Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          /oSF81C95qUnmAyq+eAbgpOELmwPbIP5PkOM8QEoOw0=
Subject key identifier:   2C:E9:BE:AD:DE:ED:3A:46:F8:CA:D4:DD:AA:B9:07:16:9A:2C:78:97
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019EBEB618C2D219649FEFA7E7B00F61E579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          17B1
Signing time:             Sat 13 Jun 2026 02:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:05 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 1-R3TJEB1D957QD1tYOh6D052f5Q.roa (hash: bF0D4wZ7s3Qqr3mXkvQEOoRSdwhhsjFFJKgc7cqZo8s=)
                          3: 1-XL-4073u-zh_XXTY534GBaFPZs.roa (hash: zvo47mjfhVTGrufaPlWjDiOdGjG6ZmOQEvvtHmB2jJQ=)
                          4: 324xQMHqfVn48kcFlWiVdffHgTs.roa (hash: qXkCqpcT0IZv6rheVcs5oNhxEGv8i/COJn1bP4KXOwU=)
                          5: 3d2Ht-otvuauK7s8UxkULNhWE-g.roa (hash: 3zvG1y9f3qhWg9iuoXlq+LzsxhzqoldIBGOINWfp9c4=)
                          6: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          7: 41DwvvTFD9Qs2hnrDdBKBcR7l1Q.roa (hash: BMkkI81LCqcEqnXuvm+HyIe94CPXRLmId7uTf9DMF1k=)
                          8: 7B9hHTypErB06lBzHQxbWrURzMU.roa (hash: CfdzUFGDwWkqGdXZ5dFsj5NYowB9suqWoVeJooBp1f0=)
                          9: 7R2WYytqwc1Iu4W7Z-8kvbu6mSs.roa (hash: lUdhqMnfxqWdde3FikieN8vBn0WHZVuTvZDOtJataGI=)
                          10: 7jZAi51aHExWPZHg8Bwl9g1fDmo.roa (hash: TNKFGF2TYtoFuGPgkD5XD7N/fcDVAQd/RPU9vBC0xJw=)
                          11: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          12: 93CL9mQGEWax1QikLQ6V9ExiTNk.roa (hash: RmcpnnrpcyJuZnzhTJ77WNEZVKMgPMNB4opHx2SyWD0=)
                          13: 9ufb-YMgSk7h2QizE8n86JdEfWM.roa (hash: BX1YdFPar86ayTV0Ftj90LWAviFt2qF3rhtqTocI99o=)
                          14: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          15: EAR4BBUJwroFmzGZQ2Mytm2ASro.roa (hash: is5iTv7obnEG1+nGtMkK9nLgnqgMn1vZx4ZRTT8qnow=)
                          16: EnzizIDwaqisiYlqmmlt8YCsE4o.roa (hash: 9KfPR2jxj+JDGRkZgCqnWwUp/4VMkozYEOGyfpxvJyI=)
                          17: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          18: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          19: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: 92DZnYtovSSLfKiv/K0YUBBLLiLPdae7XtCZPAoy68o=)
                          20: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          21: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          22: MT58lg9eWKgrSTzgyOlCfNMYS3I.roa (hash: Fxt/dM6FQs/0yDS2SZuJGJvWozr/ryCiCNJN6T2UU6E=)
                          23: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          24: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          25: SieC0IyKC-s4NPMTRe3DmUB4FlU.roa (hash: PHIVyy53IZ8dhds+WPFhb109SCgpqIxERR2QN3DJoJI=)
                          26: UMfGsYiVVaPqQLK16T2A06u0BEE.roa (hash: 07Lh23XMbUQQ60HsH+UK1VVt2KldYGYcfq4bp2sWOts=)
                          27: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          28: XFj-fnhFgawupIWxTj-icBAYgOM.roa (hash: vmRxUgUoCTCgRbDmIVkL6D/kfl6/QkJJjMgqLB+AW8k=)
                          29: XpObaqOWrCgETRvy_Bc1F4Kt3cY.roa (hash: hHHWHsAMU0H71yMmUBQl+1r/xKx+q1J6OVkKKGOUgc8=)
                          30: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          31: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          32: bQQuskf_Gdw4DO36Hp_jpIO7obs.roa (hash: iHc9KJJ7h5KMbS9+RDpsi3zVAhZamVfT5BEtYu5oO3E=)
                          33: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          34: e5qzK7N-C80XP3WeSw_bPj_N2Jg.roa (hash: w/iO1ArMKyAfbI9CY1MySDVQWWQnJ1ofGwIzAiTc00E=)
                          35: fBBdkc9OcFL9IFNGRsTh7kzJnu8.roa (hash: 3718oBliIf8ahxlcxxTMJ4qT3erkgc0V2HhmRL6/2UY=)
