Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File:                     CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier:          SGeu0weUri3CCA34h55yZsrnasrUfuvXGRWqbrOqkgQ=
Subject key identifier:   89:7F:FF:C7:AA:03:8C:33:89:F2:C2:49:DA:4E:EC:8D:C0:89:47:D2
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer:       /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial:       019F2210196711E1453166A3605F8AD888D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number:          1991
Signing time:             Thu 02 Jul 2026 09:01:48 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:48 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:48 +0000
Files and hashes:         1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: LXL5PGzCQq06ZNgD2X03bfMz/jDrgKtcR3U9yGswDQY=)
                          2: Ut0-uMPrTscTaYNN4M5f0UoNfFM.roa (hash: Q8bHgGbUawg5ahVwAK4zt6L7o0niif+XBKxRalI2OOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:19:67:11:e1:45:31:66:a3:60:5f:8a:d8:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
        Validity
            Not Before: Jul  2 09:01:48 2026 GMT
            Not After : Jul  3 09:01:48 2026 GMT
        Subject: CN=897fffc7aa038c3389f2c249da4eec8dc08947d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:2a:f5:f0:d3:6f:bb:03:f3:70:73:06:19:
                    9e:57:00:24:c3:28:96:16:5f:64:eb:3e:f9:35:41:
                    6f:4b:f2:c9:5a:54:ff:34:ca:97:0d:e5:92:81:7e:
                    2f:f0:ce:0d:33:96:2d:87:f2:b3:b9:45:5a:b3:96:
                    19:8b:70:00:a2:9b:76:51:f8:37:8d:c3:8e:c6:24:
                    2c:ac:b1:7d:ca:49:d1:b6:66:b7:eb:da:e0:ca:34:
                    8e:cf:bc:03:24:e9:0d:27:c2:6f:75:6e:94:ee:a7:
                    bc:c1:cb:ee:5c:a6:bc:85:b1:e0:dc:0d:88:53:12:
                    ad:bb:97:2a:9e:70:80:30:d6:26:7e:57:77:7b:87:
                    75:a3:3f:9c:8f:24:28:f4:e2:60:3c:3d:83:ad:9a:
                    f9:1f:bb:2c:1a:ec:5a:b1:7a:50:03:1f:86:75:aa:
                    c3:11:12:bc:c9:50:b0:d4:a9:58:84:ab:29:ac:f5:
                    12:71:0f:6e:a5:33:74:3d:75:15:79:99:72:76:12:
                    aa:e0:79:1f:a0:e7:01:d8:3b:a8:6f:4c:4e:2b:4d:
                    b3:a9:4f:b0:71:a3:6b:3e:e9:e6:8d:36:fd:8c:9b:
                    2b:7e:73:ce:84:a4:a2:f2:c8:2b:df:70:99:0f:b8:
                    c8:1d:15:13:5e:e0:4b:0e:b4:f9:f1:fd:66:4f:7e:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7F:FF:C7:AA:03:8C:33:89:F2:C2:49:DA:4E:EC:8D:C0:89:47:D2
            X509v3 Authority Key Identifier:
                keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a2:12:0c:6e:3c:35:85:a9:83:99:84:76:2a:74:a3:64:fc:
         35:cb:e5:71:0a:97:a5:8f:e8:50:2d:64:44:37:e4:86:d8:7e:
         f7:b4:fb:65:78:72:88:a0:e6:00:f7:94:f6:52:60:2e:20:d7:
         ad:ad:3e:b3:08:7c:fb:fa:cc:31:19:f6:db:39:7b:af:4f:31:
         1a:ac:e8:b8:e4:64:3e:cc:82:2e:dd:9b:77:2e:8a:ec:e4:d2:
         74:25:98:fa:f0:22:ef:93:2d:59:61:0e:89:b1:bb:23:3d:01:
         3e:4e:2e:4e:3c:1c:21:09:3c:91:ce:09:04:30:05:49:04:8b:
         17:ac:6e:4b:bf:f0:bf:bc:65:bb:bc:83:5a:9c:c2:e6:77:7a:
         d2:c0:9b:e4:38:87:85:3a:91:80:76:fa:6d:34:db:f1:1d:a4:
         d3:49:39:83:b4:ac:03:95:bb:b5:90:ea:01:80:79:81:03:55:
         40:5e:65:cd:f8:34:5c:3c:8e:9b:2b:dc:c0:6e:9b:ca:d9:96:
         74:65:e1:a5:b4:8e:e3:86:85:f9:7b:70:e1:39:17:0d:c4:8b:
         e0:a7:75:78:21:03:4c:c8:e2:50:20:2e:fc:3f:c8:aa:db:ba:
         c8:7b:1b:bb:22:cb:ef:1a:70:76:cb:75:67:ac:48:80:ee:2e:
         2a:02:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----