Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File:                     zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier:          wm7vk//Rx9PetGVO8BK1SVgpQEjVogJ08WdhipbPjoo=
Subject key identifier:   70:F1:E7:C7:42:87:69:32:C8:5A:C6:7B:45:3B:48:5B:6F:14:35:A7
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer:       /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial:       01A0EB1D00BE5BCF7AF49494E0507B2C68BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number:          1741
Signing time:             Tue 29 Sep 2026 03:02:21 +0000
Manifest this update:     Tue 29 Sep 2026 03:02:21 +0000
Manifest next update:     Wed 30 Sep 2026 03:02:21 +0000
Files and hashes:         1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
                          2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
                          3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: AMvYi3VPt1qc16t7VdzMnrSIhtsAhpOc7gBoNNhdUhs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1d:00:be:5b:cf:7a:f4:94:94:e0:50:7b:2c:68:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
        Validity
            Not Before: Sep 29 03:02:21 2026 GMT
            Not After : Sep 30 03:02:21 2026 GMT
        Subject: CN=70f1e7c742876932c85ac67b453b485b6f1435a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:31:4f:43:f3:f1:32:07:3f:d0:c2:1d:f1:
                    6d:b6:cc:c3:da:0d:e5:26:16:03:8e:c9:42:47:0b:
                    e6:06:b7:35:75:7d:45:87:ac:f8:c5:bb:40:b4:6c:
                    df:c6:be:ac:36:67:81:e9:d0:3b:ce:14:3d:7b:19:
                    28:d4:8f:45:ec:4b:0d:c4:23:29:e6:19:3f:5a:41:
                    c9:63:24:50:0c:64:97:8d:2d:07:84:8c:14:74:4c:
                    4a:a5:55:64:bf:69:29:12:3f:b7:93:d9:e2:f6:c2:
                    9a:7a:31:82:9d:bd:5a:4b:a2:02:97:71:9e:ce:b2:
                    4b:79:0e:02:c4:1f:61:27:19:87:8c:07:17:57:18:
                    81:7d:c2:c0:71:20:c8:c0:95:b2:60:cc:a3:7b:a5:
                    f4:d9:a2:48:63:ef:d3:26:6c:16:67:02:f6:7c:84:
                    12:c2:61:8b:cd:e0:76:59:62:06:7d:8e:8a:73:46:
                    02:2d:74:c6:d3:b3:6e:a5:ec:32:dd:20:ad:a6:f0:
                    7a:c7:d4:72:5f:79:77:f3:d0:d7:36:f0:1d:c7:31:
                    1a:d4:1c:1c:a5:8b:29:d5:c8:3d:b6:34:d5:ca:35:
                    68:4d:7e:1d:dd:07:a2:26:11:20:73:ba:2b:18:19:
                    6b:76:c1:93:05:7a:5d:65:86:4c:4c:60:db:3b:0a:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:E7:C7:42:87:69:32:C8:5A:C6:7B:45:3B:48:5B:6F:14:35:A7
            X509v3 Authority Key Identifier:
                keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5d:76:eb:6e:00:59:62:1b:eb:84:0e:a8:c8:d2:c2:c5:d3:
         e4:cb:ea:cf:08:cf:d5:6b:90:6c:ce:cb:d1:86:24:6e:a2:4e:
         46:9e:23:03:fa:cf:c5:66:1d:c0:84:2d:f2:f3:07:02:dd:8f:
         9a:23:7d:6c:44:99:4d:da:5d:c5:2b:b0:55:93:3c:2f:22:7e:
         ae:c6:02:b9:ba:a1:fc:31:d6:b8:a3:3a:35:ba:bc:c7:c4:8c:
         8f:43:ff:f4:fe:03:b6:ff:34:2a:08:2b:88:26:42:de:17:1d:
         cc:65:ee:22:d2:4f:08:4b:02:bb:37:a1:7b:9f:26:f3:8f:8b:
         74:71:83:4c:1d:05:1a:46:7d:fd:74:02:89:66:7c:ce:06:cb:
         2c:b5:bf:e3:bf:51:1d:22:9a:b9:6d:d8:d6:1d:d9:79:ad:bb:
         87:70:27:cb:26:9b:4b:a7:5a:04:43:0e:bd:c7:2b:c7:fa:5e:
         74:22:68:84:cd:71:74:86:c3:63:2a:53:18:c7:83:ff:62:1c:
         7d:dc:76:d5:b8:67:79:65:78:16:f8:1e:f6:c8:fa:ad:60:0d:
         7d:aa:73:e4:a6:ef:a6:c8:09:dc:a2:1c:da:42:5f:23:1c:cf:
         8b:86:13:cb:5e:50:f5:0a:93:9e:77:78:f5:1b:fd:37:33:e2:
         0d:d7:97:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----