Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
File:                     Cx_IbXySo01haTZCvs_-mgnkq5M.mft (raw, json)
Hash identifier:          LID2Ge9aswaaXpYqZgpsIlmkuiEdADy+7uPg7DM0JuA=
Subject key identifier:   06:F6:05:D1:E1:37:EA:3C:37:8A:5D:73:8D:DC:E4:6D:3D:DB:2F:02
Authority key identifier: 0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93
Certificate issuer:       /CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
Certificate serial:       01A15D0D4B45DD6FC040E2D4F9A28EDBA8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft
Manifest number:          012E
Signing time:             Wed 21 Oct 2026 06:01:54 +0000
Manifest this update:     Wed 21 Oct 2026 06:01:54 +0000
Manifest next update:     Thu 22 Oct 2026 06:01:54 +0000
Files and hashes:         1: Cx_IbXySo01haTZCvs_-mgnkq5M.crl (hash: DncN7uUWGifoju1kknYC0CYG/G3c0HvDlTyRdDX1M5Y=)
                          2: Sh2PEP2-MbPB0IM3ViP0tnARGnw.roa (hash: aLTyx16ru8CGVowWY4gCMQ3X+iZjRgCKx74BRuePAjI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:0d:4b:45:dd:6f:c0:40:e2:d4:f9:a2:8e:db:a8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1fc86d7c92a34d61693642becffe9a09e4ab93
        Validity
            Not Before: Oct 21 06:01:54 2026 GMT
            Not After : Oct 22 06:01:54 2026 GMT
        Subject: CN=06f605d1e137ea3c378a5d738ddce46d3ddb2f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:e8:7e:b2:00:8c:d7:bf:41:bf:6e:f6:34:
                    68:7f:93:f1:ae:0a:ea:72:e2:d4:67:5e:e4:47:eb:
                    93:c5:c7:b1:3b:fb:97:57:31:04:24:d8:f7:17:3f:
                    08:38:d5:f5:da:6f:59:90:e0:49:13:b8:cb:2a:b6:
                    e4:08:25:70:41:1f:c2:27:1f:f8:0e:49:88:5a:ea:
                    5d:dd:97:2f:05:eb:ea:79:7d:ef:fa:d1:e6:4c:b2:
                    0e:79:0d:d4:cd:15:91:96:bc:9e:df:a0:a1:e5:26:
                    aa:38:71:27:a9:8b:3e:4c:79:d3:1b:ac:83:e4:6e:
                    14:87:5e:b3:bd:22:2c:de:05:4f:16:4b:28:62:31:
                    d2:7a:51:db:3e:07:bf:ac:f2:0b:c0:36:a5:a6:b2:
                    de:55:52:66:1b:b6:a6:40:8c:1d:88:c0:28:70:ef:
                    b2:84:15:b6:8c:14:f5:70:60:33:1d:ab:ad:20:f4:
                    78:4b:92:50:4b:76:e0:33:38:19:6c:08:d1:b9:2b:
                    b3:d3:c9:31:48:fc:c3:f2:c7:95:fe:fe:48:f1:c1:
                    96:30:ef:72:59:fd:17:cd:ec:dc:bb:34:16:5e:cf:
                    5a:b8:f1:90:02:52:11:d3:48:1c:81:63:ed:d0:2c:
                    d0:36:86:f7:1d:a6:d1:f2:ca:8c:d6:d5:fc:93:ce:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:05:D1:E1:37:EA:3C:37:8A:5D:73:8D:DC:E4:6D:3D:DB:2F:02
            X509v3 Authority Key Identifier:
