Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File:                     D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier:          EvXszsnX0G4h4PvrcosfP1HNJzipVsypx3F9/DbJM5c=
Subject key identifier:   EB:4E:9D:2A:2B:64:EE:AD:80:3E:9B:B4:A0:37:E1:5C:2E:47:DD:14
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer:       /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial:       019F216B79C37456176FE50FA236F187B424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number:          0A98
Signing time:             Thu 02 Jul 2026 06:01:59 +0000
Manifest this update:     Thu 02 Jul 2026 06:01:59 +0000
Manifest next update:     Fri 03 Jul 2026 06:01:59 +0000
Files and hashes:         1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: snpi0JZn/4MEWnJHXzEJUP0eizyh2ou5gb2TUhlS4Pk=)
                          2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:79:c3:74:56:17:6f:e5:0f:a2:36:f1:87:b4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
        Validity
            Not Before: Jul  2 06:01:59 2026 GMT
            Not After : Jul  3 06:01:59 2026 GMT
        Subject: CN=eb4e9d2a2b64eead803e9bb4a037e15c2e47dd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:28:15:6e:95:00:1a:b5:09:11:fe:b5:a8:
                    59:44:27:60:f8:2d:f9:2c:5a:0f:72:3c:29:8c:4f:
                    e8:b6:43:b8:06:e1:cd:7b:9c:28:12:d0:32:c4:e2:
                    bb:6a:67:b1:1b:e9:cc:67:08:40:c2:1a:04:ae:f3:
                    ad:ea:09:ee:17:64:ce:05:f3:71:8a:e6:24:fb:10:
                    d8:ed:f8:1e:e4:83:a6:16:88:fa:e1:49:1f:84:57:
                    63:7a:84:47:05:62:d3:9f:bb:10:66:76:47:44:c0:
                    84:36:dd:82:b9:fd:4e:3e:e3:c5:d7:cb:2f:63:4a:
                    b7:77:c1:6a:7c:b3:83:ad:13:ac:51:7b:d0:09:84:
                    2b:29:4e:8f:22:9a:36:be:da:e6:e5:74:55:18:d1:
                    57:f6:83:76:d5:ed:f4:84:9a:2a:1a:78:69:19:8b:
                    d8:3f:3b:70:04:c6:71:29:1a:f6:62:07:51:1a:64:
                    c1:67:10:3c:80:59:38:3c:f1:2c:18:00:ca:db:32:
                    40:db:66:b4:2c:11:06:71:25:d7:33:73:bf:7e:3b:
                    c0:1f:9e:3c:e2:c6:22:33:7c:a3:af:2b:7e:72:cd:
                    3d:07:de:6c:54:92:ed:7d:3a:ca:c6:49:04:a1:6e:
                    08:f2:d9:aa:78:f9:39:dd:fa:13:07:04:ec:b2:eb:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4E:9D:2A:2B:64:EE:AD:80:3E:9B:B4:A0:37:E1:5C:2E:47:DD:14
            X509v3 Authority Key Identifier:
                keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:01:d5:10:a6:ac:a5:ca:8d:59:30:ad:a0:a1:95:4b:cd:
         6b:a9:bd:39:e0:4a:b2:d9:8e:50:bd:e9:e9:99:78:bb:ce:a7:
         4d:1a:93:aa:47:9c:94:db:91:8c:79:ae:bb:27:fd:3a:18:c6:
         20:17:1e:c1:08:f8:ad:ef:e1:b5:2c:f9:34:da:b3:73:be:a1:
         8c:3d:ea:b6:58:ac:05:ba:4e:50:f1:9d:a9:6b:85:13:92:97:
         f4:8d:ac:e4:41:a1:d9:c4:c1:36:ec:20:aa:07:f0:c0:41:18:
         95:c0:b5:b2:9a:66:a6:e9:81:ae:d5:6f:40:93:ba:d9:94:7a:
         fe:15:4f:57:41:e0:8c:c5:f8:7e:aa:7c:c6:06:86:03:1b:59:
         e4:91:3d:f4:8c:97:84:12:19:e7:b5:e7:e4:c8:45:ce:0b:63:
         0a:a3:74:88:ff:9e:46:12:d6:5b:74:57:85:2d:1b:0d:75:df:
         e6:83:ed:c4:69:30:3b:23:e0:d3:16:73:4f:d7:76:df:78:69:
         52:27:4d:2a:7f:8e:cf:1c:f6:74:98:d7:26:89:27:a0:c6:45:
         bd:a0:84:cd:c6:bb:12:f2:9a:0e:f5:96:e8:0b:d4:c0:b7:bb:
         df:f9:e3:0c:79:4b:91:95:e4:37:18:69:38:0a:dd:28:b8:8e:
         b5:2c:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----