Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File:                     Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier:          ScnDi9jiOgmmD9ISehVdgZtQlN1wEEkZhLz1rn3f6n4=
Subject key identifier:   9B:90:71:88:CE:D9:75:7C:4F:0D:57:5F:34:ED:57:07:71:69:D9:FE
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer:       /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial:       019EF8A5643B5D36D6A14E275FABEA42ECDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number:          1977
Signing time:             Wed 24 Jun 2026 08:00:49 +0000
Manifest this update:     Wed 24 Jun 2026 08:00:49 +0000
Manifest next update:     Thu 25 Jun 2026 08:00:49 +0000
Files and hashes:         1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: yIIwOwojNjnIb5OlJeaHvnus46vj39TxVGaemrx0glI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:a5:64:3b:5d:36:d6:a1:4e:27:5f:ab:ea:42:ec:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
        Validity
            Not Before: Jun 24 08:00:49 2026 GMT
            Not After : Jun 25 08:00:49 2026 GMT
        Subject: CN=9b907188ced9757c4f0d575f34ed57077169d9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:c1:cb:94:d4:56:5f:d3:fb:b2:bc:87:6c:
                    a4:94:d3:2d:e9:3c:2d:68:08:41:70:31:0c:88:83:
                    1c:ac:18:ff:23:97:2d:e3:a3:96:d9:15:51:90:b6:
                    bb:35:b0:df:e0:fc:43:84:de:5c:5f:63:61:44:e4:
                    17:7a:07:8d:dc:d5:a5:53:f9:06:85:fd:a5:47:34:
                    1b:4a:8e:69:3d:34:77:3e:54:62:80:57:bc:d2:3d:
                    31:08:85:b2:a1:ce:58:24:7b:a9:12:8d:40:21:73:
                    d0:91:03:6e:63:1e:fb:66:06:61:58:f5:df:fb:c3:
                    14:e6:21:59:f4:8a:fa:54:35:e0:a0:ef:41:8d:b9:
                    e6:4e:e2:3a:60:78:35:10:cc:bf:6f:f2:56:05:ee:
                    29:01:08:b6:0f:e1:ee:32:4a:0a:ee:98:70:02:56:
                    8e:00:d8:40:b0:4e:23:6a:9c:d8:2d:6a:73:34:85:
                    8a:12:2d:6f:69:62:a2:f3:b0:f4:70:cd:9d:6c:09:
                    38:25:5e:71:c6:b0:30:bf:ac:96:31:97:19:4d:04:
                    ef:09:da:80:07:a6:b2:0b:93:23:c1:52:c2:55:96:
                    d3:88:c9:40:63:7a:bf:ac:f9:45:33:33:68:b0:9d:
                    6a:75:d2:ed:44:ca:1e:e6:ea:9b:83:87:75:b1:44:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:71:88:CE:D9:75:7C:4F:0D:57:5F:34:ED:57:07:71:69:D9:FE
            X509v3 Authority Key Identifier:
                keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:91:43:da:8a:8c:f1:36:13:2a:a0:04:98:a2:d6:65:15:6f:
         cf:90:44:91:b6:7b:b4:8d:bf:50:83:b6:82:e6:69:6d:17:c7:
         3d:6f:60:59:95:bc:4b:b5:19:60:59:f4:76:5f:ef:20:54:61:
         6a:43:3a:47:14:d8:14:c4:30:2b:27:43:88:fe:8b:21:4d:bf:
         d9:6d:76:a8:b7:c5:20:2a:b1:7d:8c:f1:44:ec:90:b6:b1:c4:
         6e:7e:e0:99:aa:4e:5d:11:7b:d5:56:1e:ad:64:66:74:f5:8b:
         30:a5:3a:c9:92:0c:f4:96:a2:37:80:39:cb:25:73:29:e2:34:
         97:28:35:ce:e1:91:79:27:d2:f3:08:be:6b:da:e7:fc:57:96:
         9f:83:90:a1:89:b1:3c:a2:f7:81:41:ed:ef:00:d7:23:8a:8c:
         57:f3:e2:d5:ef:11:46:3f:aa:fe:f6:15:03:2a:be:41:5b:81:
         70:80:0b:18:66:3d:91:85:7e:57:f7:02:41:a6:15:8a:a7:bc:
         1a:17:78:0e:9e:b8:24:8e:da:f9:b8:5c:c5:fe:48:ed:8c:e5:
         84:43:0d:0e:56:28:9b:da:44:1e:21:45:af:91:06:b5:72:24:
         8a:ea:3f:7d:4c:c1:cd:e7:9c:7e:be:dc:13:2c:5b:a8:34:c7:
         83:c8:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----