Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          p9MdrZrPvdAsD+YN9ZLxyUjvz2tUFFV7+v7ql/C2am8=
Subject key identifier:   BE:01:B8:C8:3F:9E:B9:88:E2:0C:44:60:C5:4B:66:60:59:60:19:D6
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019CF72A89CCEBEA3D5305D3D2105D31A177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          16AB
Signing time:             Mon 16 Mar 2026 15:01:25 +0000
Manifest this update:     Mon 16 Mar 2026 15:01:25 +0000
Manifest next update:     Tue 17 Mar 2026 15:01:25 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          3: 26rLNje-5GxvYZVT0swfwJnqk7o.roa (hash: QK5jjtwOLc2LvgvPPlN4ghX4dCXmOU5tCJW4D3OFYHA=)
                          4: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          5: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          6: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          7: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          8: AsNuOYMTwGSlixQkjkWQYWwZDh4.roa (hash: oWcIWc/+4wuvHeMVL+kDFEjfwJRDK4LbIsHsKHKVmc4=)
                          9: B8B9K97Hxo9p2HPdq3X7_bUrNOc.roa (hash: NIA5ys2Jl6RcIrrYViu7257LN1PDUAXmE2FRelr4fiI=)
                          10: BmmyqjzhhXCXtNHXQfS0o58DPKI.roa (hash: DmbfSz+gKQgjE19mwt2GeyXLjwNpk6u4gHjc47wtCuE=)
                          11: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          12: EAR4BBUJwroFmzGZQ2Mytm2ASro.roa (hash: is5iTv7obnEG1+nGtMkK9nLgnqgMn1vZx4ZRTT8qnow=)
                          13: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          14: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          15: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: grwoTUTvA7y28UuWqxCniDufflTChVFnPH132WRc6hg=)
                          16: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          17: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          18: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          19: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          20: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          21: UMfGsYiVVaPqQLK16T2A06u0BEE.roa (hash: 07Lh23XMbUQQ60HsH+UK1VVt2KldYGYcfq4bp2sWOts=)
                          22: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          23: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          24: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          25: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
                          26: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          27: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          28: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          29: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          30: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          31: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          32: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          33: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          34: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          35: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          36: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          37: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          38: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
                          39: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          40: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          41: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          42: tueCs65KFYrYDAZt75DCyIoH5_M.roa (hash: VfVDYtNm0lmYABLfzcwupzuFE3TOuGzFZ9OgjMr/apw=)
                          43: vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa (hash: dq4TnmZiEM7MrzwPhSEuA5J/9VcYxfK23x7Z1EsSn4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f7:2a:89:cc:eb:ea:3d:53:05:d3:d2:10:5d:31:a1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Mar 16 15:01:25 2026 GMT
            Not After : Mar 17 15:01:25 2026 GMT
        Subject: CN=be01b8c83f9eb988e20c4460c54b6660596019d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:56:a7:d9:26:46:9d:e4:ed:18:9c:9b:f0:
                    63:f8:57:bc:ec:0f:df:ed:91:ed:d4:1d:75:c4:8a:
                    66:a3:84:df:1d:04:3a:73:73:2c:08:78:29:a8:1a:
                    f0:7b:d7:e2:0a:37:b0:f2:75:46:e3:4e:e1:1d:b2:
                    35:b0:b1:5f:00:58:d8:71:80:41:a0:38:cc:38:43:
                    d1:8d:22:69:f8:41:1a:02:b0:09:99:8d:65:e1:56:
                    98:02:ae:4b:2d:24:7b:cc:53:8e:b6:02:06:be:8a:
                    c7:e6:67:e9:27:63:7a:31:65:8d:2a:ac:2d:c1:b8:
                    5c:de:f1:f0:84:6c:d4:fe:5d:62:d4:63:31:6c:08:
                    37:2f:2c:cb:8a:0f:cc:f3:5b:99:ff:84:ec:6c:63:
                    3b:da:f9:6b:b7:ee:9b:2b:22:48:87:0c:50:0f:52:
                    67:e3:cf:57:7d:96:e2:d1:d5:e8:35:62:b5:49:25:
                    85:41:65:7b:96:45:2b:5b:d8:b4:93:54:d6:83:03:
                    80:87:20:99:9c:25:b4:23:d9:59:d1:3d:84:8f:46:
                    9b:bf:79:ab:42:d7:1d:ee:c9:5c:94:ad:af:c7:e3:
                    6a:ac:fb:eb:d4:de:05:2f:38:5b:fd:8c:ba:08:09:
                    ed:73:f1:2d:ea:e0:10:8c:e7:9f:1c:2f:02:bf:e7:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:01:B8:C8:3F:9E:B9:88:E2:0C:44:60:C5:4B:66:60:59:60:19:D6
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:5b:fa:67:f2:33:94:2d:59:f6:6d:09:4f:3b:56:76:d3:
         57:20:74:4c:50:f3:23:8c:92:13:d0:ce:82:05:e5:13:97:3f:
         4e:96:1d:dd:b9:3f:78:a7:e8:41:33:84:05:f6:9a:64:e7:d8:
         4f:72:e4:5c:22:80:f3:09:ef:f6:8e:eb:13:4a:41:78:f4:f7:
         a1:c0:61:28:13:02:f3:4d:51:71:3f:2b:3a:20:c9:11:79:46:
         c1:e2:c1:98:62:b0:92:a8:26:43:44:6f:9e:87:71:5b:0c:5d:
         e8:19:37:c8:93:fd:3f:31:0b:64:eb:79:38:7e:fc:9c:66:eb:
         b3:bd:d2:d8:ac:fa:c9:ed:bf:26:17:bd:d3:fe:ac:4d:70:e0:
         68:44:27:f7:09:19:b6:cc:f5:37:76:a3:bc:93:34:66:f2:40:
         fb:ac:83:c0:1b:79:89:d0:36:bf:a7:d0:a9:22:49:4f:9c:c7:
         25:21:0a:9a:d2:d1:61:7a:aa:40:87:b4:f0:12:ef:7a:b3:70:
         72:51:4c:ab:ec:46:d1:57:4c:f5:a6:bc:d2:f3:30:4c:89:8c:
         b1:b5:db:34:c4:64:81:9b:5f:0a:94:5c:88:a2:38:c1:bf:69:
         1f:f9:72:1e:a0:c7:9a:31:21:68:12:de:25:f2:fe:6e:6b:42:
         bc:29:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 21:25:37 2026 by rpki-client