Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File:                     A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier:          SRxi1OzxnwMcZ1Tc/9OrH3KYpofok8hJZzSesVk5ebI=
Subject key identifier:   CB:74:34:37:D4:87:B2:F5:41:7B:3C:92:00:B5:6C:0E:71:46:F4:94
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer:       /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial:       019F21D9D643800010EB00ABDF0E6BEF17F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number:          198E
Signing time:             Thu 02 Jul 2026 08:02:31 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:31 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:31 +0000
Files and hashes:         1: 0MNGAZUUNjR2AV-ek0PDQn2wUCE.roa (hash: 8H57+PeobxY5q4354tJUqqe2m0QVzVAnrh/RpneOONI=)
                          2: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: LFVK5EnHZGPGfeVWJHURNf4lUGK0Hwq13DOJHjlXHi4=)
                          3: O8GNRrFgoV9nUFEET24AKrFD4hc.roa (hash: PjMa+XecFOAlP0lZIGes0ro9tCfVA4vx5agJFTI4cnk=)
                          4: fmO_cJJIWL7br-OZ8uK1pYf79R0.roa (hash: h4lYHROqYC4qC7Eq3rmsQYBSXX0qs6JnTQffOn1CDgA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:d6:43:80:00:10:eb:00:ab:df:0e:6b:ef:17:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
        Validity
            Not Before: Jul  2 08:02:31 2026 GMT
            Not After : Jul  3 08:02:31 2026 GMT
        Subject: CN=cb743437d487b2f5417b3c9200b56c0e7146f494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:26:79:a5:e4:07:22:f7:8e:18:ef:89:d1:
                    2f:95:a0:1d:16:c9:ab:1e:d7:13:4c:19:9e:7e:56:
                    12:23:59:8a:20:3d:a0:3e:b0:47:d6:8d:32:55:5f:
                    d5:c1:2c:a4:83:77:c3:32:c9:3d:ab:6a:5a:79:79:
                    bd:30:61:67:06:bc:dc:d6:fe:06:69:b2:38:d2:a2:
                    c0:d8:5a:02:9f:a9:32:02:38:6a:c2:aa:88:c2:ee:
                    83:fb:c4:16:5a:52:78:bc:0b:9b:fd:9e:71:3e:33:
                    dd:3c:43:28:fc:d3:64:dc:ee:4a:81:05:d1:c4:63:
                    46:bb:3a:6b:52:de:a8:68:c0:f0:1b:3e:e1:d3:d8:
                    b5:23:87:73:d6:cb:b4:da:78:e7:30:53:3f:1f:32:
                    7b:18:90:5b:ed:2d:16:87:b1:f1:09:7c:90:35:ae:
                    d8:19:7c:f1:04:fa:f0:31:75:00:19:e1:29:c9:a0:
                    e2:12:5e:6d:db:43:d4:66:a9:94:b1:e2:93:d5:3f:
                    1d:a1:91:6e:8b:da:ad:0f:ce:67:35:8b:19:01:7e:
                    28:83:ed:21:e8:e9:95:34:b6:c1:d7:4f:0b:d1:1f:
                    90:a3:1b:ae:94:97:71:36:16:17:ad:ec:d8:77:39:
                    f5:70:55:f4:57:c3:a3:c0:e1:57:10:a1:fd:ac:58:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:34:37:D4:87:B2:F5:41:7B:3C:92:00:B5:6C:0E:71:46:F4:94
            X509v3 Authority Key Identifier:
                keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:6f:ae:18:46:af:90:d3:63:d6:58:04:cc:95:a7:d1:db:
         a7:dc:64:20:88:91:71:35:1f:8e:65:17:68:e2:e2:b8:6a:2e:
         c5:ae:38:de:7c:03:61:fc:b8:2f:05:e4:b5:62:d7:f0:33:cb:
         b1:3e:8a:c7:d7:cd:35:68:3a:bf:cf:83:76:5e:a4:10:d5:3a:
         3b:dd:f7:51:6a:75:54:d6:4f:b6:06:9c:dc:c5:90:84:78:67:
         a4:4b:d2:0e:e4:64:96:9e:04:a9:12:a6:33:0a:4a:c2:f9:58:
         1b:89:d9:ad:67:f7:47:3b:98:73:4a:ef:40:1d:6e:5e:98:ea:
         a2:d5:a9:74:95:01:0e:46:93:3d:59:7c:be:83:fa:95:be:cb:
         cd:af:18:a6:cd:59:90:3a:f9:fe:7a:e4:4e:c5:aa:57:8a:48:
         b1:54:88:de:87:d6:b9:a3:32:c1:a5:06:99:b3:a5:0e:06:37:
         97:3d:60:23:e4:6a:04:f5:bd:37:b7:59:5e:3f:be:3c:bd:61:
         90:e0:cb:07:16:d9:d0:77:76:59:7d:91:a4:fe:32:df:ea:7d:
         42:cd:a0:00:4f:04:d0:a2:5c:fe:ef:74:ce:75:80:74:2f:ab:
         a7:d3:10:db:ea:1d:31:ba:29:49:bb:70:d7:46:d2:6a:d3:68:
         83:1a:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----