Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File:                     70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier:          stPVSF/Qf42yxqYV9gbDMyfegeR52f89tyQXTVDOwqk=
Subject key identifier:   DB:F6:0D:0D:6C:DB:6D:84:25:DF:57:EF:75:1E:29:84:FF:DC:0D:8A
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer:       /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial:       019F216B68554DB38ABF9A52562232C67B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number:          10F8
Signing time:             Thu 02 Jul 2026 06:01:54 +0000
Manifest this update:     Thu 02 Jul 2026 06:01:54 +0000
Manifest next update:     Fri 03 Jul 2026 06:01:54 +0000
Files and hashes:         1: 1-SL9hlivQGt-mLTuChMVipJ552A.roa (hash: M4LxMEo5XBi46ojcg/gR85XlQ9Z1KIxYuUCF1vDeIuI=)
                          2: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: CRNlElWgNS7FmIpzD/eVLXWxM0yR0eHYXOcwTmsU8/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:68:55:4d:b3:8a:bf:9a:52:56:22:32:c6:7b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
        Validity
            Not Before: Jul  2 06:01:54 2026 GMT
            Not After : Jul  3 06:01:54 2026 GMT
        Subject: CN=dbf60d0d6cdb6d8425df57ef751e2984ffdc0d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:f3:45:17:39:5a:7a:47:9b:a4:bb:17:8c:
                    20:3a:b9:ff:54:a2:89:34:8a:62:bd:63:2a:b2:be:
                    d5:de:d3:1e:dd:65:13:da:9a:bf:59:a7:ee:11:07:
                    10:78:b7:af:00:ef:89:41:23:f2:fa:92:7c:a0:7d:
                    bc:76:68:ab:1a:76:b0:75:81:91:aa:f5:ad:9f:6a:
                    e1:d3:7c:66:a0:35:d7:57:48:95:c9:80:cc:9c:89:
                    fb:3a:c1:b8:4f:2a:1a:f5:23:28:2a:ac:e2:eb:75:
                    70:05:e4:d6:9d:4e:c4:c5:c7:06:12:a3:5a:46:6d:
                    2f:b0:59:bf:05:c6:76:60:f1:ca:42:40:51:5d:fc:
                    6c:de:00:af:ab:ca:9e:c0:62:e8:ca:58:56:a6:21:
                    7d:3c:ff:66:e1:e1:f4:06:92:b1:c1:15:44:c5:cb:
                    b9:58:d5:33:cc:30:7b:6e:72:33:44:38:20:b1:79:
                    3f:6a:eb:ad:be:54:cc:3e:57:20:8e:a8:f1:f2:58:
                    ea:38:db:3d:24:3d:fb:e1:dd:6d:c0:8c:bc:37:e8:
                    99:00:0d:e2:57:8a:51:1a:13:2f:c3:d3:e3:70:0a:
                    01:b4:69:c0:c2:46:51:91:72:96:66:4d:e4:6e:35:
                    2b:1f:04:f3:11:fc:f6:2e:bf:0b:cd:77:25:2b:1e:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F6:0D:0D:6C:DB:6D:84:25:DF:57:EF:75:1E:29:84:FF:DC:0D:8A
            X509v3 Authority Key Identifier:
                keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:8b:46:57:9c:c8:4e:ca:ad:6d:d9:18:e9:a4:51:dc:e5:
         07:cf:95:78:60:64:05:fe:3e:f7:03:a3:c3:e0:1a:9a:b9:46:
         62:eb:7c:ab:20:82:80:50:23:b3:88:3e:79:87:0c:d8:06:85:
         f2:4c:c3:0a:8f:b4:74:de:24:7f:78:5e:98:19:d0:2c:0b:a9:
         ba:d9:db:4b:6f:c9:12:10:0b:a8:24:5e:ce:0f:2a:0b:72:b5:
         78:1c:76:61:cc:46:5a:af:bb:12:7b:7b:53:2e:4d:93:97:94:
         8c:81:74:94:0d:f2:b3:ec:a2:10:8c:63:d5:d1:90:17:76:46:
         a5:c0:f7:75:ea:9f:ec:a1:47:40:76:80:bb:1c:50:bd:f3:4c:
         5f:e7:60:8e:d4:15:12:32:24:4c:cc:90:7c:d2:0d:c4:ae:2d:
         7c:65:32:62:d6:29:1e:b2:13:0f:ca:e9:1d:1c:99:d2:fd:8a:
         3e:5c:14:c5:f5:c2:40:4b:90:3d:dc:e4:a9:7b:05:bf:73:5b:
         c1:5b:a3:0f:4e:b1:a7:da:9a:3e:c4:8b:57:7a:71:bc:d1:39:
         cd:e9:81:3e:78:8f:04:da:d7:a8:42:28:70:61:ad:dd:75:c4:
         a3:c1:2f:52:9b:5c:c9:55:9e:3b:6e:73:2e:6f:39:88:ed:74:
         85:ed:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----