Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File:                     240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier:          RyA8j1FwA/MZWFBa6EKmn6mFeowdXDoZ6vPug/F+7hY=
Subject key identifier:   FE:F0:A1:AB:23:0F:53:E1:2E:CD:22:20:CA:F4:39:04:67:72:CC:D5
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer:       /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial:       019EF8A5858A21DFCADCD569D6C69A143C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number:          1650
Signing time:             Wed 24 Jun 2026 08:00:57 +0000
Manifest this update:     Wed 24 Jun 2026 08:00:57 +0000
Manifest next update:     Thu 25 Jun 2026 08:00:57 +0000
Files and hashes:         1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
                          2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: K+4TTaBOX0ALH3+e0yXPSJYC5MV4H3TPG+w8EKJZCyg=)
                          3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:a5:85:8a:21:df:ca:dc:d5:69:d6:c6:9a:14:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
        Validity
            Not Before: Jun 24 08:00:57 2026 GMT
            Not After : Jun 25 08:00:57 2026 GMT
        Subject: CN=fef0a1ab230f53e12ecd2220caf439046772ccd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:33:80:69:87:9f:f4:b4:d4:a8:19:43:f0:
                    05:65:55:f5:a3:c5:4d:45:58:bd:d2:ae:31:9f:bb:
                    99:d1:c7:b8:d5:2f:8a:9c:0c:41:f6:38:2b:57:e3:
                    2c:b3:52:e7:7d:00:27:90:06:a3:05:ec:2b:a9:75:
                    b8:dd:dd:f8:09:d4:8d:3d:68:b6:c5:d3:05:43:5f:
                    da:93:5e:e8:71:16:f2:ff:2b:e9:15:6e:8c:67:20:
                    cd:50:25:2b:56:e7:ee:ed:37:66:75:ba:d0:fd:58:
                    e6:ba:a3:7b:0c:c6:c4:c1:46:c6:83:ca:a0:49:73:
                    23:db:63:ff:05:39:38:87:53:36:e6:5d:5e:7f:a5:
                    b9:95:8e:bb:b1:69:47:87:c2:a4:26:8b:e9:7f:f4:
                    1d:79:b6:ec:d8:88:ab:89:ef:43:3e:2e:03:6c:9f:
                    91:6b:28:93:55:e0:58:88:c8:59:e2:da:de:1e:18:
                    a1:76:0c:87:da:d1:71:b4:1b:bc:94:a2:36:12:a4:
                    35:b7:7f:fe:72:f6:49:23:65:17:48:69:e7:e5:88:
                    97:6f:53:54:dc:a6:1d:62:b1:a9:38:78:5f:3b:ff:
                    27:ca:e8:3f:68:cd:fd:1f:08:28:b6:3d:0b:e1:d8:
                    d3:b4:7c:d6:6f:29:7d:2b:09:69:c2:ec:aa:f3:78:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:A1:AB:23:0F:53:E1:2E:CD:22:20:CA:F4:39:04:67:72:CC:D5
            X509v3 Authority Key Identifier:
                keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:d0:b8:b6:bf:06:bb:ca:57:ca:90:97:b4:ed:fc:bf:1a:
         8e:7e:f9:54:c9:65:3b:84:c0:73:a0:6d:32:29:8e:c0:b1:26:
         96:c5:d9:2f:fd:e6:a1:aa:8d:e8:8b:4f:c7:d7:6e:c6:b4:80:
         2b:d6:56:89:7e:56:a0:0d:bc:c5:65:5e:53:6e:29:9e:3e:3c:
         35:d9:c1:93:f1:c1:4f:63:b1:7f:57:c9:74:fb:37:b9:79:57:
         cd:1c:8a:df:a3:2f:3d:57:33:86:13:15:65:3f:34:0d:72:d1:
         b9:1f:54:53:e1:c8:2c:ef:59:d9:27:05:c3:8f:46:3a:e9:17:
         f3:ef:58:00:7b:28:c1:72:ec:de:09:20:8a:06:05:33:6a:a9:
         eb:cf:bd:d7:cd:2f:66:90:1d:fb:9c:93:41:6f:65:1a:06:7c:
         13:21:fb:a0:f1:2d:54:3b:23:39:82:3a:1c:0b:12:10:03:ec:
         70:ae:26:b4:de:8c:83:ff:a4:45:1d:39:e7:0c:18:59:d0:cd:
         fd:b0:37:da:72:c4:cf:4a:03:df:1d:3a:76:e7:8f:d1:34:62:
         8e:e9:65:a1:56:72:b4:78:ec:c8:42:66:ca:a6:16:b3:56:98:
         66:b4:66:05:39:92:da:a6:db:2b:e2:a4:6e:20:f9:ab:68:a0:
         47:97:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:15 2026 by rpki-client