Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          3z9HMN/FeWi1XglwyOZssBF+UjP3/u8LjiklflWgkUI=
Subject key identifier:   CF:A8:AC:F2:8F:58:98:90:2E:A7:1F:E3:30:3A:ED:53:FE:87:20:0B
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019FA7F4D0ED1F048B2B59AE8CE668F88AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          1832
Signing time:             Tue 28 Jul 2026 09:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 09:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 09:01:06 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          3: 1-XL-4073u-zh_XXTY534GBaFPZs.roa (hash: zvo47mjfhVTGrufaPlWjDiOdGjG6ZmOQEvvtHmB2jJQ=)
                          4: 324xQMHqfVn48kcFlWiVdffHgTs.roa (hash: qXkCqpcT0IZv6rheVcs5oNhxEGv8i/COJn1bP4KXOwU=)
                          5: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          6: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          7: 41DwvvTFD9Qs2hnrDdBKBcR7l1Q.roa (hash: BMkkI81LCqcEqnXuvm+HyIe94CPXRLmId7uTf9DMF1k=)
                          8: 5N2VvwkTcgsGAOGKbOL_VV-8kR4.roa (hash: ZF4zTTG6l9ahkoRBvENIyOBgudpdQH+vtTf8PoooEZ4=)
                          9: 7B9hHTypErB06lBzHQxbWrURzMU.roa (hash: CfdzUFGDwWkqGdXZ5dFsj5NYowB9suqWoVeJooBp1f0=)
                          10: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          11: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          12: 93CL9mQGEWax1QikLQ6V9ExiTNk.roa (hash: RmcpnnrpcyJuZnzhTJ77WNEZVKMgPMNB4opHx2SyWD0=)
                          13: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          14: EAR4BBUJwroFmzGZQ2Mytm2ASro.roa (hash: is5iTv7obnEG1+nGtMkK9nLgnqgMn1vZx4ZRTT8qnow=)
                          15: EnzizIDwaqisiYlqmmlt8YCsE4o.roa (hash: 9KfPR2jxj+JDGRkZgCqnWwUp/4VMkozYEOGyfpxvJyI=)
                          16: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          17: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          18: HRM1s9SgvZathu2agrprhVUWRts.roa (hash: 7clgaQTtrxMjuVUu+JxpUVu7WEDf7lrVA+v31hUWVh8=)
                          19: I2kble42uWRbRaROS55raDX21HA.roa (hash: RiURHh1pukeP66jHVzu3Tg4saWCNGpqsq64VkU4i2zc=)
                          20: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: 1RWns2sljYQxOufMrLGwu48CApNsvhD5TeF1irSiCx8=)
                          21: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          22: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          23: MT58lg9eWKgrSTzgyOlCfNMYS3I.roa (hash: Fxt/dM6FQs/0yDS2SZuJGJvWozr/ryCiCNJN6T2UU6E=)
                          24: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          25: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          26: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          27: UMfGsYiVVaPqQLK16T2A06u0BEE.roa (hash: 07Lh23XMbUQQ60HsH+UK1VVt2KldYGYcfq4bp2sWOts=)
                          28: Vjsg4GKxUQqtxQeVu_4A7w2dyiY.roa (hash: BzuZbj4A1TctMQ0+feeDZadIKwWRebAO7nAI3IdZkos=)
                          29: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          30: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          31: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          32: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          33: _QNTykgEDm1B9jfgvmsfxHChgzk.roa (hash: PaJMKUvz2xZUAH58M1x2MSx2nnk6tacdqcVH/ruO+0A=)
                          34: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          35: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          36: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          37: e5qzK7N-C80XP3WeSw_bPj_N2Jg.roa (hash: w/iO1ArMKyAfbI9CY1MySDVQWWQnJ1ofGwIzAiTc00E=)
