Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          TTjCqinHO/DXOZ9SaUhnHhEUWnMzLruBzxFKh8OdtqM=
Subject key identifier:   53:C5:E4:DA:EC:2B:4A:39:E5:22:9C:43:21:B6:73:CB:D1:00:95:8A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019DB20FA93AA2378A0D9433D8F253F2B0FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1A34
Signing time:             Tue 21 Apr 2026 22:01:03 +0000
Manifest this update:     Tue 21 Apr 2026 22:01:03 +0000
Manifest next update:     Wed 22 Apr 2026 22:01:03 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 5kJ-KBOslxl7eMMVxRA35-Jf9wk.roa (hash: iy3DwQD9iS+0vnz5GqNL6+JAoJO5FEqtMUwE9gE3Dgo=)
                          4: 6Iosru2rgefqb-G1dkNZm3eQBbo.roa (hash: 1dV8hYXsGdshFlGk0ddmJ5AcxJeAQGJGdw+VePlaJr0=)
                          5: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          6: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          7: 8_6z_ALRGz-CVjgclabyD5HofuI.roa (hash: 87JSE9qMyZcP6Ekmnt+zFI5GapB2S4KMZVgpMzi9vh4=)
                          8: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          9: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          10: IuaBqY2GadGcg3FDyUG5eeweXtw.roa (hash: HkIMLZemJswFZ1lLlbUgk4yP8IDP4ASfJ/qPNB+Uu+w=)
                          11: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          12: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          13: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          14: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          15: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
                          16: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          17: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          18: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          19: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          20: aECIq53kmn8OJ2RgHuWhbVsJ2gk.roa (hash: +ZhDaozPaa0XNW6L0g1DoTS8Qn7rbBIdQRWJZoxChcc=)
                          21: b9Dh_UeOJvMX7mS9n4z8FGHg4Ac.roa (hash: TsKKF7D/c/MjkTAoubzU5UyUbp2KE6LY4Yz6BNqvcX4=)
                          22: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          23: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          24: e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (hash: DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=)
                          25: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          26: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          27: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          28: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          29: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
                          30: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          31: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (hash: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys=)
                          32: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          33: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (hash: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM=)
                          34: tml7s1FEM_9KEwjG1ZFBVK9B8KM.roa (hash: n8PMHdIGzbLhBNN6Xpxhp4apLQiZy0TRKprVqL0yAqc=)
                          35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: rsHhtnMitarLh7nad3mv/chmI+Iv6seVfMw40HZ+zyY=)
                          36: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          37: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          38: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
                          39: zQQ3up_sVp85Vu9FjrlPZdIUAo4.roa (hash: CoIauExbBLiSe/+TXSN+Xpl0pzQnWGj8jVHsHEggBc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:0f:a9:3a:a2:37:8a:0d:94:33:d8:f2:53:f2:b0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Apr 21 22:01:03 2026 GMT
            Not After : Apr 22 22:01:03 2026 GMT
        Subject: CN=53c5e4daec2b4a39e5229c4321b673cbd100958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:21:d8:a5:b5:e3:45:25:4c:b5:a7:db:c0:
                    6d:60:f2:f4:f4:18:92:cc:56:b9:fd:07:88:a0:b8:
                    95:52:66:8e:8e:a9:38:c2:06:22:61:1c:5c:46:4b:
                    5a:35:53:cc:c6:79:0d:b7:52:9f:7d:69:e6:17:60:
                    a6:4a:7c:55:17:f8:12:2a:33:68:f0:53:a5:cd:31:
                    f4:63:c5:bb:5a:47:87:c8:fb:ba:29:8b:05:6c:a5:
                    86:8b:28:3e:9d:dc:d4:3f:e5:1d:6c:7e:cd:90:6d:
                    dd:06:ce:4f:95:c5:45:00:b7:3c:0c:c1:1a:dd:a2:
                    31:06:1a:82:e4:20:d0:12:59:61:97:68:1d:01:09:
                    77:6d:85:40:e9:ae:9c:9c:9b:01:28:2c:62:60:73:
                    7f:3c:82:2d:b7:16:34:67:ca:93:c1:6a:42:97:16:
                    1b:27:0a:d6:ba:51:47:e9:97:62:e0:6f:d4:0a:14:
                    ff:54:98:0d:18:4f:e4:c4:77:45:47:b9:cf:ad:ae:
                    fb:2a:ad:a0:aa:fa:55:5a:06:1a:ff:eb:a4:96:9d:
                    63:d0:6c:26:04:cf:a3:b2:d9:36:25:99:5e:16:59:
                    da:8a:8b:24:ee:61:b3:e1:28:72:27:98:b8:35:7c:
                    81:81:a4:1c:76:75:2d:05:c1:cb:8d:0a:ad:92:e7:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:E4:DA:EC:2B:4A:39:E5:22:9C:43:21:B6:73:CB:D1:00:95:8A
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:79:a5:de:18:42:39:68:9a:17:0d:ee:ae:9f:f1:ea:6a:91:
         8c:af:99:e3:00:01:b7:fa:ed:63:cf:96:cb:a5:a8:c2:c2:e7:
         14:26:4a:e0:27:1e:56:08:ec:46:1b:a4:29:d1:f0:97:bf:c1:
         9e:d7:7c:30:d6:5c:ea:62:e4:2d:4b:e0:0a:98:8b:40:03:da:
         3d:30:d6:b6:84:e0:cc:c7:db:60:e7:00:d4:59:99:cb:7e:d4:
         8e:f3:89:c9:db:67:19:e1:33:d0:ca:fe:0e:52:aa:5f:09:d0:
         73:aa:9d:01:ee:da:73:b6:75:0b:36:7d:73:81:7f:87:0c:5a:
         56:e8:18:31:ee:1e:a2:ea:fb:21:ae:44:8a:f6:3f:fb:ac:b2:
         da:12:e6:bd:21:82:35:9f:ed:48:5c:93:6a:47:d8:5c:c4:84:
         91:58:70:5e:6b:db:2f:ef:dd:2e:27:cb:33:6b:25:45:3d:de:
         35:69:35:06:6c:94:c1:bf:15:43:ab:92:e1:43:7b:19:38:21:
         c3:39:80:83:12:77:10:7b:72:65:92:f4:e5:39:4a:fa:73:0e:
         de:02:1e:46:22:c8:1e:35:27:1b:42:64:5d:de:a4:a8:da:cc:
         17:e0:6a:9e:d8:6e:28:77:4d:68:29:42:01:7c:9e:35:62:be:
         68:8c:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:01:03 2026 by rpki-client