Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File:                     1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier:          7s4EOmWSmiXfPilMH7GblG3tbF7B10dBgJ6BiMrWU08=
Subject key identifier:   BE:18:76:EB:0F:C8:C7:1F:5B:13:B1:AA:70:B7:DF:50:48:E1:C8:FB
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer:       /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial:       019F2322D28BD3BDEADCFC62869CCF31E9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number:          162F
Signing time:             Thu 02 Jul 2026 14:01:52 +0000
Manifest this update:     Thu 02 Jul 2026 14:01:52 +0000
Manifest next update:     Fri 03 Jul 2026 14:01:52 +0000
Files and hashes:         1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: jXiy+iogHpvoDqMIQ/Cg6lBCzYO946l+Px1oU9JG5f8=)
                          2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
                          3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:22:d2:8b:d3:bd:ea:dc:fc:62:86:9c:cf:31:e9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
        Validity
            Not Before: Jul  2 14:01:52 2026 GMT
            Not After : Jul  3 14:01:52 2026 GMT
        Subject: CN=be1876eb0fc8c71f5b13b1aa70b7df5048e1c8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:63:5e:10:51:4d:f0:ee:aa:6a:d1:6b:ff:
                    a8:b5:e2:cf:ad:86:49:c3:e6:b3:9d:f3:63:aa:f2:
                    f0:16:5e:79:b6:ec:81:7f:1e:38:02:5c:eb:10:8e:
                    35:3e:4e:f2:89:db:75:7b:5c:67:c7:1e:81:d4:8a:
                    10:85:6a:56:84:82:19:5b:ab:a1:19:fc:64:41:6b:
                    ff:7b:fa:8f:ca:03:d2:01:8c:e2:38:e0:f2:65:84:
                    5f:77:6b:94:07:cf:9e:b6:a1:aa:03:a3:24:de:86:
                    cd:63:36:95:34:fd:42:6d:a7:09:31:5f:3e:87:a1:
                    9c:93:86:b9:9f:b9:8e:dd:84:92:89:1e:d4:0c:f5:
                    2c:c7:d6:26:4e:90:5b:ce:5b:3a:96:d4:e3:3c:9b:
                    ee:99:d9:38:0f:e1:ed:70:7a:df:53:af:be:b9:fc:
                    c3:d2:6a:8e:e4:9e:09:7c:83:16:60:c2:74:00:21:
                    80:35:d5:94:35:9a:d6:a1:b7:e4:5a:81:c6:72:a3:
                    80:e3:02:9c:e4:85:ec:2b:fd:40:98:31:bc:c6:70:
                    04:28:88:89:b0:eb:fc:73:3e:b1:cd:fc:a1:c9:e2:
                    00:5a:49:40:9a:60:5c:66:2a:0c:d2:84:d1:6e:22:
                    f2:3f:08:2a:ff:71:46:c0:89:5d:72:76:3c:73:4a:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:18:76:EB:0F:C8:C7:1F:5B:13:B1:AA:70:B7:DF:50:48:E1:C8:FB
            X509v3 Authority Key Identifier:
                keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:33:32:02:94:1a:6a:13:d2:3d:db:3e:27:07:6b:07:3e:
         ca:09:c6:d8:a0:10:02:3e:dd:63:b2:48:b6:5c:68:66:d4:5b:
         f9:6d:85:63:b2:eb:1b:ca:32:23:1c:35:5b:8f:8d:c3:b4:e9:
         8b:d3:bc:ac:73:23:7e:e9:b9:26:17:7d:18:82:bb:37:c5:ea:
         f8:8f:50:f5:10:bb:47:34:7f:36:aa:5f:c0:5b:1f:8b:c6:15:
         df:5f:5f:8b:00:74:5b:fa:34:36:65:79:59:c2:be:4d:70:90:
         03:0e:fd:b5:58:8f:f3:f3:a1:23:e2:4a:7b:04:15:0b:de:b7:
         d5:0b:13:97:13:85:37:fc:6c:80:2e:bc:16:d5:41:55:62:ce:
         aa:df:72:6f:e1:3d:9c:91:0f:ad:ac:5e:0e:05:e8:37:b7:ef:
         cf:24:db:63:05:40:61:18:de:3e:e6:c1:28:3e:9d:e1:5e:3b:
         f4:e3:59:6c:f7:d5:f4:17:3e:14:e9:d4:4d:03:bb:3b:31:30:
         7e:3f:f4:d2:76:ea:ac:b2:44:6d:19:80:e7:b8:5f:15:11:cf:
         de:a2:6c:ff:61:cb:6d:eb:6c:93:52:77:ce:6f:e1:f8:53:52:
         16:a6:ae:d9:79:e2:cb:35:d0:c3:ee:c6:a8:f8:8a:d4:62:51:
         17:1f:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----