Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File:                     R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier:          lxM+Nla26srqMufMGH4Ko2I3h1+i9AG9BQI9obHMtC0=
Subject key identifier:   D4:55:01:A6:4A:38:BE:65:EB:E1:FB:71:4F:B5:BF:EE:CC:50:45:FF
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer:       /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial:       019EF91502128F875ECC1F85337B944B324B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number:          06C7
Signing time:             Wed 24 Jun 2026 10:02:44 +0000
Manifest this update:     Wed 24 Jun 2026 10:02:44 +0000
Manifest next update:     Thu 25 Jun 2026 10:02:44 +0000
Files and hashes:         1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: LwDT+nIQYgs9Deng5bQAvN0ZvCNumayYm1Vhdj1n0cA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:15:02:12:8f:87:5e:cc:1f:85:33:7b:94:4b:32:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
        Validity
            Not Before: Jun 24 10:02:44 2026 GMT
            Not After : Jun 25 10:02:44 2026 GMT
        Subject: CN=d45501a64a38be65ebe1fb714fb5bfeecc5045ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:eb:83:ea:69:1b:5e:8d:be:c3:7e:51:2e:
                    ef:2c:8a:2b:0d:8b:84:b5:ac:fc:64:10:a4:4e:f8:
                    c4:d1:20:5a:4e:0d:f0:bb:bd:d8:2b:03:09:ba:5c:
                    ce:fa:5b:db:fd:aa:ca:12:4b:50:f0:e7:ef:69:72:
                    0f:39:53:b2:cf:ad:ee:6d:95:96:c6:60:ea:fa:96:
                    56:8a:2d:77:64:8f:45:13:f7:fb:f3:c0:9d:ed:e0:
                    ec:aa:c4:4f:39:99:e8:56:b0:bd:30:b0:d1:f1:a6:
                    8e:55:8f:1a:90:6e:24:f1:2b:7c:ac:17:3b:c7:03:
                    22:d9:2e:f2:05:80:1e:dc:16:ec:f9:16:f6:63:91:
                    12:26:e3:32:51:6b:0d:ad:a9:7d:8c:89:2d:b5:c6:
                    51:bf:5b:38:2a:57:cb:e8:0b:0d:bd:af:c2:ec:b7:
                    7d:2c:af:1b:fb:bf:4c:8c:fd:ca:fd:5a:a9:85:3a:
                    39:01:2a:94:dd:7b:ca:bb:fb:5b:8c:44:b9:2f:a6:
                    e6:c3:e3:93:5f:c1:de:4f:5d:8e:44:bc:14:8a:80:
                    d4:c5:60:13:d9:2a:fc:51:94:9f:88:cb:bf:f6:6a:
                    cf:f3:3f:1d:41:4e:5b:2c:e1:b1:7e:75:05:02:c1:
                    1a:25:b4:bc:9e:80:0a:48:7b:08:97:58:a9:71:fd:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:01:A6:4A:38:BE:65:EB:E1:FB:71:4F:B5:BF:EE:CC:50:45:FF
            X509v3 Authority Key Identifier:
                keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:bb:32:0a:e6:59:82:a6:c1:02:f2:e8:b9:4c:37:b5:44:
         68:3c:0c:b5:de:69:98:d6:ff:c7:93:58:78:3a:12:d1:e9:23:
         de:1c:d2:4a:3f:b2:d7:48:30:e2:19:5a:98:25:e7:c0:ca:5d:
         36:b8:60:98:0f:3a:49:67:bb:db:73:17:66:44:9c:1b:70:32:
         35:ea:3b:fc:cc:72:9e:9a:e8:f2:0e:3c:65:ca:ee:0b:86:3a:
         72:2c:0a:59:2f:7b:52:e2:f2:48:d9:0c:3e:be:97:92:5e:ef:
         e5:a6:e9:bc:a3:a9:46:b9:5c:b5:1b:27:30:c7:3e:91:88:b4:
         a4:d6:7c:d4:35:16:21:1b:83:e3:0e:36:c3:86:1a:3e:dd:4e:
         03:d0:d4:bd:aa:bc:41:39:26:34:91:2f:66:92:83:50:96:a9:
         11:3a:02:c1:43:29:44:64:b5:d2:57:c1:17:10:13:f2:37:37:
         b8:9e:03:22:2f:7c:60:49:9f:44:26:cf:2b:13:3d:62:57:83:
         63:c9:fa:91:f3:3e:28:0c:87:6e:18:ac:0a:eb:84:25:96:db:
         68:63:7c:95:26:6f:44:5a:54:86:5e:81:0e:aa:af:e0:22:cd:
         a1:6d:6d:7f:60:2e:36:24:d8:7e:0e:4e:d6:b6:86:7b:e3:93:
         b7:d0:99:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ75FQISj4dezB+FM3uUSzJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGZiNjZkN2U4NWJiNGFkMDhjNTA5MmYwYmI4MDYyOTJi
YTBlMDgwHhcNMjYwNjI0MTAwMjQ0WhcNMjYwNjI1MTAwMjQ0WjAzMTEwLwYDVQQD
EyhkNDU1MDFhNjRhMzhiZTY1ZWJlMWZiNzE0ZmI1YmZlZWNjNTA0NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M7rg+ppG16NvsN+US7vLIorDYuE
taz8ZBCkTvjE0SBaTg3wu73YKwMJulzO+lvb/arKEktQ8OfvaXIPOVOyz63ubZWW
xmDq+pZWii13ZI9FE/f788Cd7eDsqsRPOZnoVrC9MLDR8aaOVY8akG4k8St8rBc7
xwMi2S7yBYAe3Bbs+Rb2Y5ESJuMyUWsNral9jIkttcZRv1s4KlfL6AsNva/C7Ld9
LK8b+79MjP3K/VqphTo5ASqU3XvKu/tbjES5L6bmw+OTX8HeT12ORLwUioDUxWAT
2Sr8UZSfiMu/9mrP8z8dQU5bLOGxfnUFAsEaJbS8noAKSHsIl1ipcf3PQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRVAaZKOL5l6+H7cU+1v+7MUEX/MB8GA1UdIwQY
MBaAFEdPtm1+hbtK0IxQkvC7gGKSug4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWIt
YWZlY2YyMmVlMTE1LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWItYWZlY2YyMmVlMTE1
LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk67Mgrm
WYKmwQLy6LlMN7VEaDwMtd5pmNb/x5NYeDoS0ekj3hzSSj+y10gw4hlamCXnwMpd
NrhgmA86SWe723MXZkScG3AyNeo7/Mxynpro8g48ZcruC4Y6ciwKWS97UuLySNkM
Pr6Xkl7v5abpvKOpRrlctRsnMMc+kYi0pNZ81DUWIRuD4w42w4YaPt1OA9DUvaq8
QTkmNJEvZpKDUJapEToCwUMpRGS10lfBFxAT8jc3uJ4DIi98YEmfRCbPKxM9YleD
Y8n6kfM+KAyHbhisCuuEJZbbaGN8lSZvRFpUhl6BDqqv4CLNoW1tf2AuNiTYfg5O
1raGe+OTt9CZsA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:07 2026 by rpki-client