Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File:                     CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier:          GDEcKHXzUtjfKxjjSkoJUeg5oxJ4iOr7LFZ0rWn/n3I=
Subject key identifier:   8D:B3:EB:8C:E5:44:82:B0:BC:07:27:5A:4C:D9:00:73:73:03:CE:B2
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       019F216B95924EE621236DA39450D09952BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number:          133E
Signing time:             Thu 02 Jul 2026 06:02:06 +0000
Manifest this update:     Thu 02 Jul 2026 06:02:06 +0000
Manifest next update:     Fri 03 Jul 2026 06:02:06 +0000
Files and hashes:         1: 07XYxZm2jgrEmO1HuzMvRYzMMuA.roa (hash: nY7m4KC7AI0Ecpy/qnFSivU7gbK1MuLa2jlBoOfj+EI=)
                          2: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: +7cuA7uSNXer9/L+L4qmckL+3q1NWOuWD3frJwuFF80=)
                          3: Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa (hash: 3+KMIe4ykTPEMsf6KYjZSYj0RLNxjRnmFAFq/w1rKME=)
                          4: GmoWBFdZxgpgR02IJOtNWXU60Fg.roa (hash: JAxT+56ClLIWR3r+vCv75YuOZRohTPeo2TN6vnnL43w=)
                          5: HClmRpwZ5qb-6Tw5Lpkkp6vUq24.roa (hash: R6anRTSdgq6QM25eUKnQ4vUTar0ktx5VjKKHjNUMua0=)
                          6: Idn5X01I8ewaC6lH5aMO8qDPZR8.roa (hash: inaT9YDkDzXeVmAusXdqKqfZJOTOaFo7hAptlKwjJcY=)
                          7: OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa (hash: b5bk7yZz1Is4O8Xir/sTrR/mIRsoYCAaY6BCfdgn5ZQ=)
                          8: RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa (hash: 43NWQzsz8KlfwddLNubmNg8ArqPU7FB+g1mEx1VSbLQ=)
                          9: TiqcBX8Xr8pCHaLkUx1X8iTEFj4.roa (hash: 3bwGL1/nE8oEOwOy0jR0e8JowdddSDpqjg7t1twul8Y=)
                          10: X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa (hash: 9tYchkibyiGf63vXdkvYVj/MGH8M6+b7g0ZGSiDWW4k=)
                          11: XOw8JNJO-uIg9HHlnw548ZJ5LdI.roa (hash: jEOkOMDISMGQm6lDZ5S6iuPlerKdJ4lpqsbuzz6ZhmY=)
                          12: Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa (hash: gjQNsvq1Su+L7BoPrc7WNGYbmEUyjE7QFdUTdDWn9gA=)
                          13: _muqkDefxMn6elW9A6x3-u89qsI.roa (hash: hm15ty/qT5a1amDhQKBPxEwo6xcyPJbCH7A9J8+gqhU=)
                          14: bXpAY6oapcJJSsH74H_lsZNy-FA.roa (hash: lyF3GT0AHqEUFHykQSaeBtexwb64bMUL9++L8uFcKf0=)
                          15: b_TRZnQbpKGGr7WruYBNW7N39mI.roa (hash: vbQnurk8ZzdTBK99uDa/ZNS1iZlMBI/qDpBfj+6WAww=)
                          16: bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa (hash: qaL3qNP2rfqqJbxA2Yxe7UXhzeA/+z+h+72ODdJbZt8=)
                          17: ffQ9wRR3lmZ7SrnLaJ08cFzb4uw.roa (hash: jojS/hwBp8bJCEys0uBEnShnLC0EMlO6n+Kx5AShBU4=)
                          18: g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa (hash: cBANxlLCPRrDnxn+SNqepP9E9vwZCWHdv7vEfvn4Idc=)
                          19: gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa (hash: QyHstRZRdvd47ZQl36Rd/igqRzb8/8PpW8S7eiZiQPM=)
                          20: hYRrlG4ePJA5Yx73qthpN3BdmIY.roa (hash: i1ovuAdJSnvNJTo743kB/D+xmK1EozUSuKfnkZOGoUY=)
