Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File:                     DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier:          xryyrNSzGbnykNoN5XxicmlN8hreHWExOfnmyapqz8M=
Subject key identifier:   5F:D6:A8:F6:BC:A3:C8:5A:34:5E:8B:4E:ED:BD:CC:1B:8F:3C:86:B5
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer:       /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial:       019F22EC534B0F8BB11AE1EF1D98F7160A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number:          16CA
Signing time:             Thu 02 Jul 2026 13:02:20 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:20 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:20 +0000
Files and hashes:         1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: joaCu4UQyfKM6Rm5wwXDkAdncJCC/kWuMT3KDI8FifY=)
                          2: jiPOjIl6nBCVWenOtGifVVlibug.roa (hash: XoY5kXa67LdZT4EHsb4gzDlj3ILFLqUeSW5H/QfO6kE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:53:4b:0f:8b:b1:1a:e1:ef:1d:98:f7:16:0a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
        Validity
            Not Before: Jul  2 13:02:20 2026 GMT
            Not After : Jul  3 13:02:20 2026 GMT
        Subject: CN=5fd6a8f6bca3c85a345e8b4eedbdcc1b8f3c86b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:8e:7c:1b:22:29:dc:f9:10:60:e1:1f:43:
                    20:ac:f0:2c:4f:73:74:8c:a3:46:9f:64:34:21:6e:
                    14:81:37:9b:95:22:fa:63:e7:b2:9a:df:eb:77:6a:
                    7b:be:be:37:4c:f9:c4:5b:73:ba:4d:d2:f1:f8:60:
                    9e:8d:e0:70:70:07:4f:58:54:b8:38:ad:e4:ab:bd:
                    49:2d:ac:3d:a0:9b:98:40:0a:c7:52:d2:62:10:ce:
                    de:f3:da:8a:37:10:d8:88:67:18:ca:68:7c:8f:4c:
                    9d:8b:13:bf:f5:37:55:5f:24:e2:60:c2:d5:99:78:
                    cd:f4:9b:be:72:0d:fc:3e:7b:28:ba:9b:f8:cc:0e:
                    e9:85:6f:14:36:40:06:79:cf:dc:db:54:4d:bd:ab:
                    05:04:32:61:31:23:5d:14:20:16:bb:02:6b:6f:c2:
                    ef:22:f7:48:45:54:3a:8f:36:02:85:4f:6b:24:17:
                    18:eb:38:6e:54:54:62:2f:23:5f:a0:60:90:7c:80:
                    27:2b:0f:d3:b3:0f:41:9d:d6:6f:bc:14:3e:24:72:
                    ef:06:8f:14:85:52:7e:f8:a8:2c:3b:6b:f2:99:bb:
                    2f:d7:1e:51:d6:01:02:df:e6:db:f6:18:39:86:e3:
                    af:4e:90:db:02:74:e4:2d:d9:c6:dc:a4:27:0b:71:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D6:A8:F6:BC:A3:C8:5A:34:5E:8B:4E:ED:BD:CC:1B:8F:3C:86:B5
            X509v3 Authority Key Identifier:
                keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:47:41:18:d5:c3:5e:d3:0c:6b:03:6a:99:77:cf:33:cd:
         3e:3b:13:26:41:ba:32:d8:ef:65:f0:e0:68:a1:f3:11:08:88:
         b5:08:50:e7:f3:b5:99:fc:31:6f:43:56:26:59:1c:91:45:50:
         79:98:67:7b:93:08:e1:2c:36:6b:4f:6c:5e:90:31:38:c5:fc:
         6d:32:f4:0c:fd:09:11:ca:b7:a7:8d:91:ce:63:8f:27:9c:d3:
         0a:b4:75:48:7b:52:98:25:dd:4e:ba:3d:28:dc:74:9c:74:80:
         7f:c4:56:e8:7d:94:f3:95:c0:2b:a7:21:79:25:4a:df:c5:a7:
         a7:17:e3:a3:60:11:1e:7b:9e:c5:6a:e2:33:89:c7:6f:82:16:
         a0:0a:3a:b5:ca:f0:27:09:3c:93:44:d6:8c:b1:2d:3c:72:df:
         cb:65:6a:59:1d:a0:c9:3b:ca:9e:11:e7:58:20:e9:33:e1:8b:
         57:d3:b5:f3:55:5d:88:4e:af:c1:b1:19:56:f8:bc:98:ee:84:
         f3:9b:6e:3a:77:89:21:a4:1e:d2:7f:5e:f2:f2:17:07:6e:10:
         84:85:ab:06:68:30:d0:df:f1:f9:c1:f8:6f:da:6f:c1:36:ec:
         0f:29:7a:10:0b:c1:bb:55:21:23:c1:99:c5:56:20:41:4b:56:
         15:76:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----