Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File:                     1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier:          QS/UwXI9g9D402FteTf3WkJmjS3jWRcFXY6jCToVzpE=
Subject key identifier:   6E:E1:43:E5:B3:13:B2:BC:7E:41:23:4E:3C:74:B2:46:95:5D:62:4D
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer:       /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial:       019F216B60E21B888ED949B18A487B0501D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number:          198C
Signing time:             Thu 02 Jul 2026 06:01:52 +0000
Manifest this update:     Thu 02 Jul 2026 06:01:52 +0000
Manifest next update:     Fri 03 Jul 2026 06:01:52 +0000
Files and hashes:         1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: mRRk1TtAMIkJAYstatzn41ZLIdO4+klspE4ioY4MXMo=)
                          2: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (hash: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:60:e2:1b:88:8e:d9:49:b1:8a:48:7b:05:01:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
        Validity
            Not Before: Jul  2 06:01:52 2026 GMT
            Not After : Jul  3 06:01:52 2026 GMT
        Subject: CN=6ee143e5b313b2bc7e41234e3c74b246955d624d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:ab:69:7c:2f:80:42:32:fd:99:5f:67:46:
                    41:98:a0:30:bc:0a:77:43:22:f9:c0:90:30:b5:bf:
                    64:bb:6c:29:98:39:32:90:dd:2a:37:34:73:79:00:
                    aa:bf:57:07:d6:63:ab:ab:af:7c:e0:35:e5:be:2f:
                    ae:fe:7b:90:06:54:47:1e:fb:75:65:c4:db:3b:e8:
                    f2:f5:d4:0e:1b:4a:9b:a7:fb:cd:5f:59:ba:ec:b9:
                    6a:52:ff:42:7c:5f:a1:49:fb:13:b8:21:74:d5:56:
                    b4:2f:29:59:26:32:5c:e9:0b:08:f8:45:3c:d5:7d:
                    b1:44:c0:31:c1:21:49:b2:49:15:e5:62:9e:b0:77:
                    b4:fe:e5:3b:32:61:44:e6:34:a5:f8:03:c3:5e:7b:
                    3e:61:b0:dc:5b:b1:3b:8f:02:1e:6b:d5:21:45:de:
                    b3:5c:e7:f7:0d:74:53:1b:63:1b:4b:8d:cc:5e:33:
                    5c:db:40:d9:28:6f:98:a4:1b:47:a1:64:a5:9a:28:
                    93:80:e1:e5:a2:f0:93:d7:41:32:d7:c3:9b:7b:e6:
                    b1:cc:2e:3c:fa:ed:fe:a4:74:39:11:e0:90:00:ea:
                    22:f4:99:e1:76:0c:ed:8d:0a:24:c7:a8:c7:1b:61:
                    b9:fe:c7:84:ed:7c:f4:83:32:63:de:c9:50:44:18:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E1:43:E5:B3:13:B2:BC:7E:41:23:4E:3C:74:B2:46:95:5D:62:4D
            X509v3 Authority Key Identifier:
                keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:7c:29:d5:5b:f9:ab:e0:48:63:f0:e9:14:54:46:37:32:
         a1:da:9d:74:62:b2:ee:fe:f9:b9:9c:67:2c:c2:c1:6b:7e:4a:
         4e:c2:58:a7:fd:6e:d5:5e:6d:32:e8:65:82:34:d6:a6:3f:15:
         1d:45:b8:26:46:51:36:51:dc:a1:b9:0c:6d:e3:41:3f:7b:94:
         75:e0:dc:95:d7:5e:1f:27:28:51:a1:2c:29:2d:d3:d1:6a:d1:
         f3:68:e5:1d:46:79:4a:a3:b0:3d:4b:15:3f:63:64:14:59:85:
         01:e9:b4:61:3c:67:35:44:23:3c:a0:0e:ad:f6:fa:37:48:45:
         12:13:00:ce:28:75:60:4d:eb:49:c1:16:09:4c:d7:94:38:38:
         53:04:bc:43:b4:5b:da:83:cf:93:d7:94:20:2d:ae:62:2f:56:
         fa:bf:0a:03:fe:f7:a6:f2:35:c6:12:36:f1:89:d4:39:04:13:
         8b:2f:56:87:d5:a6:61:02:ac:c2:22:5d:12:10:ec:78:ef:a3:
         94:96:f5:34:56:5e:cd:a6:81:89:45:a0:78:1a:b8:14:5e:bb:
         f5:ce:d9:0a:c6:92:e6:75:5f:e2:81:7b:65:c7:e8:5a:56:78:
         41:32:b8:47:3c:1a:03:82:5a:41:af:f1:f1:17:36:49:80:3d:
         ae:43:0c:0c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8ha2DiG4iO2Umxikh7BQHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1
ZTg3MTAwHhcNMjYwNzAyMDYwMTUyWhcNMjYwNzAzMDYwMTUyWjAzMTEwLwYDVQQD
Eyg2ZWUxNDNlNWIzMTNiMmJjN2U0MTIzNGUzYzc0YjI0Njk1NWQ2MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr82raXwvgEIy/ZlfZ0ZBmKAwvAp3
QyL5wJAwtb9ku2wpmDkykN0qNzRzeQCqv1cH1mOrq6984DXlvi+u/nuQBlRHHvt1
ZcTbO+jy9dQOG0qbp/vNX1m67LlqUv9CfF+hSfsTuCF01Va0LylZJjJc6QsI+EU8
1X2xRMAxwSFJskkV5WKesHe0/uU7MmFE5jSl+APDXns+YbDcW7E7jwIea9UhRd6z
XOf3DXRTG2MbS43MXjNc20DZKG+YpBtHoWSlmiiTgOHlovCT10Ey18Obe+axzC48
+u3+pHQ5EeCQAOoi9JnhdgztjQokx6jHG2G5/seE7Xz0gzJj3slQRBgvOQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG7hQ+WzE7K8fkEjTjx0skaVXWJNMB8GA1UdIwQY
MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1
LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy
NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6V8
KdVb+avgSGPw6RRURjcyodqddGKy7v75uZxnLMLBa35KTsJYp/1u1V5tMuhlgjTW
pj8VHUW4JkZRNlHcobkMbeNBP3uUdeDclddeHycoUaEsKS3T0WrR82jlHUZ5SqOw
PUsVP2NkFFmFAem0YTxnNUQjPKAOrfb6N0hFEhMAzih1YE3rScEWCUzXlDg4UwS8
Q7Rb2oPPk9eUIC2uYi9W+r8KA/73pvI1xhI28YnUOQQTiy9Wh9WmYQKswiJdEhDs
eO+jlJb1NFZezaaBiUWgeBq4FF679c7ZCsaS5nVf4oF7ZcfoWlZ4QTK4RzwaA4Ja
Qa/x8Rc2SYA9rkMMDA==
-----END CERTIFICATE-----