Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          ULmw2WmPt2eWZS3NpdExMTHYrqHsq1iOor8kVWxp1zg=
Subject key identifier:   11:EF:94:AC:B4:17:64:30:4A:AB:C6:C4:6B:8E:52:59:0F:B4:DA:B3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019E9CCE2EEBBF941D4F8CF7AB4F841BE66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          1ACF
Signing time:             Sat 06 Jun 2026 12:00:18 +0000
Manifest this update:     Sat 06 Jun 2026 12:00:18 +0000
Manifest next update:     Sun 07 Jun 2026 12:00:18 +0000
Files and hashes:         1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
                          2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
                          3: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
                          4: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
                          5: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
                          6: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
                          7: JoJlYz2K0ovQy7smFBgKyLQVeWU.roa (hash: L1jhiYEVihQMcnNCUfULpjv8zsle3Sydel4k2GtlzUo=)
                          8: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (hash: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=)
                          9: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
                          10: LXYs4o7bK9nlGjR9RbDwaNPptno.roa (hash: tlrbGu5sV7aPZHtzRFPenswRUbp8n337kM/lq6z5UgM=)
                          11: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
                          12: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
                          13: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
                          14: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
                          15: SuUC7rg6zKaIqAQr-O-xeK2gM60.roa (hash: qZ9eVygiiy3ggG2jA1ir/Et4kJBvE0yFLRS8S0vXW+A=)
                          16: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
                          17: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
                          18: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
                          19: ZMumc63o9kKMa-L12tneJpumRao.roa (hash: IsOdi7anu+59jN6DXbxdr8DP8Xfklel1t8aeruzdFD4=)
                          20: ZR8cdqV6QtDUIcFSAkUEoKejq3o.roa (hash: wxqypfRA+7HeYUNNOYo0W5htS2qjZnymm/0E/jIq1no=)
                          21: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
                          22: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
                          23: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
                          24: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
                          25: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
                          26: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
                          27: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
                          28: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
                          29: knOPRwKf7FbGgWV9oKeUcdaW_-s.roa (hash: BTqSvMY/oOx3K2Ds4ZvpdGYhBQOBkeHFJigEuV+xf1o=)
                          30: nENdDu6H1LF5KALWcqHE2bIFCLU.roa (hash: rsVqrR4nP/nNYD/1cfhr8gYT+Lvx50XF2VJ5QV/BQEo=)
                          31: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
                          32: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
                          33: sTOBwCRHBQ_sd0AzHgSZRzqbkvA.roa (hash: xCjC9N6BGc51y0Rc7dZOWB6fIe+Dax7tYaITw6lBbZk=)
                          34: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: FeE+LdWadELoX94NZUTRp+EMgYXGvkOFozLV1biHzDI=)
                          35: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
                          36: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
                          37: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
                          38: yzuwddNzEHdV_Lc1M-GQA5ujTLc.roa (hash: iZhWIdBEhDzzocSdGm+JQEz2XIS0V/kkEk7VEoR+oiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:ce:2e:eb:bf:94:1d:4f:8c:f7:ab:4f:84:1b:e6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jun  6 12:00:18 2026 GMT
            Not After : Jun  7 12:00:18 2026 GMT
        Subject: CN=11ef94acb41764304aabc6c46b8e52590fb4dab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:55:d0:60:26:3c:3c:95:cf:68:37:b9:78:9d:
                    8c:cb:e0:79:84:ed:4e:62:22:dc:5f:69:48:11:9b:
                    b2:91:22:67:15:18:3f:b6:23:56:57:47:53:d4:d5:
                    a7:e0:ac:7a:82:b8:36:48:af:9f:09:6c:0b:20:6d:
                    09:ac:15:72:a0:76:47:63:e5:77:61:c3:ad:19:22:
                    23:f3:b6:5d:cb:e5:97:64:79:52:e0:77:52:8c:f3:
                    45:dc:b6:af:2b:c6:f4:d2:bb:1c:62:da:82:d8:3d:
                    de:38:2f:46:c8:cc:60:98:e9:89:0e:5b:3c:58:bb:
                    15:94:e6:6c:c4:18:c2:66:22:22:4b:2b:82:27:07:
                    d1:3f:41:75:54:ac:27:b6:cd:b5:ba:21:e3:1d:02:
                    79:6b:9e:51:d8:09:d9:a0:c9:8b:f4:86:25:7a:1e:
                    44:7d:8f:53:87:2d:89:6f:3e:1d:ac:26:24:e9:3d:
                    c6:60:62:a5:1e:95:1c:3f:e2:ff:ba:38:da:1b:3d:
                    b7:7b:f3:d7:a8:7e:92:63:51:39:22:73:a0:bc:04:
                    6a:5e:84:6b:01:58:c2:13:65:4d:b8:e5:fc:05:28:
                    11:f6:82:ba:5a:d7:6c:10:7c:4d:6a:2b:8b:54:27:
                    c8:b7:04:99:a2:98:25:fb:e7:d8:de:bd:5c:97:be:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EF:94:AC:B4:17:64:30:4A:AB:C6:C4:6B:8E:52:59:0F:B4:DA:B3
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:98:de:34:52:35:90:49:8d:61:ed:2a:a1:06:7c:9d:89:17:
         53:8b:66:23:0f:6f:b6:6d:75:2a:ef:96:03:5e:2d:2f:0b:ec:
         39:b9:01:ad:14:06:23:0c:aa:a5:ec:bb:f9:ed:64:dc:53:d3:
         ec:ed:c1:5c:3a:a0:a8:bf:ee:f1:c9:8b:1a:c3:54:a1:80:bc:
         eb:47:2a:77:16:a0:50:76:54:88:17:03:e5:82:60:1c:fa:65:
         29:29:fa:0e:6a:aa:57:db:28:01:08:46:b4:6a:b7:cd:de:ef:
         96:5a:f7:6e:f5:6b:b0:18:38:3d:fe:25:60:20:39:fd:e0:cf:
         fd:d5:58:7e:fa:56:cd:19:de:8c:69:de:60:25:94:a9:f2:03:
         96:06:0c:56:8d:d1:c5:9a:78:60:2c:b4:9d:a8:78:69:e7:77:
         0f:38:78:04:d2:b8:77:bb:ec:14:33:f6:64:84:47:a3:0a:34:
         bf:7e:6a:fe:c1:83:6b:1e:9b:29:9c:34:63:42:a2:48:f2:ed:
         21:4e:73:b5:2b:96:0e:3d:cb:ee:11:4b:1b:9d:87:e1:80:ec:
         45:7b:55:e7:8f:0f:58:17:f3:a4:50:4b:e0:11:3f:2f:32:30:
         4d:45:4b:29:b1:f4:6c:37:19:5c:a0:b4:f5:62:96:b2:9c:37:
         c4:cd:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----