Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File:                     5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier:          A9qqlug/i09bcsy7EHn+6PJHY02UxJtBkY6n34EQnic=
Subject key identifier:   99:20:D5:24:AE:C0:78:E0:BD:54:A0:E7:12:76:B2:AE:5B:17:37:24
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       01A1385AF20BF3F16C523B17C8BFE8DE29FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number:          088C
Signing time:             Wed 14 Oct 2026 03:00:46 +0000
Manifest this update:     Wed 14 Oct 2026 03:00:46 +0000
Manifest next update:     Thu 15 Oct 2026 03:00:46 +0000
Files and hashes:         1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: ZR2OvQb9km92QlHtnzaVx5BtA/NccbjGaWBITkz7mt4=)
                          2: Q92n5As_StLfCEOsCZRxLPjQigk.roa (hash: m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:5a:f2:0b:f3:f1:6c:52:3b:17:c8:bf:e8:de:29:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Oct 14 03:00:46 2026 GMT
            Not After : Oct 15 03:00:46 2026 GMT
        Subject: CN=9920d524aec078e0bd54a0e71276b2ae5b173724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:37:63:19:e9:52:f3:1a:8b:72:fd:22:e3:
                    70:f9:48:fe:17:dc:d8:fa:a4:32:dd:1f:a6:0e:28:
                    32:b7:a6:76:57:d3:42:56:69:dd:44:11:b7:b8:8b:
                    9d:5c:62:65:92:55:26:b2:68:e8:59:f6:34:55:71:
                    e8:64:b8:fa:e0:05:57:53:73:0c:71:3f:48:40:43:
                    d8:52:7a:10:fa:91:40:8f:6d:d0:42:b4:57:3e:04:
                    33:3f:ec:d2:54:03:7e:ba:67:02:20:a6:e8:56:d6:
                    c5:cb:95:36:e2:1c:05:f4:c8:33:99:5d:c8:20:5b:
                    a3:25:fb:9e:ff:05:ba:e3:8e:0b:a4:84:a3:f4:ab:
                    52:49:6d:9f:8a:ab:18:2e:d7:e9:66:ba:75:95:97:
                    2d:88:67:2c:8a:c3:5a:31:32:14:92:b5:87:5c:63:
                    f0:a7:33:02:cb:d6:4d:e6:29:5e:52:12:a8:5c:1f:
                    f1:1f:b2:60:6f:9a:b8:29:c9:1e:c6:61:94:7e:b1:
                    05:35:d1:5f:79:47:ac:ff:f5:55:5e:77:d9:98:66:
                    70:9d:a7:00:16:92:e0:8a:9f:e7:6d:c4:7f:3f:a2:
                    4e:10:a2:87:fb:98:4f:95:16:c7:44:fb:df:54:e1:
                    74:4c:07:c7:2d:cf:01:27:a1:65:ae:f0:8d:ce:a6:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:20:D5:24:AE:C0:78:E0:BD:54:A0:E7:12:76:B2:AE:5B:17:37:24
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:95:ba:23:a2:6a:e3:c9:14:b5:f6:7b:00:0c:af:c8:8b:
         e7:8c:bc:eb:de:c0:8d:0b:94:91:a9:db:c4:84:d8:39:84:78:
         90:73:52:a5:e6:3d:31:56:ad:9e:ee:2e:d2:3e:d7:ac:79:3c:
         6e:0d:96:90:21:57:64:1c:c1:fd:47:9d:61:21:41:54:dd:ac:
         79:2b:72:67:30:a3:8c:e3:fc:7d:5c:6f:db:42:27:7a:da:3e:
         b9:cd:1e:6c:1e:d8:8c:fa:cb:27:75:d1:37:0c:b0:33:5d:3d:
         6f:f1:73:22:fd:ce:fb:06:bc:47:df:dc:06:42:86:89:ee:ca:
         eb:d0:2c:12:0c:e5:d1:6a:4c:08:fe:51:56:c5:d6:ed:a4:65:
         1d:3a:15:bf:7c:69:9b:78:c5:6a:99:29:32:8d:dc:2c:8d:e5:
         be:a7:5f:03:91:da:04:48:17:db:97:96:20:9d:52:14:a7:fe:
         08:08:20:29:88:e4:aa:87:fa:1f:f3:b3:8d:c6:3d:5c:25:de:
         40:e7:27:15:37:7c:a3:48:5b:ba:fd:45:71:96:38:ad:1c:4d:
         ed:96:63:ad:7e:97:ae:73:b9:87:6a:a7:68:b9:4e:bc:aa:31:
         d9:c5:13:bc:29:f1:43:73:6c:f6:4a:51:6b:85:6e:b7:c6:4d:
         1c:1a:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----