Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File:                     IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier:          KUQdJ6K4VVxqiCZlKC1De4IenmvEzfEXRF9cYu6pqFA=
Subject key identifier:   85:51:62:E4:6D:C9:E5:1A:36:5B:FD:FC:F3:8F:6B:E0:E9:C0:75:0C
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer:       /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial:       019F227DB47C88FBD080A24C2F9D4C6FBB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number:          11F5
Signing time:             Thu 02 Jul 2026 11:01:31 +0000
Manifest this update:     Thu 02 Jul 2026 11:01:31 +0000
Manifest next update:     Fri 03 Jul 2026 11:01:31 +0000
Files and hashes:         1: 7JTMQURN2_pHQGeTlN5cBKnAiak.roa (hash: ArfyrR2wyEV/9BCepj0BUymEyLecGYVpjZ/467WPvZ0=)
                          2: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: XkavegUY3E/OHP4IC628ZDUr+9RTuF7rpRIzTqsvmao=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:b4:7c:88:fb:d0:80:a2:4c:2f:9d:4c:6f:bb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
        Validity
            Not Before: Jul  2 11:01:31 2026 GMT
            Not After : Jul  3 11:01:31 2026 GMT
        Subject: CN=855162e46dc9e51a365bfdfcf38f6be0e9c0750c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:2f:91:41:80:4d:4f:bd:41:b5:cf:30:db:
                    de:5c:fd:06:2a:4b:32:a8:82:8c:ee:fe:85:62:47:
                    23:c7:7a:41:63:93:d7:5e:1b:97:16:b1:e5:7c:99:
                    be:11:0a:ae:f9:52:9a:dc:01:b3:cf:a9:cb:fd:8c:
                    18:91:a1:a5:49:51:07:84:24:d7:30:9a:6c:4c:48:
                    3c:79:b1:f1:b1:19:1a:c6:7b:80:79:0a:17:13:15:
                    4e:63:48:1a:07:38:2a:dd:0c:52:c6:dd:8e:03:94:
                    eb:7c:1e:bc:3f:25:06:f9:20:70:f9:86:3c:d2:02:
                    ea:d1:e8:22:af:69:73:30:4f:1e:3c:4f:b6:2c:31:
                    1e:c1:04:60:3b:6d:44:c4:d2:b5:b9:b7:69:b9:c3:
                    10:aa:4a:8b:b9:69:1d:ea:36:20:06:d6:77:f0:6c:
                    d1:27:0c:96:a6:93:e1:c1:ed:16:d7:5a:31:64:61:
                    3f:86:9a:da:3f:c8:42:37:40:f8:d3:3c:9d:35:c7:
                    ed:88:b6:71:a1:45:70:7b:52:37:73:df:bd:c0:45:
                    56:c5:6f:ce:cb:14:b1:53:80:7e:49:92:f3:39:f1:
                    42:1b:02:71:bd:01:29:85:6e:34:f7:0a:01:35:4b:
                    09:46:17:d5:75:19:58:81:30:29:29:b8:9e:45:3b:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:51:62:E4:6D:C9:E5:1A:36:5B:FD:FC:F3:8F:6B:E0:E9:C0:75:0C
            X509v3 Authority Key Identifier:
                keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:37:94:dd:e1:3e:9b:eb:34:c9:94:dc:28:e5:c1:00:8d:
         e2:62:df:dc:0f:61:57:18:8e:49:9c:64:93:43:dd:ca:ea:74:
         67:b3:91:52:a5:f7:6b:45:2d:07:c8:c1:b9:f2:1a:7f:85:bc:
         4f:04:c9:0e:f8:50:7f:94:e0:05:eb:0c:64:2b:e9:ac:1e:af:
         17:25:5c:c9:8c:7b:4e:f3:1c:e1:4b:c2:11:b7:e1:24:28:6c:
         ff:fe:84:3b:db:2f:b2:b2:16:0b:5a:7d:d3:fe:59:f6:6f:20:
         09:95:54:65:bb:14:7b:15:a7:e7:b4:eb:ec:9d:c2:d3:d7:d4:
         b2:97:c0:56:ec:e4:a1:01:f3:f9:af:fe:be:e2:81:87:90:bf:
         f1:56:d0:c5:93:d9:87:13:06:87:8a:29:dc:5c:52:74:13:d2:
         41:60:35:d8:31:a1:44:12:dc:10:23:7e:dc:cd:4a:f5:b4:ad:
         8e:05:39:04:bb:14:fd:6d:ec:df:e9:eb:9f:3b:b6:13:ec:8b:
         95:54:e0:c2:6a:fe:66:d2:96:ea:a6:cd:9d:2f:25:9b:d1:c2:
         f9:b4:ff:02:fe:d0:02:b4:3d:82:47:5c:55:31:a7:ca:1d:8a:
         5d:a2:b8:fc:50:45:b9:bf:83:c6:f9:28:6b:15:01:4a:87:64:
         89:84:ee:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ifbR8iPvQgKJML51Mb7t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDc3MzU1ZGYxMWNkYmY5OTJmOTBkNjdlYWFiOTEwOWFi
OGViZjMwHhcNMjYwNzAyMTEwMTMxWhcNMjYwNzAzMTEwMTMxWjAzMTEwLwYDVQQD
Eyg4NTUxNjJlNDZkYzllNTFhMzY1YmZkZmNmMzhmNmJlMGU5YzA3NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uEvkUGATU+9QbXPMNveXP0GKksy
qIKM7v6FYkcjx3pBY5PXXhuXFrHlfJm+EQqu+VKa3AGzz6nL/YwYkaGlSVEHhCTX
MJpsTEg8ebHxsRkaxnuAeQoXExVOY0gaBzgq3QxSxt2OA5TrfB68PyUG+SBw+YY8
0gLq0egir2lzME8ePE+2LDEewQRgO21ExNK1ubdpucMQqkqLuWkd6jYgBtZ38GzR
JwyWppPhwe0W11oxZGE/hpraP8hCN0D40zydNcftiLZxoUVwe1I3c9+9wEVWxW/O
yxSxU4B+SZLzOfFCGwJxvQEphW409woBNUsJRhfVdRlYgTApKbieRTvt6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVRYuRtyeUaNlv9/POPa+DpwHUMMB8GA1UdIwQY
MBaAFCEHc1XfEc2/mS+Q1n6quRCauOvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjct
NDNiZjY1NWYzMzY1LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjctNDNiZjY1NWYzMzY1
LzEvSVFkelZkOFJ6Yi1aTDVEV2ZxcTVFSnE0Nl9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVo3lN3h
PpvrNMmU3CjlwQCN4mLf3A9hVxiOSZxkk0Pdyup0Z7ORUqX3a0UtB8jBufIaf4W8
TwTJDvhQf5TgBesMZCvprB6vFyVcyYx7TvMc4UvCEbfhJChs//6EO9svsrIWC1p9
0/5Z9m8gCZVUZbsUexWn57Tr7J3C09fUspfAVuzkoQHz+a/+vuKBh5C/8VbQxZPZ
hxMGh4op3FxSdBPSQWA12DGhRBLcECN+3M1K9bStjgU5BLsU/W3s3+nrnzu2E+yL
lVTgwmr+ZtKW6qbNnS8lm9HC+bT/Av7QArQ9gkdcVTGnyh2KXaK4/FBFub+Dxvko
axUBSodkiYTu9Q==
-----END CERTIFICATE-----