Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          svDIIsN5y2rgj48lbwmfv9q8ycjai7gc3ktBjmF9lhA=
Subject key identifier:   B8:BF:03:38:D1:C5:42:09:A4:F2:8D:0A:87:A8:36:29:B4:48:32:2E
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019CC9078FFF7F82025B8A9C43DE7248A493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          19B2
Signing time:             Sat 07 Mar 2026 16:00:41 +0000
Manifest this update:     Sat 07 Mar 2026 16:00:41 +0000
Manifest next update:     Sun 08 Mar 2026 16:00:41 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 6Iosru2rgefqb-G1dkNZm3eQBbo.roa (hash: 1dV8hYXsGdshFlGk0ddmJ5AcxJeAQGJGdw+VePlaJr0=)
                          4: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          5: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          6: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          7: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          8: IuaBqY2GadGcg3FDyUG5eeweXtw.roa (hash: HkIMLZemJswFZ1lLlbUgk4yP8IDP4ASfJ/qPNB+Uu+w=)
                          9: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          10: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          11: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          12: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          13: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
                          14: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          15: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          16: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          17: _0-U_dvkW7gAc4cTDIIkcm_9VOw.roa (hash: MWzK0oFmUyO4WRUo2MGNJz+fYJhtySMZ4mGR30tXxn0=)
                          18: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          19: bsx4FJoKXOBGtYfRQPeaP9fokuA.roa (hash: q36gfKZfIIkmCBj7MHa3B98hJW+E9SLJkVHBSknoDJo=)
                          20: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          21: e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (hash: DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=)
                          22: ei7gbLOT6z2qtdrScoHSrhXAc_Q.roa (hash: trEQXC8j4Fo/aHPIGgfrdhYdoDgInVHSvuOtLPmlVZY=)
                          23: h4B19M4fJna6bjarmHanNvdxzRk.roa (hash: mU49wrIx2TGe4N7KBWJ6hapg0RSH+SuZHSziFTcOhFs=)
                          24: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          25: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          26: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          27: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          28: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
                          29: m5jHreeQ4z9KRhKurDrnV0MKOgE.roa (hash: 3hVvPZGhCr8fr8Ag3CkkypFJXNKDQDPy5oAw3gz/NcI=)
                          30: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          31: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (hash: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys=)
                          32: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          33: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (hash: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM=)
                          34: tml7s1FEM_9KEwjG1ZFBVK9B8KM.roa (hash: n8PMHdIGzbLhBNN6Xpxhp4apLQiZy0TRKprVqL0yAqc=)
                          35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: 9nkucgLaHCMJ60Gv34c2dkziQwzNJVMzZ42zINK1K/s=)
                          36: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          37: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          38: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 16:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:07:8f:ff:7f:82:02:5b:8a:9c:43:de:72:48:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Mar  7 16:00:41 2026 GMT
            Not After : Mar  8 16:00:41 2026 GMT
        Subject: CN=b8bf0338d1c54209a4f28d0a87a83629b448322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:e9:3b:f5:96:f1:ae:21:7e:72:b0:9d:a5:
                    19:e1:59:13:1c:6d:f1:d0:6a:02:80:84:4f:c7:1f:
                    50:b3:9b:52:b4:df:ec:78:55:9e:95:d0:86:0b:3c:
                    a1:7e:a2:25:46:ea:e1:07:ac:50:43:94:24:21:0e:
                    72:56:bd:ed:41:ed:58:04:00:42:33:e2:98:8a:67:
                    b2:47:95:ea:0a:a4:31:b5:7c:75:89:a7:e5:d6:0e:
                    fe:c1:64:8f:c2:6f:d4:ff:36:93:47:35:f9:42:9a:
                    a8:41:bf:d2:36:a5:84:80:90:77:9b:f5:1a:6e:14:
                    4b:ff:4a:8d:57:72:da:4c:33:31:05:69:c8:ac:6a:
                    c4:6c:33:c0:0b:e2:de:c9:8b:0c:34:af:61:50:44:
                    06:7b:6a:73:e6:97:7d:5a:cf:5e:c3:1a:13:cf:c1:
                    dc:55:04:c6:ef:db:e7:b5:9a:3c:51:6c:d0:a5:d6:
                    c4:a2:fa:50:fb:e7:bc:90:8e:42:bd:55:eb:f1:a6:
                    c2:38:97:98:62:c6:6b:55:55:b2:93:45:84:af:57:
                    08:28:e2:5e:67:e8:4d:8d:4e:9c:ea:11:1c:a9:ab:
                    ae:11:1f:73:68:4e:c9:9b:fb:79:32:6b:1d:7b:72:
                    27:02:e9:39:cf:56:51:8e:22:dc:1a:36:8c:0d:9d:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:03:38:D1:C5:42:09:A4:F2:8D:0A:87:A8:36:29:B4:48:32:2E
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:a8:7e:79:79:0e:48:2a:ac:b9:15:6b:c7:92:33:33:94:
         bf:39:cd:2e:8c:4b:5e:a9:f9:5e:e5:8d:d7:72:68:b5:b6:2e:
         58:32:07:63:e6:da:bf:04:88:be:ff:19:61:f3:73:8b:cf:ae:
         8a:6f:eb:ba:e6:96:af:5b:2c:bc:b2:f3:cd:9c:4a:8c:5f:31:
         2f:df:c1:10:21:fb:d1:9c:05:09:05:4e:16:30:a4:e8:2e:9d:
         06:92:fb:7a:5b:4c:b8:58:1f:4a:0a:04:73:d0:64:4a:e5:cd:
         69:76:ed:48:93:26:11:9f:8f:13:81:13:7c:22:29:d1:34:71:
         70:ef:df:df:5f:57:23:31:00:6c:c6:5c:6d:a9:90:8e:eb:ca:
         3e:50:33:5c:14:cf:7e:e9:c0:e6:ab:96:64:e9:d9:68:8d:9f:
         d7:f7:74:e4:94:e5:d2:f4:4f:04:8f:1b:8b:73:bd:c8:8e:52:
         c9:ce:22:5a:05:1b:2d:6e:3b:3e:bc:7e:7a:ae:0c:c2:ce:ed:
         7c:2d:e5:59:a8:13:08:99:b0:cc:24:bc:61:0d:98:5d:0b:c8:
         a2:9f:56:27:62:47:3c:3e:bd:52:14:f9:f0:d9:76:60:a4:1f:
         d9:e1:45:9d:9c:87:03:be:f1:b9:81:fe:23:cd:99:51:76:ec:
         fd:c1:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:35:11 2026 by rpki-client