7d:4f:07:15:
         fb:5c:98:e6:43:c1:f9:1a:76:13:54:51:db:ea:12:45:76:b9:
         cc:c2:f0:e6:20:70:f5:77:bb:9a:9c:cd:15:ef:65:e0:dd:4b:
         d8:2c:d7:8f:fb:2a:97:3f:f1:24:cf:25:53:37:cb:e1:d1:bd:
         99:23:3f:1e:ff:3d:e0:f8:6a:26:f4:9b:fb:1b:01:02:93:2f:
         7a:1b:c1:9f:5e:73:a1:ae:c6:77:92:bd:6a:6e:88:3f:c3:45:
         84:1e:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----