Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          40Dl76iLZN1Zl6VXQoE16Fb1kOuTP6SisuVD5Io0gc0=
Subject key identifier:   CF:3A:7A:1C:FA:8E:12:BA:1F:03:35:8A:F3:8E:4A:F7:AF:67:BD:C3
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019D26963615D38D9F8FC5DE45DDBED3C8A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          16C7
Signing time:             Wed 25 Mar 2026 20:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:11 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          3: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          4: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          5: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          6: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          7: 93CL9mQGEWax1QikLQ6V9ExiTNk.roa (hash: RmcpnnrpcyJuZnzhTJ77WNEZVKMgPMNB4opHx2SyWD0=)
                          8: B8B9K97Hxo9p2HPdq3X7_bUrNOc.roa (hash: NIA5ys2Jl6RcIrrYViu7257LN1PDUAXmE2FRelr4fiI=)
                          9: BmmyqjzhhXCXtNHXQfS0o58DPKI.roa (hash: DmbfSz+gKQgjE19mwt2GeyXLjwNpk6u4gHjc47wtCuE=)
                          10: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          11: EAR4BBUJwroFmzGZQ2Mytm2ASro.roa (hash: is5iTv7obnEG1+nGtMkK9nLgnqgMn1vZx4ZRTT8qnow=)
                          12: EnzizIDwaqisiYlqmmlt8YCsE4o.roa (hash: 9KfPR2jxj+JDGRkZgCqnWwUp/4VMkozYEOGyfpxvJyI=)
                          13: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          14: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          15: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: HjWyhMuLO/pIo6iVaH3nularlIC9ncsMPk7RoLnCRAI=)
                          16: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          17: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          18: O3vmQkWtQ8jA_byW0p80azS_bm0.roa (hash: qGR6plYOUEV1nUD7R/C1+fRecdZczYOW+JuIU7iIVQ4=)
                          19: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          20: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          21: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          22: UMfGsYiVVaPqQLK16T2A06u0BEE.roa (hash: 07Lh23XMbUQQ60HsH+UK1VVt2KldYGYcfq4bp2sWOts=)
                          23: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          24: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          25: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          26: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
                          27: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          28: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          29: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          30: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          31: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          32: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          33: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          34: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          35: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          36: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          37: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          38: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          39: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
                          40: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          41: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          42: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          43: tueCs65KFYrYDAZt75DCyIoH5_M.roa (hash: VfVDYtNm0lmYABLfzcwupzuFE3TOuGzFZ9OgjMr/apw=)
                          44: vNjUtTl5TDF7FLt_LUcWXa6UMv0.roa (hash: dq4TnmZiEM7MrzwPhSEuA5J/9VcYxfK23x7Z1EsSn4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:36:15:d3:8d:9f:8f:c5:de:45:dd:be:d3:c8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Mar 25 20:01:11 2026 GMT
            Not After : Mar 26 20:01:11 2026 GMT
        Subject: CN=cf3a7a1cfa8e12ba1f03358af38e4af7af67bdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:b4:54:bb:08:59:c2:36:49:64:3d:54:ca:
                    78:79:ac:69:ac:fd:44:6c:cc:44:e7:87:50:7d:28:
                    dd:d6:a2:5c:65:b3:39:9b:f6:d4:29:e3:9a:c6:37:
                    59:67:ff:11:5f:bb:83:a0:7d:47:ac:50:98:3e:7f:
                    bd:8d:82:d3:8e:43:71:df:62:92:14:c7:8c:c9:20:
                    5d:ca:41:3f:1b:20:73:08:90:4e:98:af:34:f6:cb:
                    be:70:db:84:f9:fe:ea:b8:a5:e0:26:e9:7a:f5:ca:
                    73:ad:e2:b1:c7:fb:88:55:f1:0f:35:84:cf:db:44:
                    6d:f7:1d:6b:aa:54:9e:29:25:94:9f:f1:34:bd:49:
                    bb:b7:e4:dd:99:97:42:fe:8b:24:6a:5f:91:85:0c:
                    aa:9e:1e:8a:80:70:62:ac:ad:15:8c:05:6b:c8:e7:
                    d8:43:ab:0b:c1:f9:1d:ac:2a:c7:a8:cf:d7:6f:35:
                    65:82:46:2f:94:50:32:53:4e:86:bd:e6:9d:4a:d6:
                    35:52:61:90:85:20:4c:0f:bd:85:b8:78:22:0c:b3:
                    eb:61:44:89:a6:0b:d2:24:84:54:80:e7:90:2e:68:
                    4f:d0:d0:74:c9:61:df:97:05:db:a7:20:f9:1e:26:
                    e1:a9:38:de:e7:4d:61:81:38:ef:9f:c6:34:ca:61:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:7A:1C:FA:8E:12:BA:1F:03:35:8A:F3:8E:4A:F7:AF:67:BD:C3
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:a1:14:34:c0:d2:e3:b0:b2:cd:96:d3:73:52:03:85:ad:
         75:ae:2c:b2:a2:55:14:89:65:bd:ba:c4:53:4b:08:f6:c0:0e:
         e9:c8:86:24:85:c9:a3:0f:ac:d6:6c:95:13:b4:0b:65:ed:ab:
         fe:a2:43:ad:76:55:ae:03:05:c4:96:70:fc:b0:f4:27:c6:77:
         92:42:9c:f9:4d:47:5c:3e:8f:e9:2b:9b:be:ab:14:d6:ea:d1:
         c5:a3:1f:fe:7b:2a:07:88:b9:8a:d8:d1:2e:fa:2b:29:bf:85:
         a4:61:59:fc:fa:54:71:fa:74:b8:93:5f:45:6e:0b:ba:3d:88:
         6e:00:e8:11:2e:ad:56:e9:f6:a6:33:2a:fb:29:9f:62:9f:d1:
         3b:42:2a:11:1b:77:c4:95:88:68:0f:41:34:b1:87:d1:11:d8:
         54:e9:cc:87:b4:83:a2:ed:a6:d8:e4:ad:29:93:68:43:d2:5c:
         60:1a:59:6d:80:d1:c1:b8:2b:1c:f7:bb:2b:1d:27:43:06:23:
         65:33:7c:7e:ed:cf:11:9c:0b:d0:d4:00:82:de:d8:15:74:92:
         8e:2c:5d:f9:45:b1:25:48:6f:5e:40:ac:e6:79:63:6c:b9:79:
         18:52:11:3d:a4:ba:a0:48:c0:9f:ac:80:33:4d:35:f7:7f:a2:
         e0:0c:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----