Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          aHqH7hP98x6nmH4JfPS8iu1WZnRK4Tj0hSUk14Cb1OE=
Subject key identifier:   D5:56:4D:E7:54:3B:AB:56:3E:44:D0:08:3E:C3:2E:48:43:75:0D:6E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019834956DF6DA0AE5A9FAC932EDB1DA6DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          13CD
Signing time:             Wed 23 Jul 2025 00:01:04 +0000
Manifest this update:     Wed 23 Jul 2025 00:01:04 +0000
Manifest next update:     Thu 24 Jul 2025 00:01:04 +0000
Files and hashes:         1: 18CbUvKYWO6PYu_t92D214_TJes.roa (hash: gxubaEnhi8atyxnwW/VBZzNjtAflWsy9V6S18PdX27o=)
                          2: 3E9M_L1qni0gOm9o4JNThdl5mKU.roa (hash: 3QEnMAssy1tNKh1FvcPETtJzWZzXiuRM6bkNkokD5XE=)
                          3: 4k_ZuHYqDe_Het9axD5evRht3Lw.roa (hash: psQ9n7MA7JcZWMk3LmtdaKPiVMz8GYjL9qmt7ww6xH8=)
                          4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=)
                          5: DPE-lvIaheAb93O4x9ER9Pm0wZA.roa (hash: VKbUVq1CbBMedZ3RYdA6WZaoezc+6KLmQpqvYTQTzcc=)
                          6: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=)
                          7: FqbcQiC4rQi46n3g99F_M1_Ys0A.roa (hash: OyV3G2Aag4lQbsbY7+qaGlD0xVR3rH5K5z5yPW9zjfE=)
                          8: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=)
                          9: GJcAO8ZW0YLa6GNosUeBi0U2jxI.roa (hash: RqPPhP5l8bodsbKY5+6GnktvsLzySouKP0ZwLfF6Qu0=)
                          10: GP1Cesa5LS14FJBqDWsMjIckzAI.roa (hash: vc/pAYpqFI6+gWwwFh+jiqzj1QLBBkB1WyCakRdnhf8=)
                          11: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=)
                          12: IqfYIzlv9tSOLjBO29wjSPGgm9k.roa (hash: Ruia2gPByc9AoUath3+WUWMFKonyFU90I/aPuiikJtc=)
                          13: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=)
                          14: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: Ag/VdEYip+Td9ZVfM9NDEJl5RvrOa/lRIo0Ifufun2Y=)
                          15: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=)
                          16: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=)
                          17: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=)
                          18: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=)
                          19: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=)
                          20: VN6ruZTI56QmR2wi54zgOy2r-_8.roa (hash: v4iITGHNA3f/jqtvJNkH6LEwD8ta5N38AwWHG7bdtFM=)
                          21: Vyp1FNRXbyrbg0MCQAZO2to90_A.roa (hash: bgZbcI3I/GTUjLPM77pX7mSC/es1o3DQ/C1VOjxQjbA=)
                          22: bYVRCpfiYfuNTOtItmg2qSgXKww.roa (hash: A5c3DgIJi3QdlQD3NgkB4e1o2u7d4JwrE4GhSjzqcqA=)
                          23: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=)
                          24: eTi8UpoWA4LfDVEf3bLuS7NirDI.roa (hash: Z0eV/Pg39iwPdoJ1Rvmo2nij3tl4qAnx8wWUmqcdIPk=)
                          25: emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa (hash: nGThIK5KWgFiHgBYn4d6q1DvellcLqYIA1fpLkP2lwY=)
                          26: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=)
                          27: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=)
                          28: ru0yVj1uuIU42lus6xVMmufa4hM.roa (hash: +rKaCOhiekBzFf8GDECn0Q4N7qDQWsCX5OxE0LHrKSg=)
                          29: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:95:6d:f6:da:0a:e5:a9:fa:c9:32:ed:b1:da:6d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jul 23 00:01:04 2025 GMT
            Not After : Jul 24 00:01:04 2025 GMT
        Subject: CN=d5564de7543bab563e44d0083ec32e4843750d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:3b:ff:be:82:64:b6:43:d1:63:d8:ff:61:
                    76:b9:45:97:67:26:99:8b:a6:31:84:13:ab:3d:0e:
                    e0:6e:38:fe:1a:21:a5:59:a7:35:a0:61:49:2a:73:
                    43:d5:ac:52:fd:74:f3:6f:40:39:9d:b8:66:30:1d:
                    41:72:6a:01:06:1a:1d:0d:e7:f9:98:13:10:4f:fc:
                    57:e8:a7:de:6b:37:d7:b0:ef:c8:80:94:7d:b8:90:
                    ae:76:33:46:c1:26:6a:c6:d5:d4:2e:32:60:8c:a3:
                    b0:2c:5b:ea:40:60:56:23:50:8a:d2:c6:18:47:db:
                    94:64:38:77:d0:a0:65:90:51:03:0e:d2:44:73:bf:
                    27:2a:53:c2:4d:da:ae:e3:93:33:16:a7:08:70:23:
                    f1:a5:1f:fa:0c:33:7b:56:7b:81:cc:3f:3c:8e:fa:
                    fe:af:28:8d:1f:15:31:03:55:54:3b:eb:e8:5c:66:
                    51:6c:41:4b:a2:85:ff:db:4e:2c:9a:aa:be:2c:25:
                    10:2f:bb:c0:ed:51:51:bf:44:cf:0c:10:1e:bf:f6:
                    f6:5e:73:04:cd:a4:98:05:90:24:b7:a8:47:92:89:
                    b3:ee:5b:20:55:3e:c8:71:d0:4a:f5:65:d5:0f:43:
                    76:8a:75:ef:6b:43:14:d0:a3:d7:bd:d3:56:fb:71:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:4D:E7:54:3B:AB:56:3E:44:D0:08:3E:C3:2E:48:43:75:0D:6E
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:4e:b1:3e:fe:86:53:48:aa:de:c0:9d:a9:ca:f6:6b:f2:
         8a:2f:22:db:76:67:b7:14:aa:2c:ca:c5:b5:9b:a6:f7:a5:aa:
         b1:eb:d1:4f:04:5f:cc:79:c2:b6:61:be:aa:1a:1d:1b:24:dd:
         25:11:e6:df:67:0b:e4:d5:79:79:69:10:41:6b:2a:00:37:40:
         8b:f9:2f:85:fe:07:ce:c5:67:e0:13:d7:ef:b1:16:48:39:a5:
         88:83:55:ac:b7:26:0f:95:76:9d:29:7b:74:5e:4b:11:79:61:
         54:bd:96:bf:2e:dc:28:1c:a1:cb:a0:5a:c0:40:3a:cf:a1:74:
         f9:eb:44:fa:d9:bc:7c:48:fb:b2:04:33:c9:d1:2b:c3:81:48:
         24:59:be:08:94:c7:69:55:d1:1f:64:b4:9e:1f:a5:6f:aa:71:
         3e:1f:6f:9e:3f:20:6e:4a:aa:e1:47:08:cd:c1:74:1d:f6:01:
         22:fd:fa:3a:0f:97:54:d3:9f:72:d8:8f:f7:81:fc:8b:9e:32:
         46:4a:2b:4d:87:00:0d:d0:4b:25:d9:20:5d:96:12:ea:89:48:
         89:43:af:56:91:0b:a6:f1:ad:f3:5c:b7:aa:62:68:97:1c:d1:
         b9:84:59:8a:aa:db:9b:d6:55:dc:18:10:52:65:79:2d:25:78:
         03:e5:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:31:01 2025 by rpki-client