Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
File:                     71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft (raw, json)
Hash identifier:          lKZufp/TSjCqt7XgRdpTs+KjYD6P1Lt801qdECHOEdE=
Subject key identifier:   16:84:91:D9:4D:E0:3F:88:20:3A:D6:53:F8:4B:E5:F3:73:AD:85:46
Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3
Certificate issuer:       /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
Certificate serial:       0DA7641CA0684D3F3818C911DA694450269CA03E
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
Manifest number:          0166
Signing time:             Tue 20 Oct 2026 23:49:50 +0000
Manifest this update:     Tue 20 Oct 2026 23:44:50 +0000
Manifest next update:     Thu 22 Oct 2026 02:50:50 +0000
Files and hashes:         1: 71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl (hash: hC+mFwGHDhgSx1yOPj9JwLR7v3F+5EahV/1SJx11QD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:64:1c:a0:68:4d:3f:38:18:c9:11:da:69:44:50:26:9c:a0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
        Validity
            Not Before: Oct 20 23:44:50 2026 GMT
            Not After : Oct 22 02:50:50 2026 GMT
        Subject: CN=168491D94DE03F88203AD653F84BE5F373AD8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:13:90:ad:6b:db:cd:73:36:28:7f:66:0f:
                    66:df:17:b7:a7:9b:29:06:8c:20:77:23:dd:4d:cd:
                    2d:e6:2c:d6:22:91:f6:49:6d:f3:e7:c3:7f:ff:7e:
                    a6:ea:1f:be:ec:25:c8:46:aa:4f:a3:93:28:e0:23:
                    99:b4:61:d3:b4:06:86:39:c9:85:6e:87:da:ce:5b:
                    16:61:ac:d5:f0:7d:59:07:9b:3c:25:00:dd:97:4b:
                    3e:bb:61:da:57:c3:42:30:82:48:08:d4:ef:e6:80:
                    30:f4:3c:4c:fe:4f:99:49:61:f3:91:77:8c:2d:db:
                    27:6c:2d:2e:b6:a6:77:f0:26:99:f8:89:b6:8d:39:
                    4c:b4:d4:d8:6a:71:e0:0b:e2:32:53:c9:39:a4:42:
                    6c:12:70:67:c5:21:fb:bb:40:f2:49:be:db:6d:fb:
                    24:e2:d5:fa:b1:70:bd:f6:c8:1f:e8:01:c2:b2:74:
                    5f:40:92:65:69:cf:7e:2f:ca:7a:53:88:52:ca:61:
                    ad:d0:15:09:99:12:1c:58:c7:77:7c:93:7e:e3:8c:
                    6c:e2:76:56:cb:63:2b:38:c9:05:63:00:0e:6f:32:
                    a3:4d:23:49:63:db:e6:25:7f:96:bf:88:c3:b4:07:
                    eb:e4:fe:09:71:d6:7b:1e:6a:8d:86:81:66:f2:7a:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:91:D9:4D:E0:3F:88:20:3A:D6:53:F8:4B:E5:F3:73:AD:85:46
            X509v3 Authority Key Identifier:
                keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:11:cc:0d:0c:2d:14:cb:d9:14:e2:b8:a1:dc:b3:ba:2e:85:
         49:11:df:35:32:cd:bd:ce:f9:57:3b:67:af:08:76:98:e4:0b:
         99:0b:aa:0b:fe:4f:10:be:4c:43:7f:b2:99:1a:43:7c:a7:b4:
         35:8d:c9:ea:39:ec:d9:2b:ea:74:af:47:fc:97:6e:e5:48:9a:
         5c:3d:43:e6:9b:e4:22:fb:5b:cc:ad:f6:25:d7:82:0a:65:4a:
         e9:f7:11:83:1c:b6:31:54:dc:6e:2c:4a:c1:cb:02:15:9d:c9:
         94:21:cc:1f:94:8b:ca:97:48:03:bd:a2:c0:1d:1e:98:d7:76:
         bd:69:3d:aa:1d:69:9c:0a:5d:97:f1:6a:71:7d:c1:8a:1f:ef:
         e3:08:f4:10:b5:98:f0:44:76:7a:cc:d1:fd:e7:f8:44:b2:02:
         43:a6:16:f1:3a:2c:d5:af:ac:28:c2:8d:a1:28:ce:21:a4:3c:
         51:9e:2b:a9:ca:0b:4b:6f:1e:ff:bb:ce:2f:a0:ed:e7:6c:fc:
         9c:51:4f:ea:e9:4b:d2:d8:d2:70:00:8e:a7:5a:cf:b4:c1:ed:
         07:c1:85:82:5c:f2:c9:05:35:3e:b0:5d:bf:08:97:b7:27:22:
         ff:25:26:94:93:9f:3f:3f:67:0b:72:79:f5:07:22:ac:4c:4b:
         76:e5:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----