                          38: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          39: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          40: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          41: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          42: kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa (hash: kbvypn6X1aEEM7QJLlIxGQRwXTb6E9CSMNuhK10B6oE=)
                          43: nWt3vrRbVc5qqQ8RYK9HkqDf95E.roa (hash: u2+7yozTQeMOtMONRXeBN03Oi3gmBQuRthSsXSMKmik=)
                          44: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          45: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          46: ppxFq9FW6SgGwTgswwgo7MDMvCo.roa (hash: GQrvIoWgSDHR2ZCWnUNN0M92xgtqibSSA7BIT9UwD8k=)
                          47: qUW-rvtusWiU9m40yufHRHqReOU.roa (hash: l+hgs978ljFQtWA/6WpMCTbG4iRvPe6O/e/IYHJ8VCI=)
                          48: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          49: tueCs65KFYrYDAZt75DCyIoH5_M.roa (hash: VfVDYtNm0lmYABLfzcwupzuFE3TOuGzFZ9OgjMr/apw=)
                          50: us37SZ7RNUbaSudr0j73AHHye1o.roa (hash: KLr/YtrCbRT87T7LTeIIQHh5EghlDpEscckoXUC5tDs=)
                          51: yV6h6g8VjrUh68Bki8auNPepq9c.roa (hash: U10jVLAGUKzKkILiaP8XQG1ps0Dkg6drpeXmhxDaJd0=)
                          52: zLeMuu07MdTctTW7KUuXe1fyuCo.roa (hash: 0fmbLbzJCCXmZbIYxh8zj5Peh65NTpmFnSh6FWhKUNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:d0:ed:1f:04:8b:2b:59:ae:8c:e6:68:f8:8a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jul 28 09:01:06 2026 GMT
            Not After : Jul 29 09:01:06 2026 GMT
        Subject: CN=cfa8acf28f5898902ea71fe3303aed53fe87200b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:fc:08:c8:56:8e:91:d8:90:fc:96:e9:90:
                    fd:ce:8e:f1:8d:22:3c:6b:42:25:ca:88:8a:9f:3c:
                    d9:cc:a7:d3:0a:67:98:ab:02:3b:9a:b3:1b:52:90:
                    ae:dc:f6:34:96:55:f2:6f:a5:8b:90:19:f7:3a:d8:
                    bf:ef:f7:43:44:b2:a0:02:8a:d9:77:93:04:41:24:
                    f7:93:90:b2:82:cf:7c:0f:cf:a1:0c:a0:b3:62:b2:
                    9a:34:e5:6b:2b:cd:e2:6d:39:ec:d1:72:56:37:ab:
                    8b:35:aa:48:18:39:32:96:0b:dc:17:d4:ac:e6:c4:
                    0b:a6:59:8d:34:e5:27:9f:60:b7:b9:55:d1:64:02:
                    e6:88:32:f6:51:f1:51:76:c7:55:0f:a8:30:68:b0:
                    95:c0:17:c7:48:b8:7c:ee:61:ca:1b:54:e0:23:15:
                    b9:79:04:41:ea:e5:89:34:7b:16:f9:ff:cb:ba:60:
                    2c:55:75:b1:00:99:1c:a9:08:d3:4b:bd:3d:5b:8d:
                    28:12:3d:72:7b:a3:a3:aa:36:fd:9a:14:55:6e:d1:
                    3a:f0:35:b2:a8:26:3b:81:c6:fd:16:e2:b8:ab:6f:
                    e6:d5:eb:4b:3e:dd:7d:d2:4a:40:61:53:77:71:7e:
                    56:3b:95:5e:1c:e4:e6:36:a1:48:44:d4:a2:27:61:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:AC:F2:8F:58:98:90:2E:A7:1F:E3:30:3A:ED:53:FE:87:20:0B
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:73:11:c8:62:6b:dd:58:97:87:6b:41:20:ee:8a:04:6d:f0:
         38:09:ad:0f:94:68:c8:10:6a:78:22:89:bc:e7:4a:96:8f:9a:
         97:47:55:ee:4f:29:6d:06:d0:af:be:3d:58:18:fb:80:cd:4f:
         11:5c:d7:f6:6d:45:7e:6e:9a:44:c8:e6:45:11:c8:24:6a:f1:
         6b:eb:06:0e:df:12:2c:9a:07:d4:0c:06:7f:2a:2f:28:c2:2c:
         d4:f4:db:57:c3:e8:77:0a:4e:52:a5:49:58:ce:52:a8:97:b7:
         5e:6b:6f:65:19:fa:80:f1:67:bb:4a:31:f2:33:3b:5b:34:8a:
         1f:0a:8e:3c:b4:8c:68:b1:e8:ac:ec:22:6d:65:79:b8:cb:a1:
         9b:5a:1a:30:fc:5d:da:7a:31:26:6f:af:64:dd:ea:03:31:87:
         4f:02:cc:35:02:29:58:aa:b3:3e:5f:a9:af:3f:4f:76:dd:23:
         d4:88:5e:14:48:79:ce:cf:b7:00:20:4c:58:bd:1a:da:42:12:
         ed:94:a7:db:f6:8e:1b:d6:e7:d7:c5:53:65:92:34:08:a9:90:
         b0:87:64:07:b9:6c:4d:1c:d2:6d:b6:83:a2:48:ae:5f:c0:7e:
         9b:ab:20:6c:46:ea:17:d0:d4:e4:7e:f8:18:25:e9:d1:cc:20:
         41:12:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----