                keyid:0B:1F:C8:6D:7C:92:A3:4D:61:69:36:42:BE:CF:FE:9A:09:E4:AB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx_IbXySo01haTZCvs_-mgnkq5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/Cx_IbXySo01haTZCvs_-mgnkq5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:18:a6:6a:fd:5e:4b:dc:e1:21:9e:77:7c:35:7c:d5:40:
         a7:ba:84:c6:d8:6b:c4:60:4a:08:2f:f7:ae:5c:75:5c:a7:4d:
         6a:22:28:92:f1:7c:ad:05:16:51:a0:f4:93:08:0e:19:fb:12:
         aa:ec:38:37:d2:38:2b:6e:4f:e0:a4:66:83:22:82:84:1c:8a:
         af:31:95:76:02:54:1b:22:6d:26:d0:2c:76:51:43:2c:1b:c2:
         cf:9f:85:a0:cc:c9:a0:71:30:1a:ce:35:eb:db:bb:98:11:67:
         15:52:fc:18:e8:3f:19:f5:57:14:be:57:b4:dc:e2:b1:86:81:
         a0:50:72:0e:22:0a:15:e0:98:4f:84:3a:d3:99:dd:7e:53:ca:
         42:f7:8a:74:33:b2:26:74:f2:0e:29:8f:91:c5:03:e1:0b:a4:
         f7:de:ec:00:a8:d3:ec:5a:4a:b2:3d:96:52:8b:86:33:e8:ce:
         56:43:6f:80:1a:e5:8b:07:08:ec:c8:6a:17:a8:2a:08:00:43:
         00:58:06:a3:73:a4:05:3d:8f:d2:2e:1b:06:52:f2:3f:59:69:
         f1:ad:f1:7b:59:a9:7e:93:75:0a:58:10:ce:f2:2b:71:34:ba:
         f2:ae:82:fc:c6:53:62:6f:e3:78:aa:2f:df:fd:fe:7b:a6:ff:
         7e:75:55:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdDUtF3W/AQOLU+aKO26jKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWZjODZkN2M5MmEzNGQ2MTY5MzY0MmJlY2ZmZTlhMDll
NGFiOTMwHhcNMjYxMDIxMDYwMTU0WhcNMjYxMDIyMDYwMTU0WjAzMTEwLwYDVQQD
EygwNmY2MDVkMWUxMzdlYTNjMzc4YTVkNzM4ZGRjZTQ2ZDNkZGIyZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ajofrIAjNe/Qb9u9jRof5Pxrgrq
cuLUZ17kR+uTxcexO/uXVzEEJNj3Fz8IONX12m9ZkOBJE7jLKrbkCCVwQR/CJx/4
DkmIWupd3ZcvBevqeX3v+tHmTLIOeQ3UzRWRlrye36Ch5SaqOHEnqYs+THnTG6yD
5G4Uh16zvSIs3gVPFksoYjHSelHbPge/rPILwDalprLeVVJmG7amQIwdiMAocO+y
hBW2jBT1cGAzHautIPR4S5JQS3bgMzgZbAjRuSuz08kxSPzD8seV/v5I8cGWMO9y
Wf0XzezcuzQWXs9auPGQAlIR00gcgWPt0CzQNob3HabR8sqM1tX8k866MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb2BdHhN+o8N4pdc43c5G092y8CMB8GA1UdIwQY
MBaAFAsfyG18kqNNYWk2Qr7P/poJ5KuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5Yjct
ZGE1ZjZhNjU4ZjhiLzEvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yZDk1ZTctYmExNy00NzdmLTg5YjctZGE1ZjZhNjU4Zjhi
LzEvQ3hfSWJYeVNvMDFoYVRaQ3ZzXy1tZ25rcTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgW0Ypmr9
Xkvc4SGed3w1fNVAp7qExthrxGBKCC/3rlx1XKdNaiIokvF8rQUWUaD0kwgOGfsS
quw4N9I4K25P4KRmgyKChByKrzGVdgJUGyJtJtAsdlFDLBvCz5+FoMzJoHEwGs41
69u7mBFnFVL8GOg/GfVXFL5XtNzisYaBoFByDiIKFeCYT4Q605ndflPKQveKdDOy
JnTyDimPkcUD4Quk997sAKjT7FpKsj2WUouGM+jOVkNvgBrliwcI7MhqF6gqCABD
AFgGo3OkBT2P0i4bBlLyP1lp8a3xe1mpfpN1ClgQzvIrcTS68q6C/MZTYm/jeKov
3/3+e6b/fnVVhw==
-----END CERTIFICATE-----