Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File:                     BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier:          aqnZNaXQo4dvRVQsLXBEWIlonVZzebr6Gyg6O1uA6+A=
Subject key identifier:   F3:AB:89:1C:34:18:6F:60:A9:D2:94:AB:7D:A7:25:53:57:ED:47:01
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer:       /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial:       01A10B824F8A1C6B9681A7C0396E3F4DA99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number:          108B
Signing time:             Mon 05 Oct 2026 10:00:51 +0000
Manifest this update:     Mon 05 Oct 2026 10:00:51 +0000
Manifest next update:     Tue 06 Oct 2026 10:00:51 +0000
Files and hashes:         1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: 1JsogBPm9wiScIGRXYgbZmAM3AQMM4DeLKFpgXGHYSc=)
                          2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:82:4f:8a:1c:6b:96:81:a7:c0:39:6e:3f:4d:a9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
        Validity
            Not Before: Oct  5 10:00:51 2026 GMT
            Not After : Oct  6 10:00:51 2026 GMT
        Subject: CN=f3ab891c34186f60a9d294ab7da7255357ed4701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:bc:63:16:76:1b:4b:30:88:61:ca:bf:6d:
                    e9:13:f4:3d:31:a2:c5:43:de:b8:e5:91:5e:30:4f:
                    26:17:20:17:37:a5:3f:30:1d:f4:d7:fc:3c:35:9f:
                    6b:78:06:ec:b7:bb:10:15:7b:13:64:9b:50:0c:2e:
                    37:f3:45:88:8b:44:33:f4:9b:2f:7f:0e:92:df:02:
                    11:c0:f7:90:4e:1f:6f:33:b0:82:b2:59:42:43:1e:
                    f9:4f:37:cd:c9:34:0b:3e:72:d6:8c:a3:a0:7c:45:
                    6a:2a:5f:de:61:eb:1f:76:f0:6d:8e:a4:03:2b:66:
                    85:38:3f:e3:d1:b5:fa:f1:35:82:3b:ed:ce:e3:d5:
                    2d:da:21:c0:12:14:d5:32:c1:77:f8:b2:7c:66:45:
                    02:62:36:18:62:60:5a:16:dd:75:5b:d4:7e:29:71:
                    09:4c:6e:d9:75:cf:82:27:6d:b5:ff:ce:bc:a7:32:
                    f5:46:dd:3c:6c:9b:a9:5e:2d:84:57:0d:cf:06:2f:
                    51:6e:2c:4a:94:ed:d2:5e:6e:2b:a7:36:ca:19:da:
                    b9:4c:e8:f6:ca:5d:6d:4f:00:0b:78:a3:63:46:eb:
                    2c:aa:11:b4:47:4d:37:b5:c0:7d:7f:ae:74:1f:16:
                    8c:56:4d:0f:7b:d7:18:0f:5f:90:f4:4f:9e:58:da:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:89:1C:34:18:6F:60:A9:D2:94:AB:7D:A7:25:53:57:ED:47:01
            X509v3 Authority Key Identifier:
                keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:70:9c:65:86:0f:13:86:e4:d7:5a:17:b3:c8:0b:61:92:01:
         f6:b8:f7:e5:d3:6f:c3:9e:6b:9a:94:80:a6:a9:18:e5:53:ee:
         fb:49:71:e0:db:6c:2f:02:07:51:3a:61:dc:c8:d1:27:af:6c:
         c4:3b:7f:e2:3a:c4:9f:cd:43:81:78:64:9d:77:63:05:f1:cb:
         72:6a:1f:de:ca:5e:2b:b8:28:db:60:5b:d8:e3:e7:85:bc:9d:
         04:b1:22:63:5c:b8:1d:37:79:09:78:00:0d:fe:4d:9f:14:db:
         c2:17:ed:b7:1a:d0:3b:fc:ce:7a:86:71:8f:0a:43:80:d3:36:
         a4:1c:14:7f:4f:07:9d:49:89:a3:be:49:84:6e:fb:36:8f:97:
         d0:59:94:ad:af:2a:3f:17:46:9e:b2:de:1e:65:c8:da:e4:1b:
         9d:c5:de:22:25:2c:64:1d:27:c5:e4:fd:56:ef:da:31:2f:a0:
         01:6d:57:80:ce:a2:30:52:c9:3f:bb:7e:43:66:e2:c1:7d:0e:
         f7:27:36:43:7b:05:ee:08:39:e3:75:87:2d:e9:95:5f:59:80:
         09:0b:cb:d3:0f:9a:bb:64:92:5e:f3:45:4d:51:4b:b2:c2:6e:
         49:16:a8:82:0b:89:d9:f8:f2:24:db:11:4e:fb:25:78:2f:02:
         e0:9d:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----