Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File:                     3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier:          oqOYwJXNPB4a+/VWOZPcYH2pYa0odTPgMYtLdgLl2zM=
Subject key identifier:   FA:47:7C:42:2D:6B:F5:4F:EF:E2:2D:BA:96:06:46:65:A1:8A:A9:B5
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer:       /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial:       019F21D9B84CA80650C2D4C45EC542052028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number:          1991
Signing time:             Thu 02 Jul 2026 08:02:24 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:24 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:24 +0000
Files and hashes:         1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: 0nJe76NuoPXL/P0Ssow9umOojG24FW0weOW47Ufuvco=)
                          2: 6W16tPBnc1dRPPXrNvPZCBivu-A.roa (hash: VTmSpbN2hd3Hw/P9lB0yjXnyihI9X48UXmmFukdSqcM=)
                          3: 8w9rvTUUt_RYhR3L0tQXn0glplA.roa (hash: f1jbbfJnG4ozyDGlTqWQz2YYiVrxgFWVHi3zprKmPqg=)
                          4: ACaX6w3ymJccvXanlDaDKMOtpm8.roa (hash: rxt58ZfZIffkntY04x8LDdPZCwFWWCpGs1EcVhf6HWU=)
                          5: G0RCF0Z6ZBSE1DTghZmezsnYOFc.asa (hash: Yk7ILI9iy5TC4KHdDTWpcbNPlYqZvxcnNf6IQxr0xj8=)
                          6: hrEIqJAwCku3aKDnRzlzuarP4tc.roa (hash: /EQ3061AHFPZuvaT0q5zSvf6uilyT/zCrLJMTA/SNVM=)
                          7: rzxMYEL8BKNR02VR6It9IPmftps.roa (hash: 9y+RUm2eWl0SkVwbpclKO/OAFTw8zaeRZoG7TQq0yY0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:b8:4c:a8:06:50:c2:d4:c4:5e:c5:42:05:20:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
        Validity
            Not Before: Jul  2 08:02:24 2026 GMT
            Not After : Jul  3 08:02:24 2026 GMT
        Subject: CN=fa477c422d6bf54fefe22dba96064665a18aa9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:ab:30:a7:a3:b8:6d:6d:01:a9:96:dd:bb:
                    e7:77:8b:ac:29:d4:68:d3:79:1c:17:5c:d7:d0:8d:
                    8f:55:55:6c:b3:96:dd:16:c7:19:9b:b4:dd:52:21:
                    92:f1:43:a8:42:c0:5a:39:62:97:60:ac:15:b0:f9:
                    32:de:3f:20:78:ef:80:46:37:4e:99:a1:80:60:36:
                    9b:4c:8e:15:8c:df:c4:0f:fd:00:06:d6:5e:cf:2a:
                    e9:8f:46:84:69:f1:94:bc:09:ef:eb:91:99:6c:8b:
                    bc:11:21:f0:e8:11:c8:c7:46:38:87:4c:c2:dd:55:
                    47:0a:db:4f:ee:9d:2c:66:53:99:19:95:8f:ff:29:
                    a0:5e:1b:0e:d1:af:7f:11:37:aa:c1:3a:22:e6:79:
                    54:c4:5d:52:2b:7e:c3:99:d3:5a:4a:2e:50:f6:c5:
                    5f:d3:57:ce:2e:89:55:73:14:f0:71:57:24:46:dd:
                    da:33:0e:0e:75:9d:91:bc:59:36:b5:e1:89:57:68:
                    9d:7a:39:62:07:34:7d:fc:75:c0:22:57:d5:d6:9f:
                    e1:78:9c:cd:aa:0e:85:33:b2:33:48:74:21:0d:55:
                    33:31:98:c1:82:4f:88:5e:bc:7c:dd:c1:52:26:0a:
                    c7:14:43:52:a1:51:b1:d5:27:a6:ef:32:15:68:b0:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:47:7C:42:2D:6B:F5:4F:EF:E2:2D:BA:96:06:46:65:A1:8A:A9:B5
            X509v3 Authority Key Identifier:
                keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:31:ee:9b:87:3e:a9:da:91:c3:71:df:36:f9:72:6f:2c:
         cb:8c:b2:56:18:b1:9a:a4:a8:41:61:26:74:7d:2f:5f:5c:40:
         05:97:9c:2e:16:07:0e:e6:1d:0d:66:eb:6e:60:5d:67:61:7f:
         47:a7:2e:0e:af:90:b3:d8:1b:6a:0b:4d:3f:4b:6b:4e:76:d6:
         2d:5a:e8:0e:db:d1:3a:77:3f:38:7e:c9:88:20:c2:82:f0:ce:
         bb:52:fe:0c:44:6c:07:8b:bc:40:18:5d:5b:57:bf:5d:6c:9b:
         7a:2d:80:00:1d:10:35:04:38:fb:d1:bb:2f:26:e1:9b:e9:d5:
         af:db:d3:6e:ec:db:d5:07:a6:7d:44:f7:73:ca:ba:2f:ef:fa:
         2a:d5:f7:46:55:8d:de:13:28:08:25:f9:d0:15:1c:51:af:b9:
         46:74:61:7f:9b:88:b6:c1:27:d9:9a:5c:98:36:68:9f:df:f3:
         6b:f5:e4:65:e5:6b:61:4e:e9:2d:73:df:43:d7:4e:eb:20:cb:
         1f:e6:1d:8d:a3:f6:ff:53:75:01:b0:d0:5f:3c:8a:2e:e4:67:
         c7:66:ba:5f:9f:93:4d:a8:b0:58:f3:f2:32:dd:f1:79:85:a8:
         cd:69:82:00:90:6c:bf:69:7f:14:8b:d1:3c:98:3f:ec:08:bc:
         14:84:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----