                          21: uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa (hash: v43HCGHUrt3AhlDzq1vOZbFXiCOEf6fmSyNlKWtvXnE=)
                          22: vLOjUUwtaa2X8-IAaOxu3DokPYs.roa (hash: Bd/6/C/bLXGN6G8sPVtzxe1SWgzPo0VD9bGAGFxwbq0=)
                          23: yPPudgQzJCUtVTuuzqJps2ZZOcg.roa (hash: ps1MAAJtV3fUVlLrQIgjyj1ZoNoHchwEw8Y92fP5Qps=)
                          24: zsWUC_e9yhKUrFPIEUkIvI5aHHA.roa (hash: NI+95z1P6YBvuLPF/+hkyTmgVTfETjJIbBe1gLRv9dk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:95:92:4e:e6:21:23:6d:a3:94:50:d0:99:52:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Jul  2 06:02:06 2026 GMT
            Not After : Jul  3 06:02:06 2026 GMT
        Subject: CN=8db3eb8ce54482b0bc07275a4cd900737303ceb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:2a:ef:03:9a:79:3d:e1:83:43:33:4f:03:
                    07:fa:6c:7a:30:a5:b9:16:c4:58:10:1a:89:7e:82:
                    b6:5d:70:c5:91:f8:2f:4a:d4:7e:af:c7:04:32:da:
                    c8:6b:2c:5c:8c:51:93:fc:e6:e0:b9:ae:35:96:fe:
                    b6:32:5b:8b:33:bb:a6:ca:88:39:f7:fa:6d:ad:e9:
                    e2:b3:a7:a9:b8:9c:42:fb:34:ca:7b:2d:88:fa:d9:
                    f1:d8:04:48:75:58:0c:ca:85:66:e7:62:17:b4:46:
                    54:42:fb:9e:c6:c1:04:07:3e:4b:a4:dd:8a:32:cd:
                    e6:20:9e:b7:88:9b:7d:b2:ad:44:c6:1f:ca:1b:99:
                    56:a0:c7:cd:b7:15:80:c4:9f:51:1e:d6:6f:6e:18:
                    25:76:81:2c:52:11:9b:f9:49:12:28:0e:52:2e:2e:
                    45:db:31:e2:dc:bc:d9:31:2e:56:7b:06:e3:2f:2f:
                    f4:fd:9f:15:9d:94:f2:41:31:6f:42:f8:9c:ab:68:
                    28:cb:ec:ab:61:df:f7:ec:d5:c1:62:0c:a5:0f:6f:
                    d0:c6:8f:6a:fc:72:a8:f8:4a:78:10:2d:30:d8:5f:
                    36:f5:25:f4:be:1c:b7:a9:0d:00:30:ef:08:a2:07:
                    82:e1:1e:e5:1f:7f:0c:02:ce:d2:27:5d:ba:48:5a:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:EB:8C:E5:44:82:B0:BC:07:27:5A:4C:D9:00:73:73:03:CE:B2
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:06:25:15:5f:22:7c:67:8d:be:f0:1c:ff:a0:17:f9:f3:a9:
         e0:3b:f3:3d:8a:07:da:fd:08:ae:29:eb:d9:23:6d:20:19:30:
         52:d9:d7:df:fb:f4:61:40:b1:e2:a1:2d:c3:06:27:f2:cd:23:
         8a:90:71:71:6d:63:c8:5d:18:14:55:ba:63:02:11:e1:6e:38:
         48:23:df:c5:98:37:07:1b:70:5c:68:53:8a:e0:5b:31:d9:94:
         3f:00:b7:b7:f3:ac:bf:a1:e7:bd:ee:ca:17:dc:38:39:23:52:
         51:db:43:37:44:31:43:1a:1f:d5:65:a1:68:e5:10:e5:90:80:
         7a:7e:b6:70:28:f7:1c:3e:3d:40:f7:6e:09:3f:b8:af:2d:89:
         42:85:86:cd:8c:68:df:44:e8:22:00:79:56:df:c7:af:40:8a:
         97:ed:53:bb:40:a9:6f:22:f5:d8:1d:98:26:70:2a:21:06:06:
         84:24:05:ba:b6:90:a5:c6:92:e3:9d:ae:2c:c8:96:1f:e7:65:
         ba:e4:ca:fb:18:c3:8d:8a:a3:ec:f2:40:1b:fd:9f:a4:f6:1a:
         1f:16:8f:5f:3f:88:b9:17:56:6a:cf:05:1d:5b:94:dd:94:c0:
         98:aa:38:90:e8:a1:16:1d:15:a7:9e:06:19:29:12:80:d6:6c:
         1c:74:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----