Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File:                     CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier:          GYOI27FiBnGJCXv8aAws1y85vvHo9gzMXrJ18ZN1QW4=
Subject key identifier:   5C:B0:1D:E8:00:E7:2A:AD:8C:6E:E2:38:81:18:D8:BF:F3:FD:3F:D2
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer:       /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial:       019F22102C6AD0066E399094E581B401FB9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number:          15F4
Signing time:             Thu 02 Jul 2026 09:01:52 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:52 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:52 +0000
Files and hashes:         1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: BewBiqLfFLjtb7Mipk/mEAgWHSPBBTt8lSUHGqub7Wg=)
                          2: S6WAJx7TbU110k_g0oyFg1H_34U.roa (hash: toyst882a1xCVx/3FvwHIaERW16kFo9wkqRcGIDeq00=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:2c:6a:d0:06:6e:39:90:94:e5:81:b4:01:fb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
        Validity
            Not Before: Jul  2 09:01:52 2026 GMT
            Not After : Jul  3 09:01:52 2026 GMT
        Subject: CN=5cb01de800e72aad8c6ee2388118d8bff3fd3fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:6f:9d:0e:1c:2f:e9:a2:69:26:b4:62:16:
                    b8:c2:20:e4:7b:fe:fc:71:86:9e:8b:45:77:91:db:
                    0e:14:b5:26:f3:0a:76:5a:13:ad:39:84:af:ae:8f:
                    38:ce:de:a0:a3:29:de:7d:4e:2a:4f:0c:1c:7b:02:
                    7a:aa:7a:5f:fe:cf:44:c0:6d:bb:76:e3:61:4b:ed:
                    5e:d8:fc:fc:62:9d:17:b7:6b:9b:a9:74:ee:ba:b5:
                    45:62:ff:89:38:52:cf:bc:eb:11:5d:b1:5d:ad:9e:
                    dd:d2:55:d0:48:7b:b1:15:d4:e0:68:4e:c4:83:95:
                    7c:2f:e5:90:1d:3d:8b:a0:c1:4d:22:d4:47:45:b5:
                    22:d2:f5:23:9e:4e:65:94:0e:d8:40:86:9e:9e:2c:
                    48:ae:85:8a:21:67:98:28:ab:32:93:57:6b:21:80:
                    c5:ae:46:8f:cc:29:c6:99:62:af:bb:fb:92:bd:c2:
                    d4:fa:f0:44:47:eb:c5:35:f0:60:9a:33:db:e8:4c:
                    6f:a1:49:ac:96:e2:d8:61:b4:2a:86:69:69:03:b7:
                    f8:89:33:31:de:3b:43:d6:e9:22:ed:fc:3d:a3:04:
                    90:21:98:4b:f4:88:e3:51:a8:66:c6:62:a3:b6:c3:
                    d8:f4:5b:9e:a1:01:8b:29:7e:ee:54:ce:d3:c3:e2:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B0:1D:E8:00:E7:2A:AD:8C:6E:E2:38:81:18:D8:BF:F3:FD:3F:D2
            X509v3 Authority Key Identifier:
                keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:6f:10:a6:07:b6:3c:59:0e:6e:84:de:70:41:16:a1:9b:
         bb:36:bc:bd:3f:40:36:68:c1:35:fd:1a:cc:e5:ef:82:21:6d:
         46:37:75:45:c3:0e:70:85:e9:d3:cf:04:48:ba:9e:53:8f:7e:
         c2:63:ef:bc:31:bb:4d:14:fb:6c:f2:1e:2f:28:8a:d3:ea:ac:
         e6:09:ac:7a:d1:0a:df:eb:fa:38:56:19:9a:41:e4:c5:92:3d:
         7c:7c:00:eb:5d:63:2f:72:d9:7c:93:f1:53:2c:08:9a:2f:58:
         6c:ff:17:22:19:72:d0:08:9f:47:70:7f:34:c3:e2:92:84:34:
         f5:5e:4c:11:5c:fc:e2:51:5b:12:24:73:f3:72:c9:6b:b1:8d:
         86:35:01:f2:23:1d:7e:6e:f7:f7:3f:06:63:cd:1e:71:98:d3:
         df:d4:99:c6:4e:8f:ea:69:a8:79:c0:bf:f4:65:93:3b:fa:ab:
         a7:c4:23:2a:2d:c5:2d:a9:36:4b:09:21:27:4d:79:d7:30:ab:
         19:df:d2:34:67:71:06:7a:2e:63:2d:b2:db:c9:21:06:08:da:
         8d:87:65:8e:0a:87:36:51:24:8c:42:de:16:8e:b3:c7:95:23:
         12:d0:73:75:c4:f2:00:bd:b9:0e:52:7e:c4:3a:69:77:08:11:
         04:b6:86:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iECxq0AZuOZCU5YG0AfueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTM0ZGFhYTg4N2Q5OGE1MzQ4YzNhNDYwYTIxZmM4NGUx
MWE0ZTYwHhcNMjYwNzAyMDkwMTUyWhcNMjYwNzAzMDkwMTUyWjAzMTEwLwYDVQQD
Eyg1Y2IwMWRlODAwZTcyYWFkOGM2ZWUyMzg4MTE4ZDhiZmYzZmQzZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR9vnQ4cL+miaSa0Yha4wiDke/78
cYaei0V3kdsOFLUm8wp2WhOtOYSvro84zt6goynefU4qTwwcewJ6qnpf/s9EwG27
duNhS+1e2Pz8Yp0Xt2ubqXTuurVFYv+JOFLPvOsRXbFdrZ7d0lXQSHuxFdTgaE7E
g5V8L+WQHT2LoMFNItRHRbUi0vUjnk5llA7YQIaenixIroWKIWeYKKsyk1drIYDF
rkaPzCnGmWKvu/uSvcLU+vBER+vFNfBgmjPb6ExvoUmsluLYYbQqhmlpA7f4iTMx
3jtD1uki7fw9owSQIZhL9IjjUahmxmKjtsPY9FueoQGLKX7uVM7Tw+L20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFywHegA5yqtjG7iOIEY2L/z/T/SMB8GA1UdIwQY
MBaAFAijTaqoh9mKU0jDpGCiH8hOEaTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAt
YzYyY2YyMGE1ZWM5LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAtYzYyY2YyMGE1ZWM5
LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc1vEKYH
tjxZDm6E3nBBFqGbuza8vT9ANmjBNf0azOXvgiFtRjd1RcMOcIXp088ESLqeU49+
wmPvvDG7TRT7bPIeLyiK0+qs5gmsetEK3+v6OFYZmkHkxZI9fHwA611jL3LZfJPx
UywImi9YbP8XIhly0AifR3B/NMPikoQ09V5MEVz84lFbEiRz83LJa7GNhjUB8iMd
fm739z8GY80ecZjT39SZxk6P6mmoecC/9GWTO/qrp8QjKi3FLak2SwkhJ0151zCr
Gd/SNGdxBnouYy2y28khBgjajYdljgqHNlEkjELeFo6zx5UjEtBzdcTyAL25DlJ+
xDppdwgRBLaGxA==
-----END CERTIFICATE-----