Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          LQmMXUBuIN2aB+FIvrgg7KbJLZdPLbfPmYUYWEGIcRQ=
Subject key identifier:   EF:B5:B4:6C:12:F8:1A:E5:27:61:FC:73:36:6A:90:0D:70:3E:27:A8
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       01A06BDD2B3E093362519258782252C73840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          18A2
Signing time:             Fri 04 Sep 2026 10:00:51 +0000
Manifest this update:     Fri 04 Sep 2026 10:00:51 +0000
Manifest next update:     Sat 05 Sep 2026 10:00:51 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 0sGv10ejlWO9dgsVx2pg9_UXsP0.roa (hash: HjwgwpdVpoVONf9W/H1euUDvWHrCJ+io9pGFgz8ZJh4=)
                          3: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          4: 1-XL-4073u-zh_XXTY534GBaFPZs.roa (hash: zvo47mjfhVTGrufaPlWjDiOdGjG6ZmOQEvvtHmB2jJQ=)
                          5: 324xQMHqfVn48kcFlWiVdffHgTs.roa (hash: qXkCqpcT0IZv6rheVcs5oNhxEGv8i/COJn1bP4KXOwU=)
                          6: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          7: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          8: 41DwvvTFD9Qs2hnrDdBKBcR7l1Q.roa (hash: BMkkI81LCqcEqnXuvm+HyIe94CPXRLmId7uTf9DMF1k=)
                          9: 7B9hHTypErB06lBzHQxbWrURzMU.roa (hash: CfdzUFGDwWkqGdXZ5dFsj5NYowB9suqWoVeJooBp1f0=)
                          10: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          11: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          12: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          13: EAR4BBUJwroFmzGZQ2Mytm2ASro.roa (hash: is5iTv7obnEG1+nGtMkK9nLgnqgMn1vZx4ZRTT8qnow=)
                          14: EnzizIDwaqisiYlqmmlt8YCsE4o.roa (hash: 9KfPR2jxj+JDGRkZgCqnWwUp/4VMkozYEOGyfpxvJyI=)
                          15: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          16: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          17: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: GyLR/QHwPhyY/Mw//iSIMC6D6LSyoiqoWdxlgl+twJA=)
                          18: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          19: LtmQvCeXngTWhjl4vrk7lBmMAAY.roa (hash: 07LJKgW+ToL6JKQE9CSTTGnB271/hUwLN/v0haLSQsM=)
                          20: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          21: MT58lg9eWKgrSTzgyOlCfNMYS3I.roa (hash: Fxt/dM6FQs/0yDS2SZuJGJvWozr/ryCiCNJN6T2UU6E=)
                          22: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          23: PzsjLeZr9DjQo3N5QMvhtQ1h0Ew.roa (hash: 0GRyT1GG24ZrZgFK+QmgIFCK2bVtVSOTinEBybZmrZA=)
                          24: QM6X1fB-TaFMmYdhu0qCB5h8VbQ.roa (hash: Ngd2wVJacTdYkb5nSWSGB4QB9B9UNwbIqaNwsrZFbvU=)
                          25: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          26: RQgDDP8e04kHHU6LZ1uovMrm1ek.roa (hash: FVyJUW93zXQCQD7MWSXQwVQBQtgfQ7qFkav7ALewlsU=)
                          27: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          28: UMfGsYiVVaPqQLK16T2A06u0BEE.roa (hash: 07Lh23XMbUQQ60HsH+UK1VVt2KldYGYcfq4bp2sWOts=)
                          29: VwP4sEhAnyJ9XY0hDIug615dbvM.roa (hash: YNkePphkCgGe6LX9VHSmNOLJ3BRI8AowWy0k/uxHsSM=)
                          30: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          31: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          32: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          33: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          34: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          35: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          36: cBMHGs26YpfPFmzEGROlf-GzUm0.roa (hash: DegbaYXXnt5Np7swJiztfM7K+NouxTqUBNHxSEf5xy0=)
                          37: cDFhGHPcDqoireXeV-9PtxIsd_k.roa (hash: nKa53myk3XzTrnxdf7N5fszSAS/jw15fDZoWm2bNrZE=)
                          38: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          39: e5qzK7N-C80XP3WeSw_bPj_N2Jg.roa (hash: w/iO1ArMKyAfbI9CY1MySDVQWWQnJ1ofGwIzAiTc00E=)
