Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File:                     sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier:          TUDlyArzQkVZ38T2tZ44sTL/ZGuAMY+Iy13iUFw8ejQ=
Subject key identifier:   1A:2D:85:81:A4:9A:47:C4:E7:4B:32:45:68:B3:60:F3:EE:A6:43:6E
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer:       /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial:       019F2247E680979D8CB3F99DF9C0E879B60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number:          1921
Signing time:             Thu 02 Jul 2026 10:02:45 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:45 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:45 +0000
Files and hashes:         1: 9y3JK83GAsm13D0YffuSXVmKNYo.roa (hash: mRnoN4uYmedrpU7jo9ReZ2AadwnL5SQlW0OFJSUdrsE=)
                          2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: qSzCRaOKPFeh2AIAWD3H8dWLffkfbdLX7zZ/ByNraLs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:e6:80:97:9d:8c:b3:f9:9d:f9:c0:e8:79:b6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
        Validity
            Not Before: Jul  2 10:02:45 2026 GMT
            Not After : Jul  3 10:02:45 2026 GMT
        Subject: CN=1a2d8581a49a47c4e74b324568b360f3eea6436e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:60:c1:1d:6f:30:44:12:38:c4:81:ca:a9:
                    70:e9:e4:b9:78:93:92:bb:94:1d:88:6c:e8:47:ed:
                    57:b7:5c:c8:b7:ed:e3:67:f8:1a:ea:ed:0d:3f:a3:
                    63:f9:2a:d5:99:a4:5a:17:cd:c6:2b:d2:db:cb:3a:
                    ed:61:10:3d:23:83:01:4f:6b:e9:34:e8:1a:86:80:
                    f2:0f:93:99:6a:9c:e4:cd:6c:40:a7:01:5f:67:00:
                    5a:40:75:80:6d:85:da:59:1d:05:99:b9:ca:ba:b8:
                    0c:1a:56:e1:cd:7e:1f:55:f9:85:2b:96:e4:df:1d:
                    f9:55:7c:02:52:d3:94:bd:d9:45:9f:b8:05:77:70:
                    06:a7:e8:7d:1b:b3:15:64:04:5a:13:f8:43:22:1e:
                    41:d4:b6:48:cc:82:54:57:60:30:10:c8:35:87:9b:
                    15:7c:7e:4b:61:de:07:93:44:7c:65:77:1b:33:e1:
                    18:92:a7:80:aa:ae:c1:cc:8b:fd:fd:75:43:9a:4d:
                    67:08:4c:a2:e3:f4:d6:ee:24:dc:27:05:1e:b6:f2:
                    87:ef:5d:12:51:62:61:5b:84:8e:b8:88:0e:3f:8e:
                    6d:42:9a:52:cf:e1:0c:36:3f:27:64:a9:ea:12:38:
                    c0:71:9e:ea:02:6e:94:e2:6e:6d:62:37:03:6a:87:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2D:85:81:A4:9A:47:C4:E7:4B:32:45:68:B3:60:F3:EE:A6:43:6E
            X509v3 Authority Key Identifier:
                keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:c6:c2:27:b8:18:ba:4c:a7:7b:48:ea:c8:34:9e:70:97:
         12:b9:94:46:17:ac:7f:24:0c:91:1f:36:4d:30:a6:b1:42:85:
         7a:95:8c:b5:25:96:31:fa:c4:89:1d:0b:07:c1:c8:46:6a:11:
         80:21:a7:15:db:29:5a:1d:19:4d:2e:93:a1:f9:fd:8f:d9:ec:
         8d:5d:40:28:c5:aa:54:f0:c2:62:b8:84:f5:a9:cd:51:2a:8f:
         a7:49:8a:5b:21:d7:24:5b:ce:0b:c6:67:ac:25:9f:6e:ec:3c:
         30:8f:85:e2:f1:4d:5f:b7:2d:1c:f7:85:45:43:3a:2b:b3:82:
         e7:08:7c:4d:ff:35:76:09:a4:31:43:82:cd:ce:0b:bf:b5:17:
         2f:c5:52:d6:3e:72:2a:bc:83:3d:1c:94:74:f9:64:02:da:ee:
         c8:86:f8:7a:54:09:ef:0a:61:64:7e:0f:fb:ef:46:16:9d:fa:
         9c:7d:b7:f6:18:e4:87:85:c2:9b:de:ab:a8:9c:74:57:29:91:
         e1:46:80:3b:a7:f7:7c:0b:e9:29:25:80:e9:a2:df:f2:f3:07:
         38:68:8a:c6:81:c9:03:28:81:00:18:3e:29:71:21:29:a7:a5:
         cd:80:95:5b:f9:97:39:e2:8d:3a:f0:27:90:fc:71:09:8d:b5:
         e6:e2:b6:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iR+aAl52Ms/md+cDoebYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwODA5ZGMwN2JjMDc3NTE5OGYyZjMxNTU0MTUyZjM1NmE4
M2Y3NzAwHhcNMjYwNzAyMTAwMjQ1WhcNMjYwNzAzMTAwMjQ1WjAzMTEwLwYDVQQD
EygxYTJkODU4MWE0OWE0N2M0ZTc0YjMyNDU2OGIzNjBmM2VlYTY0MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1hgwR1vMEQSOMSByqlw6eS5eJOS
u5QdiGzoR+1Xt1zIt+3jZ/ga6u0NP6Nj+SrVmaRaF83GK9LbyzrtYRA9I4MBT2vp
NOgahoDyD5OZapzkzWxApwFfZwBaQHWAbYXaWR0FmbnKurgMGlbhzX4fVfmFK5bk
3x35VXwCUtOUvdlFn7gFd3AGp+h9G7MVZARaE/hDIh5B1LZIzIJUV2AwEMg1h5sV
fH5LYd4Hk0R8ZXcbM+EYkqeAqq7BzIv9/XVDmk1nCEyi4/TW7iTcJwUetvKH710S
UWJhW4SOuIgOP45tQppSz+EMNj8nZKnqEjjAcZ7qAm6U4m5tYjcDaoeqZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBothYGkmkfE50syRWizYPPupkNuMB8GA1UdIwQY
MBaAFLCAncB7wHdRmPLzFVQVLzVqg/dwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzkt
OWExYWIxMWFiZGVkLzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzktOWExYWIxMWFiZGVk
LzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMjGwie4
GLpMp3tI6sg0nnCXErmURhesfyQMkR82TTCmsUKFepWMtSWWMfrEiR0LB8HIRmoR
gCGnFdspWh0ZTS6Tofn9j9nsjV1AKMWqVPDCYriE9anNUSqPp0mKWyHXJFvOC8Zn
rCWfbuw8MI+F4vFNX7ctHPeFRUM6K7OC5wh8Tf81dgmkMUOCzc4Lv7UXL8VS1j5y
KryDPRyUdPlkAtruyIb4elQJ7wphZH4P++9GFp36nH239hjkh4XCm96rqJx0VymR
4UaAO6f3fAvpKSWA6aLf8vMHOGiKxoHJAyiBABg+KXEhKaelzYCVW/mXOeKNOvAn
kPxxCY215uK2tQ==
-----END CERTIFICATE-----