Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
File:                     DRjKnIs9feaqzD0ULHfe9l2dmhM.mft (raw, json)
Hash identifier:          +ivJUXsXdMcIpUIZEL1YOc6drgpnWpPmOAHfZKAkH6o=
Subject key identifier:   B6:FF:A7:C9:79:0F:A3:BD:F0:88:B5:7C:A0:6C:F6:7C:0D:3D:1B:01
Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
Certificate issuer:       /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Certificate serial:       019D76331A98F6627FE38DF72D42BAB3C973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
Manifest number:          DA
Signing time:             Fri 10 Apr 2026 07:02:33 +0000
Manifest this update:     Fri 10 Apr 2026 07:02:33 +0000
Manifest next update:     Sat 11 Apr 2026 07:02:33 +0000
Files and hashes:         1: 2KkdgWDAF4hzaiY1ClltnwHEdhg.roa (hash: f4GrmKnz64SocslZcE+7ZEH4/5X2b7wq9TkKjq6HVmc=)
                          2: DRjKnIs9feaqzD0ULHfe9l2dmhM.crl (hash: Z7aLckacFCG4hKjIRZ6AD8HRcuy1Ka5hrC/puxD0RSY=)
                          3: ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa (hash: ZGB8JxWLMriUzpJGh2DaBjMMjMXaanV6HNWfgfO/KEc=)
                          4: fENZ45chq7I0lirDj-NqEzfJV48.asa (hash: Oziqs0HzmzOziXtI95DiC50goIAtPYUpO9KwNqQbRR8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:33:1a:98:f6:62:7f:e3:8d:f7:2d:42:ba:b3:c9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
        Validity
            Not Before: Apr 10 07:02:33 2026 GMT
            Not After : Apr 11 07:02:33 2026 GMT
        Subject: CN=b6ffa7c9790fa3bdf088b57ca06cf67c0d3d1b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:26:65:44:52:47:2e:a7:d2:40:e3:72:6d:
                    dd:1f:fc:a0:24:d5:d4:c1:44:3c:c8:43:4d:cc:a2:
                    b8:02:17:7d:6c:5c:67:ed:43:09:22:35:2b:ff:85:
                    4b:27:3c:d5:fd:df:79:6f:c2:1c:28:c3:c4:20:c5:
                    80:f9:f5:f0:27:69:6f:15:3d:0f:9c:ed:77:1b:4d:
                    77:30:68:da:2a:88:94:5c:2f:71:e3:ab:b3:c2:fe:
                    16:6d:64:94:50:b4:f7:44:16:c1:3d:d7:78:31:b2:
                    1e:64:62:eb:99:ba:34:24:d9:82:b1:fd:a9:14:4b:
                    f3:15:1f:4f:aa:63:88:e2:29:22:4d:d1:27:67:ad:
                    71:63:62:9a:b0:e1:ae:05:89:0e:f5:10:5e:81:f3:
                    79:d8:1e:91:74:b5:18:de:10:9f:eb:98:89:c5:c7:
                    57:c6:be:ae:cd:95:d0:b7:49:40:fb:fe:0c:67:f4:
                    04:7a:86:ec:bb:d9:b7:b3:4f:a2:1d:4f:21:ae:41:
                    fb:9c:31:6d:dd:df:70:2e:ab:70:ac:84:0e:76:f7:
                    e3:fc:d4:77:7e:3a:5c:a0:b3:9b:21:f5:7f:df:6f:
                    81:3c:55:b7:e1:1d:55:f5:dc:35:e3:94:a4:42:dc:
                    0e:3a:32:37:9b:cd:32:16:44:ca:1c:0e:6e:11:be:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:A7:C9:79:0F:A3:BD:F0:88:B5:7C:A0:6C:F6:7C:0D:3D:1B:01
            X509v3 Authority Key Identifier:
                keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cd:b9:03:05:aa:07:17:8d:f9:43:eb:f3:a7:e1:b0:2c:be:
         46:8f:ce:c0:02:1b:e8:65:af:2d:6e:a8:17:e2:4f:50:80:45:
         fa:df:46:d4:94:a7:12:58:d0:13:2c:4a:ac:64:af:90:9e:95:
         97:9b:b6:33:1f:dd:30:01:41:77:f5:87:ba:85:9a:e3:eb:32:
         57:02:af:19:ad:1a:b3:24:d8:18:fc:a3:a0:65:d1:5d:f2:6f:
         6a:f8:ed:09:8a:f7:f5:07:f7:ee:54:a9:b4:c8:30:44:11:27:
         7f:41:2e:3f:82:bb:66:cc:f7:de:db:ba:ec:dc:69:3a:f3:1f:
         12:28:09:30:27:e9:52:88:a2:e6:29:98:08:98:37:b2:3e:3c:
         3c:1d:04:27:b2:80:f4:07:c2:b2:73:9e:6a:84:b2:f7:27:eb:
         1d:a1:bf:24:df:69:0c:b4:a7:81:92:e3:99:81:39:41:92:3a:
         84:72:a2:d3:b4:9a:33:ea:7b:b0:a5:de:cc:97:62:3f:2b:ff:
         bf:0b:32:47:1c:99:52:fb:ae:c2:25:73:13:28:a2:04:64:d3:
         65:c7:4e:35:c6:ed:f7:b8:c4:4f:66:45:da:ed:ee:aa:64:da:
         14:bc:aa:37:12:54:87:eb:69:4f:67:3f:0a:e9:56:0d:d2:22:
         ae:4b:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----