Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          vtqtEfLtlWHse0MQz4qImcxyqawbUjg5jfjeqAOO/44=
Subject key identifier:   3A:74:51:A8:67:4E:7A:4F:29:58:C5:F6:AF:6A:76:8B:A1:35:7D:0A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019CBF299C525C312BEB2CD4C6247DAFE8DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          168A
Signing time:             Thu 05 Mar 2026 18:01:41 +0000
Manifest this update:     Thu 05 Mar 2026 18:01:41 +0000
Manifest next update:     Fri 06 Mar 2026 18:01:41 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          3: 26rLNje-5GxvYZVT0swfwJnqk7o.roa (hash: QK5jjtwOLc2LvgvPPlN4ghX4dCXmOU5tCJW4D3OFYHA=)
                          4: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          5: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          6: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          7: 8R7LSfhE3UtkOqqB0W3_nrZ3ho4.roa (hash: WHfNau4t7umd5KoTkut/GoNz6JYCazshlb2JdkIEsSE=)
                          8: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          9: BmmyqjzhhXCXtNHXQfS0o58DPKI.roa (hash: DmbfSz+gKQgjE19mwt2GeyXLjwNpk6u4gHjc47wtCuE=)
                          10: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          11: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          12: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          13: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: VdfGRrugWph3kUGWXsC+Mcu0/giwZ4lph8/LBJIGYXM=)
                          14: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          15: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          16: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          17: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          18: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          19: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          20: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          21: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          22: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
                          23: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          24: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          25: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          26: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          27: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          28: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          29: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          30: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          31: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          32: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          33: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          34: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          35: jgB1BVjnSKjwrRYXRD9mqswIqgg.roa (hash: P69vvjLIDAW8RokNa2JlifEO8AoFeyWx23eDMWo0u6g=)
                          36: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
                          37: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          38: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          39: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          40: vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa (hash: dq4TnmZiEM7MrzwPhSEuA5J/9VcYxfK23x7Z1EsSn4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 18:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:29:9c:52:5c:31:2b:eb:2c:d4:c6:24:7d:af:e8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Mar  5 18:01:41 2026 GMT
            Not After : Mar  6 18:01:41 2026 GMT
        Subject: CN=3a7451a8674e7a4f2958c5f6af6a768ba1357d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:63:20:9a:3a:06:f2:0e:47:6b:57:4e:94:
                    64:9e:77:61:94:33:94:81:a6:0b:ec:1e:6d:97:8f:
                    2a:76:a7:15:f1:63:f5:57:31:f0:51:00:f6:80:e8:
                    87:b2:0e:f8:10:89:51:73:a7:80:b2:c4:76:72:3a:
                    1e:6d:4e:72:71:49:91:61:cf:a9:3f:c4:e3:7a:9d:
                    bc:44:02:62:2f:32:f9:ea:cb:4c:fb:a2:46:0f:88:
                    5c:96:2a:1c:f3:36:b3:0b:45:f7:f9:6f:47:a9:87:
                    57:6b:bc:bd:e7:9c:58:cc:c8:c1:8a:06:de:8c:f1:
                    3a:08:cb:8c:8f:aa:ec:db:61:b5:32:bf:62:91:4a:
                    b9:67:c5:a8:98:35:ed:1c:f4:e9:2f:87:31:50:86:
                    55:db:8e:78:4e:ac:87:3a:8a:ab:95:74:05:5d:e3:
                    f0:bb:31:6a:a9:aa:9e:d4:07:f9:dd:88:dd:03:8c:
                    b1:48:f9:ef:86:10:8c:f3:26:9b:a9:7d:b8:b1:c6:
                    98:0b:5a:79:a9:1c:0f:26:ab:6a:82:36:39:a4:0b:
                    70:a0:6e:e0:21:f9:5f:ef:ce:d5:1c:7e:0e:37:39:
                    dd:2a:50:30:4b:41:d8:53:37:62:4e:5c:3e:05:3e:
                    c9:2c:35:20:7a:a0:4d:d1:99:49:b0:cb:71:0b:67:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:51:A8:67:4E:7A:4F:29:58:C5:F6:AF:6A:76:8B:A1:35:7D:0A
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:5d:f7:b8:15:70:51:2c:26:7a:0b:7a:e7:cb:6c:52:ed:
         df:c4:63:ab:fe:ca:6c:9b:40:9a:a7:7f:c1:9a:29:5c:91:dc:
         d6:9b:53:85:f2:4b:f6:3e:30:9e:97:32:79:a2:f7:ea:f4:a2:
         d4:83:9c:82:1c:de:05:bd:bd:73:9a:82:fb:16:f4:13:89:60:
         d6:06:69:eb:ca:55:69:e3:89:e5:54:6c:97:2c:5e:87:ea:ee:
         e6:5b:81:cb:35:57:7d:48:be:37:c2:4f:0b:a1:ea:24:2d:9d:
         72:1f:32:98:db:74:8f:c8:a0:1e:77:2d:b5:7a:e9:3d:4d:4a:
         6c:9c:dc:39:14:62:12:25:f7:7d:a5:62:74:ae:1e:d0:52:1d:
         25:aa:1b:39:d2:a8:63:50:30:c5:d9:70:f8:ba:d9:c6:79:ab:
         b2:f6:74:49:b3:a1:36:fc:0d:9e:ec:ef:ee:cb:01:26:a3:90:
         33:a0:91:99:13:5e:cd:ed:bc:b8:a0:52:13:e4:74:5f:64:7e:
         26:3e:3a:e6:04:c8:81:52:91:8c:81:79:f9:6a:5f:11:7b:2b:
         d4:1f:be:e2:89:ac:48:ae:07:af:e8:20:4c:0f:94:6e:f0:66:
         46:a6:3f:04:6b:5d:f6:84:41:24:d3:a5:a2:05:ae:80:28:76:
         2a:94:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:47:35 2026 by rpki-client