                          36: h9u4DfipobReXuEiWzWzM5DyqDg.roa (hash: EkmpfqduZILDOkjZmc9IOhDZh2tXHoeaKKFboeH+zxA=)
                          37: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          38: i6c0fz52t6bu--A_rRnfITTUlCo.roa (hash: KAIju8KEB8xo308kFMUSGZu/p5Ia6QPecoz7gKo7AxU=)
                          39: kwsJ9mKNbzP38_uBUbgeN1xPfUk.roa (hash: kbvypn6X1aEEM7QJLlIxGQRwXTb6E9CSMNuhK10B6oE=)
                          40: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          41: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          42: ppxFq9FW6SgGwTgswwgo7MDMvCo.roa (hash: GQrvIoWgSDHR2ZCWnUNN0M92xgtqibSSA7BIT9UwD8k=)
                          43: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          44: tueCs65KFYrYDAZt75DCyIoH5_M.roa (hash: VfVDYtNm0lmYABLfzcwupzuFE3TOuGzFZ9OgjMr/apw=)
                          45: us37SZ7RNUbaSudr0j73AHHye1o.roa (hash: KLr/YtrCbRT87T7LTeIIQHh5EghlDpEscckoXUC5tDs=)
                          46: w-8JV9tzQXIKEFhT7_r_amW94Ek.roa (hash: +7GXZ8dLoWSUF6T+1w1xmCDurIJPtnKH2f0SGYLIe/U=)
                          47: zLeMuu07MdTctTW7KUuXe1fyuCo.roa (hash: 0fmbLbzJCCXmZbIYxh8zj5Peh65NTpmFnSh6FWhKUNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:18:c2:d2:19:64:9f:ef:a7:e7:b0:0f:61:e5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jun 13 02:01:05 2026 GMT
            Not After : Jun 14 02:01:05 2026 GMT
        Subject: CN=2ce9beaddeed3a46f8cad4ddaab907169a2c7897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:9e:34:7a:a9:81:2b:f5:80:41:7f:a6:87:
                    8e:ee:6d:3b:a0:7a:77:01:90:cb:68:a7:8a:c6:73:
                    11:71:9f:cd:ae:20:1d:0e:d0:a9:a0:34:a8:80:07:
                    14:ec:1a:9e:c7:c1:2d:30:23:e0:11:8a:2e:66:20:
                    eb:18:40:e2:a9:a5:80:d5:07:76:f6:a6:43:0a:dd:
                    2d:93:4c:31:d5:ad:2a:ef:82:11:07:bf:cf:9e:2c:
                    be:cb:0b:ff:3e:c6:a2:a9:3c:0e:be:cc:91:db:35:
                    3a:a4:82:73:72:3d:a7:db:05:73:8e:48:16:ee:be:
                    a4:5c:92:62:8f:b4:85:c8:57:03:e9:41:6f:50:b5:
                    64:9a:61:23:52:01:ee:f3:33:55:e5:d1:75:e6:3c:
                    c1:5a:c3:22:99:fa:07:d0:b5:12:59:a9:9c:db:d6:
                    94:d6:2a:b3:e7:95:68:22:fd:55:23:e8:48:57:3a:
                    98:a7:c1:40:1f:24:ff:33:4f:82:54:03:5c:40:96:
                    75:b9:63:6e:ff:76:5a:8b:99:55:5c:cf:89:1a:39:
                    3c:67:7e:ef:20:28:33:94:a9:9d:9c:1d:d8:58:9e:
                    ac:16:6a:98:41:21:53:b0:13:09:08:59:6f:23:b3:
                    e1:05:f0:1e:85:60:fc:40:00:fa:3e:a3:6c:e6:8f:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:BE:AD:DE:ED:3A:46:F8:CA:D4:DD:AA:B9:07:16:9A:2C:78:97
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:e2:ad:d9:c9:ec:d1:82:8d:f7:11:5a:e0:27:32:96:fb:
         5e:16:e5:e8:1e:0d:59:3a:8f:00:3c:cd:78:57:0f:53:c8:61:
         f3:32:67:9e:46:87:77:e3:53:40:e5:35:2e:30:32:af:72:1d:
         12:53:12:f6:86:25:3d:f3:c5:30:d2:75:f9:fe:6e:db:97:10:
         e6:7a:61:a6:a2:32:5e:e0:b7:4f:ea:01:5c:9a:7d:8b:d0:79:
         11:16:85:2a:28:b5:5e:49:5f:3b:24:08:fa:fb:02:a4:58:db:
         55:87:c6:39:b7:bd:a5:0c:fc:79:41:bf:45:87:d6:1b:d7:97:
         d2:a1:df:0e:6a:ce:61:28:e8:0a:74:09:f0:14:8f:26:d0:1e:
         86:04:46:df:fa:d4:a6:7a:2b:7e:5d:31:f1:b9:3d:63:73:6d:
         94:c2:4c:82:f9:3b:fb:16:50:3d:f2:85:db:76:cc:44:2e:75:
         9d:74:d7:dd:0b:62:c5:47:86:a8:86:21:bc:59:7c:7a:5e:5c:
         f8:7c:48:d6:40:d9:fb:10:b6:08:4f:0d:7f:34:ca:ee:d0:35:
         bb:53:01:c7:60:70:a7:db:f1:c8:c3:0c:e2:c2:2c:20:7d:10:
         a6:22:e2:db:20:6f:33:2b:83:79:3e:99:72:26:73:5d:ff:44:
         ce:dc:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----