Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File:                     pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier:          p76NP6lH3I9D/eYyjXA9EZcPdKr0T5jiyp3ZIcsKy5E=
Subject key identifier:   4D:57:BA:E8:F3:21:05:15:38:41:9E:9C:F2:0F:27:2D:0D:1D:AC:60
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer:       /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial:       01A0A9054DC1DE692E265AD7B97E52630F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number:          10A6
Signing time:             Wed 16 Sep 2026 07:01:32 +0000
Manifest this update:     Wed 16 Sep 2026 07:01:32 +0000
Manifest next update:     Thu 17 Sep 2026 07:01:32 +0000
Files and hashes:         1: _lqYoZCtbgCjPqgBQS1sChiV3po.roa (hash: DngSWjpo0gMX1VJjUcfS5UeVdo84wIcXiRvQtRs7PEI=)
                          2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: Px6B2eUBbulZB64gjQaIxQD/+/Vvnd3Qe/5AKbpRnDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a9:05:4d:c1:de:69:2e:26:5a:d7:b9:7e:52:63:0f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
        Validity
            Not Before: Sep 16 07:01:32 2026 GMT
            Not After : Sep 17 07:01:32 2026 GMT
        Subject: CN=4d57bae8f321051538419e9cf20f272d0d1dac60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:de:01:15:f4:3e:41:a4:3e:7d:ad:32:a5:
                    ec:c1:87:d1:e2:86:91:2a:c7:b1:82:9a:71:1b:8a:
                    ba:e0:6f:4f:00:0a:a6:68:62:76:aa:b7:0a:ca:65:
                    55:14:be:55:16:b3:a8:2e:b3:65:e6:ef:5a:c2:ed:
                    7f:5f:02:c9:ce:25:a3:55:0f:af:ff:96:42:41:33:
                    3e:23:bb:b7:c8:b7:aa:55:2d:84:d4:13:27:5a:88:
                    c5:7f:94:82:4d:18:e6:b4:3c:85:a6:7f:3f:ca:3f:
                    f8:20:5b:80:e9:07:90:08:a5:48:99:8b:86:ce:ab:
                    64:31:1d:04:1f:17:59:de:ad:1b:c6:08:67:56:25:
                    8f:c1:6a:fa:08:7f:be:51:90:87:ed:65:63:ee:cb:
                    5f:50:d6:ed:6a:5b:1f:74:c2:da:ad:ad:7e:24:d1:
                    e8:38:60:a3:9d:3f:98:e2:fc:0f:1e:f5:0e:37:3a:
                    a4:bd:17:78:bd:c5:43:b4:fc:30:f2:62:bc:d7:40:
                    24:60:fa:ca:21:00:69:2c:17:84:c9:b7:03:5b:9c:
                    81:2a:2f:d3:bc:14:61:fd:db:e7:11:2b:36:a3:8d:
                    c5:c6:ca:49:b4:00:4a:e7:82:6c:02:08:75:f9:05:
                    85:f7:0f:39:d2:6d:c2:0f:a9:5d:72:17:34:ab:e6:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:BA:E8:F3:21:05:15:38:41:9E:9C:F2:0F:27:2D:0D:1D:AC:60
            X509v3 Authority Key Identifier:
                keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:17:2d:cd:de:ed:4a:64:a4:70:4d:0a:e8:87:13:5e:f6:ca:
         44:71:fb:2d:83:ee:3c:b5:51:a5:00:df:4e:53:59:d7:f5:bc:
         ed:2a:81:35:51:ec:93:b7:47:18:8f:a0:fb:9f:6c:05:d2:9d:
         0c:12:33:7e:2b:8a:e6:53:51:3d:68:bb:38:ae:0b:c0:15:86:
         a9:9b:a6:b3:d5:74:05:52:a4:33:f8:8e:0e:35:27:39:3c:32:
         65:e0:fd:63:79:a5:ec:7a:2b:78:46:d3:5b:06:75:79:4e:46:
         dc:40:26:51:76:14:6a:81:0a:4b:8a:c6:e9:8b:d9:a9:06:63:
         ea:cb:c5:89:9d:4f:c6:f5:34:f0:d0:8a:e4:61:44:f1:61:3d:
         01:e7:e5:21:3c:fa:97:7b:11:ac:ae:38:5d:f3:fc:98:c2:22:
         14:6e:bb:a1:38:22:df:d3:9b:7b:81:5f:ec:2e:01:b8:56:7a:
         d3:7e:8b:96:2d:fd:a6:ab:71:17:ea:f4:63:19:a3:d1:3c:73:
         12:fe:7a:05:1d:df:eb:cc:30:7e:ef:8d:70:24:62:8a:92:06:
         b8:40:f5:d1:5e:77:4c:9b:bb:40:b3:a2:01:f0:18:ef:83:e9:
         6e:53:4e:e9:ec:56:33:28:4a:d7:0f:73:45:79:6a:3b:6a:d3:
         1e:ae:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----