Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          JEaEea60NbkKKCpwyqpxqC2ipF65fJY38MElatb3/rk=
Subject key identifier:   7A:25:6B:1C:0D:F3:E6:E7:A9:B7:86:A5:62:C5:04:36:54:16:8E:7A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019DA9439A4AEF533A9EEA62D815819F5816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          1712
Signing time:             Mon 20 Apr 2026 05:01:13 +0000
Manifest this update:     Mon 20 Apr 2026 05:01:13 +0000
Manifest next update:     Tue 21 Apr 2026 05:01:13 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          3: 1-XL-4073u-zh_XXTY534GBaFPZs.roa (hash: zvo47mjfhVTGrufaPlWjDiOdGjG6ZmOQEvvtHmB2jJQ=)
                          4: 1-ze4VQplk5K4y3vyLV1ujVvxMHo.roa (hash: KQsxg7CWJe48krM36H81ltty4z6cv+JoL5n0P8hAaFU=)
                          5: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          6: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          7: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          8: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          9: 93CL9mQGEWax1QikLQ6V9ExiTNk.roa (hash: RmcpnnrpcyJuZnzhTJ77WNEZVKMgPMNB4opHx2SyWD0=)
                          10: 9AVi0AytA6eY79hA8YMYSG3Zp8o.roa (hash: YrDqeleif3YZRdG0sXrE36Oxmwd3p/hjX0eOepoBnJg=)
                          11: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          12: EAR4BBUJwroFmzGZQ2Mytm2ASro.roa (hash: is5iTv7obnEG1+nGtMkK9nLgnqgMn1vZx4ZRTT8qnow=)
                          13: EnzizIDwaqisiYlqmmlt8YCsE4o.roa (hash: 9KfPR2jxj+JDGRkZgCqnWwUp/4VMkozYEOGyfpxvJyI=)
                          14: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          15: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          16: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: pfGZj86qvbFFxvMil4BA2d4lFoDyRC3GYLXfnWESN3Q=)
                          17: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          18: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          19: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          20: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          21: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          22: UMfGsYiVVaPqQLK16T2A06u0BEE.roa (hash: 07Lh23XMbUQQ60HsH+UK1VVt2KldYGYcfq4bp2sWOts=)
                          23: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          24: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          25: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          26: XrP6qSkiNVV1PTaGIr40AvlDW4A.roa (hash: ORN5Y9Rn2QOP1Z0IonWoCU185ATiq2+ea1Af9X2nn+Y=)
                          27: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          28: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          29: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          30: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          31: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          32: e5qzK7N-C80XP3WeSw_bPj_N2Jg.roa (hash: w/iO1ArMKyAfbI9CY1MySDVQWWQnJ1ofGwIzAiTc00E=)
                          33: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          34: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          35: fYHBkTuWSTexQ8ISFSo2LYZxa-A.roa (hash: yLjYtTEZVY2nRmy54waV6hOpdJWraZ+6NODmPwHGQQE=)
                          36: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          37: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          38: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          39: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          40: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          41: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          42: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          43: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          44: tueCs65KFYrYDAZt75DCyIoH5_M.roa (hash: VfVDYtNm0lmYABLfzcwupzuFE3TOuGzFZ9OgjMr/apw=)
                          45: vqxzXB44hUs0RUDOgbgowxjjxtA.roa (hash: 1sxdbVQkq0D+I5ITMd1NWYN6+uOz3z21dA63+JaajaI=)
                          46: zLeMuu07MdTctTW7KUuXe1fyuCo.roa (hash: 0fmbLbzJCCXmZbIYxh8zj5Peh65NTpmFnSh6FWhKUNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a9:43:9a:4a:ef:53:3a:9e:ea:62:d8:15:81:9f:58:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Apr 20 05:01:13 2026 GMT
            Not After : Apr 21 05:01:13 2026 GMT
        Subject: CN=7a256b1c0df3e6e7a9b786a562c5043654168e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:5b:1f:f7:d7:b4:b8:40:3a:e9:1f:4c:62:
                    1e:ab:88:13:8b:c3:48:54:15:89:b1:c6:4e:80:bc:
                    9a:4a:17:d1:dd:1b:55:75:fd:09:3b:e2:2c:27:b0:
                    bd:ba:af:e6:e7:7b:21:85:fb:98:14:2e:66:aa:24:
                    e3:00:21:6a:6a:b9:3f:59:86:cc:3d:24:24:31:6a:
                    0a:2c:23:24:07:72:9a:80:b6:be:a3:d8:6e:bf:e3:
                    72:f9:d0:6c:d6:e1:29:c0:28:0f:bb:20:c2:22:b6:
                    ab:8d:cf:ef:84:80:72:55:cd:0c:ff:bd:aa:f9:89:
                    f9:13:1e:50:96:23:9d:88:bc:cd:ae:a2:ad:22:0f:
                    ca:75:d7:80:02:ba:df:5e:7d:f2:c4:30:98:0f:e2:
                    14:8e:a1:4a:8a:99:22:c0:d3:61:96:95:b7:2b:24:
                    3f:dd:91:6d:1d:45:a5:8e:e2:cc:1b:78:da:41:6f:
                    e0:15:dc:50:d0:88:73:22:f9:67:bb:de:b4:25:9a:
                    39:39:4e:e4:f6:20:1b:35:ea:ed:fb:87:f5:b0:25:
                    73:df:80:74:e9:fa:cf:56:cb:ea:ff:23:70:72:8d:
                    41:ba:82:74:26:eb:b2:62:7a:2e:a6:15:04:60:9b:
                    d2:47:97:b5:bb:4e:d4:f2:d9:9a:1d:78:18:78:12:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:6B:1C:0D:F3:E6:E7:A9:B7:86:A5:62:C5:04:36:54:16:8E:7A
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:32:6b:57:92:25:7e:00:78:6a:3a:d5:ab:c2:2a:8d:cc:
         ca:e6:f1:95:4d:e9:f0:72:f9:79:4e:83:65:8a:f0:52:96:05:
         cb:75:1c:37:a0:d0:ad:b2:42:29:0f:1c:e7:c2:4d:e9:de:84:
         f8:26:a4:02:c2:21:d3:7a:28:9b:fe:eb:bc:af:d3:45:e0:07:
         de:07:cd:dd:94:af:62:d3:c3:5a:81:f2:fd:12:28:52:d2:61:
         7b:3e:c9:c3:2b:5e:32:1f:87:d0:81:d2:cf:14:f8:a4:8f:db:
         34:04:ec:cd:05:b9:84:bb:2d:9c:29:b4:c4:00:84:59:3c:a6:
         c4:5c:63:db:2d:e3:15:31:c5:df:ed:b8:de:cf:22:d2:01:93:
         24:53:61:1e:15:42:17:8d:99:24:f3:74:64:df:1c:26:32:86:
         6b:e5:1e:26:c6:d8:1e:27:cc:bf:b6:44:aa:61:75:22:f8:ba:
         b8:67:08:e1:51:06:74:90:38:55:ce:26:d6:d2:19:d6:bd:6b:
         a8:52:a0:77:e5:f2:90:1e:27:0a:07:08:5e:d6:eb:3b:52:da:
         ed:54:3a:04:8f:30:02:87:29:b7:84:ea:92:26:06:d2:81:80:
         1a:06:d7:de:9b:0c:50:90:13:ef:d1:fe:79:89:2e:90:f2:08:
         fc:18:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----