Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File:                     71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier:          PoYcvUooMaoIoN9Gg//CZvRSyvnxRRZgiwVAeGACf8Y=
Subject key identifier:   6D:BC:AA:A2:2E:F0:34:B5:A9:2D:9D:D8:CD:A1:4C:ED:50:A3:DF:86
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer:       /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial:       019F21A247F0F8AFAF40DE22BC56C6A1DFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number:          198F
Signing time:             Thu 02 Jul 2026 07:01:50 +0000
Manifest this update:     Thu 02 Jul 2026 07:01:50 +0000
Manifest next update:     Fri 03 Jul 2026 07:01:50 +0000
Files and hashes:         1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
                          2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
                          3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: EmgSOenXLY2d/EYnPm0tbnfUz6fQ8shk0lQFAy1U/84=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:a2:47:f0:f8:af:af:40:de:22:bc:56:c6:a1:df:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
        Validity
            Not Before: Jul  2 07:01:50 2026 GMT
            Not After : Jul  3 07:01:50 2026 GMT
        Subject: CN=6dbcaaa22ef034b5a92d9dd8cda14ced50a3df86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:15:40:99:ed:7a:2c:fa:9f:3c:b6:a5:cf:
                    ce:7e:02:38:a0:7b:9a:1a:39:77:34:b1:63:f4:4b:
                    84:50:34:30:b5:1a:ff:60:3b:ff:c6:91:36:a3:f0:
                    de:b4:29:33:d8:b1:0b:8b:67:68:da:14:3a:7f:b0:
                    cc:e9:be:b5:df:dc:50:92:0d:86:07:62:96:3a:73:
                    82:8d:f6:ee:c3:74:8f:48:8c:e2:58:ef:d3:bf:b2:
                    9f:22:3a:e0:8b:65:33:de:ef:93:38:6c:fa:78:e0:
                    3e:16:ab:c6:a4:bc:83:5f:61:98:61:00:d5:f3:ee:
                    f9:40:68:6f:0e:a7:b2:26:20:f9:b9:84:b4:2d:bc:
                    a7:72:2f:d2:dc:eb:90:af:be:6f:c8:c2:1e:27:52:
                    f6:f0:fe:da:6e:32:fd:0b:20:1c:9e:33:38:57:b8:
                    e6:df:c3:35:00:46:92:70:72:6d:ad:05:69:cd:88:
                    d4:b3:8f:65:44:df:9c:36:af:e5:5f:d4:44:c7:7c:
                    fd:64:aa:73:47:4a:9f:59:84:bf:25:f4:84:0e:37:
                    a7:dc:51:13:b7:61:ec:4c:e3:37:d4:bf:19:b4:e7:
                    fc:44:de:a6:d7:aa:2f:9f:d7:ed:ea:fd:25:13:0f:
                    f9:fb:c3:9a:4a:06:9e:fe:c2:cc:cf:63:63:f5:9b:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:AA:A2:2E:F0:34:B5:A9:2D:9D:D8:CD:A1:4C:ED:50:A3:DF:86
            X509v3 Authority Key Identifier:
                keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:c8:0c:bb:61:8d:3a:a7:a6:b6:2e:21:55:0e:a2:30:a6:
         f5:28:24:27:a4:ca:a9:f0:00:9e:cd:4f:c9:d2:9d:96:5c:7f:
         3e:09:6b:d6:87:37:7d:6d:07:1f:15:1e:af:f5:e9:e5:bd:78:
         74:41:89:d1:0a:bd:53:c1:99:f1:e3:10:23:25:fc:8a:aa:a3:
         f2:3a:bc:bb:c2:e5:8d:b3:0a:58:7f:1d:1f:8f:64:15:11:2e:
         db:9c:41:5c:70:7d:34:59:dc:fb:0d:53:a5:c0:64:fd:bc:2e:
         65:8f:68:1a:c8:9c:8b:2c:30:10:e5:6c:37:bc:62:1e:83:86:
         ef:ae:0d:87:b0:08:ef:37:4d:2f:24:f3:46:ee:1e:9e:06:bc:
         85:0a:c8:44:4b:13:89:47:29:62:bf:b3:bc:dc:76:7e:8b:71:
         1d:3c:96:8e:b0:fb:9e:19:99:95:95:dd:9c:99:be:67:e7:c7:
         43:4d:fd:04:d3:ae:ac:db:39:15:45:56:97:97:b5:47:cd:06:
         b9:77:e8:ae:da:0e:cc:77:7b:68:37:32:0c:89:0e:8e:c8:1c:
         2e:bd:7b:6b:bd:ab:f0:a8:05:92:24:2b:06:fa:cd:be:b6:31:
         b3:79:ec:39:b5:6c:a3:11:82:47:e6:5c:cf:10:98:bc:dc:2b:
         3f:bb:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:53 2026 by rpki-client