Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File:                     rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier:          RcFebf4juWKS/L4T4PG9xIPjSaot76wumB6wlK6ou8U=
Subject key identifier:   E1:FB:92:BE:64:C7:0E:48:0F:32:83:53:09:CC:C1:CB:48:78:79:EB
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer:       /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial:       019F22EC51EC4971FFE61BFFE9AE8E6741B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number:          198F
Signing time:             Thu 02 Jul 2026 13:02:20 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:20 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:20 +0000
Files and hashes:         1: DKnBvGIE9iqjrZPZMqeWH0unajs.roa (hash: TT/s0k//yUcEj92PO7ED9oag8g35ZTDpkDcHBo8y524=)
                          2: p4WliZo-ae5PgJyIeuO1e3wlvlI.roa (hash: ombqIru3embeAfMDx9DKYU09jpQfC3EPauM5pHbeNC4=)
                          3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: OQI7tpxzMN+2s25fUh5h+5ky7zI0KV+Z/sQfC9aQfHE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:51:ec:49:71:ff:e6:1b:ff:e9:ae:8e:67:41:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
        Validity
            Not Before: Jul  2 13:02:20 2026 GMT
            Not After : Jul  3 13:02:20 2026 GMT
        Subject: CN=e1fb92be64c70e480f32835309ccc1cb487879eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:09:b6:5c:60:37:36:57:69:7f:1b:1a:07:
                    51:e8:3a:4a:83:6e:71:60:0d:5f:26:f1:41:f2:2f:
                    a4:27:b5:ab:c9:05:ea:1c:25:b4:ba:5a:57:0d:d6:
                    be:7e:4c:79:06:d7:b5:27:e1:a9:c2:e2:e0:87:94:
                    81:95:20:dd:3d:83:ca:39:b5:00:89:81:f4:0b:dd:
                    11:0a:15:32:b1:bc:9a:2d:09:38:61:fd:b8:f9:41:
                    b6:44:d9:38:bb:d9:9d:c8:10:e7:dc:a2:35:ee:b8:
                    cb:c9:bf:79:8f:45:f8:67:15:ac:6f:e1:8c:5a:9c:
                    44:33:7d:94:16:21:b7:07:e6:4e:d3:da:6d:a1:a6:
                    21:50:e1:9a:77:36:dc:fd:fa:7e:b5:2a:36:22:a8:
                    30:a8:02:55:db:9b:77:f3:e9:6b:be:b5:ec:5c:95:
                    8b:e4:9c:4d:d0:ea:02:5a:f6:03:c8:1b:90:9d:22:
                    b1:c7:4f:c1:40:3e:ea:ba:9b:d4:dd:ad:27:05:c3:
                    03:0b:26:98:bb:09:d7:50:c8:80:44:41:39:b4:35:
                    e8:09:25:07:07:91:b7:ae:92:21:11:44:f9:ce:34:
                    0c:78:ff:53:ff:fe:09:0e:46:d6:e6:61:dc:16:86:
                    f7:cd:d4:89:dd:25:b8:92:cc:cc:26:00:17:a2:3c:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:92:BE:64:C7:0E:48:0F:32:83:53:09:CC:C1:CB:48:78:79:EB
            X509v3 Authority Key Identifier:
                keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f7:31:5c:00:bb:c9:2e:0f:23:fd:8d:52:70:2e:10:dc:fb:
         76:5a:14:a6:4f:67:57:e5:32:d9:03:1a:4f:a2:c4:54:88:e1:
         6e:40:28:c4:b8:d0:2d:b2:b0:25:dc:a5:e4:29:c5:f9:99:9a:
         11:34:bf:b1:a1:7d:bf:e4:bd:b2:c7:3e:52:ee:d9:86:a3:a9:
         b0:65:48:63:1d:09:54:46:e0:d8:a1:ee:9b:7c:34:e0:eb:eb:
         13:20:92:11:eb:e1:63:3b:a4:b0:6f:1a:6d:49:bb:36:69:b0:
         f7:72:79:27:a3:be:7f:b8:9b:6c:84:1d:c8:ba:a2:9c:7b:87:
         4d:db:23:0e:96:b6:48:11:15:28:b4:1d:16:68:b2:2d:f1:f7:
         1a:b6:d7:39:c3:32:85:6c:a4:0c:e6:98:f3:c3:bb:b3:81:5f:
         90:c3:12:d0:36:bb:0c:2b:7b:fe:a3:0b:30:9f:74:e2:6d:22:
         4b:e0:ed:59:bf:7c:44:64:23:8d:5b:5a:b8:32:b2:b5:98:49:
         25:ec:ed:2b:79:62:77:b6:ec:a8:e7:f9:79:af:b2:a4:f8:9d:
         c2:7a:74:a3:42:60:e7:4d:65:a2:7a:78:c5:46:1f:91:0a:4b:
         db:5e:28:1f:0c:1d:9b:99:d4:29:d0:c5:84:b0:55:76:44:01:
         c0:e2:5a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8i7FHsSXH/5hv/6a6OZ0GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZGUyMzU4ZjU3NDM5YzQ0ZjZiMTY2MmY1NTYxNWEwYWFi
NmJhY2IwHhcNMjYwNzAyMTMwMjIwWhcNMjYwNzAzMTMwMjIwWjAzMTEwLwYDVQQD
EyhlMWZiOTJiZTY0YzcwZTQ4MGYzMjgzNTMwOWNjYzFjYjQ4Nzg3OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWMJtlxgNzZXaX8bGgdR6DpKg25x
YA1fJvFB8i+kJ7WryQXqHCW0ulpXDda+fkx5Bte1J+GpwuLgh5SBlSDdPYPKObUA
iYH0C90RChUysbyaLQk4Yf24+UG2RNk4u9mdyBDn3KI17rjLyb95j0X4ZxWsb+GM
WpxEM32UFiG3B+ZO09ptoaYhUOGadzbc/fp+tSo2IqgwqAJV25t38+lrvrXsXJWL
5JxN0OoCWvYDyBuQnSKxx0/BQD7qupvU3a0nBcMDCyaYuwnXUMiAREE5tDXoCSUH
B5G3rpIhEUT5zjQMeP9T//4JDkbW5mHcFob3zdSJ3SW4kszMJgAXojxMGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH7kr5kxw5IDzKDUwnMwctIeHnrMB8GA1UdIwQY
MBaAFKzeI1j1dDnET2sWYvVWFaCqtrrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2Mt
ZGQ5OWQzOTdlNGQ2LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2MtZGQ5OWQzOTdlNGQ2
LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvcxXAC7
yS4PI/2NUnAuENz7dloUpk9nV+Uy2QMaT6LEVIjhbkAoxLjQLbKwJdyl5CnF+Zma
ETS/saF9v+S9ssc+Uu7ZhqOpsGVIYx0JVEbg2KHum3w04OvrEyCSEevhYzuksG8a
bUm7Nmmw93J5J6O+f7ibbIQdyLqinHuHTdsjDpa2SBEVKLQdFmiyLfH3GrbXOcMy
hWykDOaY88O7s4FfkMMS0Da7DCt7/qMLMJ904m0iS+DtWb98RGQjjVtauDKytZhJ
JeztK3lid7bsqOf5ea+ypPidwnp0o0Jg501lonp4xUYfkQpL214oHwwdm5nUKdDF
hLBVdkQBwOJa1w==
-----END CERTIFICATE-----