                          40: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          41: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          42: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          43: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          44: kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa (hash: kbvypn6X1aEEM7QJLlIxGQRwXTb6E9CSMNuhK10B6oE=)
                          45: nWt3vrRbVc5qqQ8RYK9HkqDf95E.roa (hash: u2+7yozTQeMOtMONRXeBN03Oi3gmBQuRthSsXSMKmik=)
                          46: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          47: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          48: ppxFq9FW6SgGwTgswwgo7MDMvCo.roa (hash: GQrvIoWgSDHR2ZCWnUNN0M92xgtqibSSA7BIT9UwD8k=)
                          49: qY6ePJzknG48m3NnI41O99izBvw.roa (hash: BAwE8878XGl5akLabObqQeN53cC0JkNhYtz9Ax3AsmM=)
                          50: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          51: skvhhwXCE9XaF4GovY1LTU7fAzk.roa (hash: i8mqWts4QwtPmn2/cy0EpJD+o9HkLAtvYS+eI1qS5Rs=)
                          52: tueCs65KFYrYDAZt75DCyIoH5_M.roa (hash: VfVDYtNm0lmYABLfzcwupzuFE3TOuGzFZ9OgjMr/apw=)
                          53: us37SZ7RNUbaSudr0j73AHHye1o.roa (hash: KLr/YtrCbRT87T7LTeIIQHh5EghlDpEscckoXUC5tDs=)
                          54: yyZ4BjhyuKGwPCQ3341NkBnihfg.roa (hash: nPIB0Offdnq32YRjDSkJfRitOjlTYbdjLWvfwWGiQ7Q=)
                          55: zLeMuu07MdTctTW7KUuXe1fyuCo.roa (hash: 0fmbLbzJCCXmZbIYxh8zj5Peh65NTpmFnSh6FWhKUNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6b:dd:2b:3e:09:33:62:51:92:58:78:22:52:c7:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Sep  4 10:00:51 2026 GMT
            Not After : Sep  5 10:00:51 2026 GMT
        Subject: CN=efb5b46c12f81ae52761fc73366a900d703e27a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:4e:23:43:c2:7e:a8:47:3d:8c:99:08:c9:
                    e6:a7:7e:9d:53:bc:1d:76:aa:be:01:b2:22:b0:a0:
                    9d:b8:5c:83:fe:dd:e3:b6:ce:42:e9:5a:f6:de:4c:
                    28:af:a6:e1:2a:af:3e:6f:77:b4:27:f9:8c:cb:b6:
                    bc:c7:93:0c:1f:68:ff:4a:9b:ea:d8:62:21:4f:b0:
                    5e:b0:e4:e6:b1:d7:4e:7a:9c:00:a2:22:95:2f:a1:
                    8a:93:4c:b1:8c:b3:c7:82:27:71:1d:e3:9b:46:0a:
                    fe:10:f6:b8:3a:80:48:8d:36:4a:19:95:cd:61:a9:
                    8d:c4:be:e3:53:56:7a:30:12:ed:54:f0:7a:68:eb:
                    13:38:b5:dd:15:2d:7f:0c:01:78:5e:aa:d4:d7:a3:
                    83:60:d1:ea:eb:a3:f8:1e:81:04:da:4c:9d:40:a1:
                    2a:75:f7:ef:01:37:fe:d3:f7:93:e4:1f:57:61:f5:
                    97:ae:d5:56:e6:d6:b3:7e:6b:52:52:6c:50:91:7c:
                    e0:dd:6d:5f:a2:24:88:1c:0d:9d:02:3f:de:71:97:
                    29:87:6c:f0:6e:7a:d9:50:50:a8:16:d0:e6:6c:61:
                    7f:ae:ad:c8:65:52:65:84:26:38:9a:bc:1f:43:bc:
                    86:f5:7e:87:d5:76:41:13:bd:67:d5:8c:02:08:20:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B5:B4:6C:12:F8:1A:E5:27:61:FC:73:36:6A:90:0D:70:3E:27:A8
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:9c:5d:f9:26:9c:c3:a2:78:c2:36:b7:89:9c:5e:0d:d3:
         9a:33:72:f1:f8:da:9d:a0:54:77:ed:0d:31:a1:48:84:62:b5:
         4b:34:c1:ef:44:d9:94:03:7c:fa:45:d7:a8:2a:23:86:98:40:
         f5:f4:e0:c0:d5:c5:f3:b8:16:41:fd:4f:92:e0:64:32:45:41:
         6d:3e:c8:c7:63:e1:c7:ac:18:0f:3f:01:23:59:9a:5c:e0:60:
         d5:e3:4b:99:fd:7c:a6:02:ef:d5:05:9e:cc:26:42:0b:7b:ed:
         43:e3:67:dd:ea:2b:20:79:54:c2:c9:3b:1d:20:2b:03:5d:b9:
         f3:d4:2e:bb:1c:ee:cf:d2:db:b1:22:43:09:0b:72:c4:81:70:
         86:0a:42:ff:bd:fa:bc:ea:d9:64:3c:9a:b8:ca:15:ea:2a:ca:
         26:f8:2e:c9:17:f6:b4:a8:57:90:da:10:cb:07:ab:6d:c7:89:
         7e:2f:3c:96:dd:ce:9f:d8:5f:4e:02:1a:33:34:38:ac:c5:77:
         1c:b6:12:f5:56:5a:a3:32:b7:ce:53:d4:16:ea:92:b4:cd:ed:
         09:8c:9a:2a:ad:42:78:e7:66:a9:1d:d8:b0:87:40:54:a7:4e:
         c6:a4:f9:39:66:b1:25:df:28:cc:44:86:04:03:a6:be:22:30:
         12:7b:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:04 2026 by rpki-client