Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File:                     ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier:          Vn9TdsdfdvuyoPYVAOZgFf21l3Bsac15Z6ewh1GtXzE=
Subject key identifier:   B1:65:F0:97:6F:8A:27:F0:A1:30:E5:DB:E9:1B:9B:11:31:60:15:18
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer:       /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial:       01A11ED25F2A6EB2263349058C2E9FEA1341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number:          0CD5
Signing time:             Fri 09 Oct 2026 04:01:05 +0000
Manifest this update:     Fri 09 Oct 2026 04:01:05 +0000
Manifest next update:     Sat 10 Oct 2026 04:01:05 +0000
Files and hashes:         1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: nU8MZu9ZmXRhXTiKjlQFPigwo+oAeLhVYkHi585g9Kc=)
                          2: sNdU_E9AeTRcV1tQUPKaysFTZxA.roa (hash: RsVC7/l8xCsWReH4ylGowvPT0B2fPTstrTBA1NPEml0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1e:d2:5f:2a:6e:b2:26:33:49:05:8c:2e:9f:ea:13:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
        Validity
            Not Before: Oct  9 04:01:05 2026 GMT
            Not After : Oct 10 04:01:05 2026 GMT
        Subject: CN=b165f0976f8a27f0a130e5dbe91b9b1131601518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:75:f1:15:e8:52:04:38:11:38:ee:25:40:
                    45:48:04:aa:6d:4f:6a:a8:df:f9:96:c8:ab:0f:88:
                    7b:9c:02:a0:e0:89:e4:d6:95:3b:2c:af:c1:60:ea:
                    41:fc:dd:22:ca:ed:0b:76:0a:05:b4:7e:75:5d:a4:
                    4b:84:59:87:81:37:98:c8:5a:d5:5b:1d:bb:16:f1:
                    75:fb:63:a3:ed:64:56:3e:60:91:71:e7:99:c0:3f:
                    55:44:e2:8d:14:34:8a:ad:31:d6:ac:86:70:e5:93:
                    01:8f:1e:32:2b:3a:3a:d8:fa:04:c3:0c:0b:e8:a4:
                    ea:2e:4d:6d:4b:f6:12:bd:4d:64:2a:61:58:5c:25:
                    d2:d1:99:72:1a:c8:9a:c6:f8:15:d6:89:a0:4b:f6:
                    da:e0:41:5c:8d:b6:d2:25:af:00:7b:de:94:5e:63:
                    11:d4:a7:71:1b:09:d0:97:e7:b2:a5:aa:b2:04:04:
                    f0:a2:c7:5c:bd:06:17:bf:65:f5:e5:ff:bb:3d:0f:
                    0d:89:09:90:b5:09:c2:de:09:52:83:d6:f6:fb:4b:
                    05:2e:c1:7f:62:b9:1f:f6:45:25:9e:43:09:9b:f6:
                    80:cc:59:a6:21:7c:e7:ea:4d:cc:22:01:a3:7e:fa:
                    2d:ef:fe:7a:ee:77:14:98:99:92:6d:86:05:f2:33:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:F0:97:6F:8A:27:F0:A1:30:E5:DB:E9:1B:9B:11:31:60:15:18
            X509v3 Authority Key Identifier:
                keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:85:62:25:dc:5b:2f:6b:64:f4:b0:38:cd:ba:b5:8c:78:5d:
         30:23:c6:18:47:ed:9d:dc:9a:00:f3:27:79:59:d3:a4:92:17:
         da:44:c6:bc:25:9c:02:64:9a:00:2b:99:6f:5b:59:98:23:cc:
         95:d1:42:5d:e4:f2:d0:15:a7:b1:c6:8b:28:8d:79:db:fc:2d:
         cf:23:23:be:31:35:64:80:aa:e5:0d:f7:21:66:f2:9b:50:16:
         d1:a7:8a:ee:b7:7a:c1:fd:49:ad:08:24:8b:1c:d5:22:21:72:
         1d:f1:07:f8:4b:6d:95:fb:b8:04:e8:37:3c:e8:56:11:39:f3:
         4f:65:bb:94:39:f6:91:82:e6:26:b5:08:84:e5:f3:e9:2b:3c:
         8e:55:ca:e6:ef:8f:a8:f4:55:80:df:cb:9d:74:6e:a5:e4:9a:
         38:f1:38:3a:ad:32:35:de:db:62:58:b7:ed:f5:c0:f9:51:5c:
         04:63:08:33:95:8d:8e:dc:29:48:97:75:da:6f:fe:c5:57:07:
         0f:c1:6c:a9:ec:0d:02:12:66:c2:5c:1c:98:d0:ce:a4:5e:4b:
         19:4a:3e:b7:f5:bd:7b:c2:13:ab:ac:d3:74:56:3e:fa:50:db:
         db:cd:ac:d2:f8:2e:36:66:2d:06:8f:4a:4f:48:ef:16:8c:fe:
         04:eb:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----