Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File:                     HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier:          9BfYe07BBY9lN/vlapiAN3QzE2uefPJDt5pTxY4t5CM=
Subject key identifier:   8D:7E:04:19:22:18:28:CB:6F:6F:37:58:6F:BC:9F:0B:06:DA:DB:47
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer:       /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial:       019F22105745E5D66A1F31A62195642E788C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number:          1071
Signing time:             Thu 02 Jul 2026 09:02:03 +0000
Manifest this update:     Thu 02 Jul 2026 09:02:03 +0000
Manifest next update:     Fri 03 Jul 2026 09:02:03 +0000
Files and hashes:         1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: UL1nv6hfWrUZoPbbzrLJg3RIotVMZgshO8mf8GLYmS8=)
                          2: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (hash: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:57:45:e5:d6:6a:1f:31:a6:21:95:64:2e:78:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
        Validity
            Not Before: Jul  2 09:02:03 2026 GMT
            Not After : Jul  3 09:02:03 2026 GMT
        Subject: CN=8d7e0419221828cb6f6f37586fbc9f0b06dadb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:dc:19:8e:f3:73:68:8c:6c:b7:8b:a8:2a:
                    ea:b9:d1:e2:20:42:55:ed:0d:1f:bd:9a:22:46:34:
                    86:b7:08:7c:cb:a2:38:7f:90:a0:1e:01:94:86:87:
                    29:b9:8d:b4:37:41:db:ad:36:b0:c4:cc:22:68:a6:
                    9e:48:54:11:47:0f:39:c0:fc:66:e3:2f:1c:b9:c5:
                    73:26:43:0a:ec:06:41:6e:e3:4b:64:83:88:a7:87:
                    28:fe:b3:8c:23:99:16:86:08:94:8c:9e:89:90:66:
                    07:b8:6f:f8:8a:43:23:19:2b:d2:e0:2b:24:04:38:
                    63:ac:b7:fd:a0:67:b4:92:d6:5a:74:be:96:47:68:
                    ac:33:cf:a3:54:9a:a7:0d:d3:ab:1f:42:cf:0b:b8:
                    38:d6:a6:a1:d4:97:15:f4:f3:2e:f1:b3:ec:12:ff:
                    49:5c:56:10:05:ac:85:4c:ff:d9:98:e7:61:2d:b1:
                    1b:d3:9e:39:47:ad:47:4f:b9:59:5a:f9:f4:e5:90:
                    dc:5c:01:f8:18:93:1a:91:eb:84:1a:ed:5f:49:3f:
                    2f:1c:be:8f:43:8b:63:33:9b:44:89:a3:23:56:4b:
                    89:bd:c0:e2:8d:42:70:27:38:59:8b:e4:5a:5e:65:
                    39:08:f1:0f:79:f7:dd:37:a3:66:67:1a:85:ed:41:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:04:19:22:18:28:CB:6F:6F:37:58:6F:BC:9F:0B:06:DA:DB:47
            X509v3 Authority Key Identifier:
                keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:09:9a:77:d0:9b:c1:3a:40:a5:19:82:2f:44:a2:a5:32:
         61:50:3d:ab:05:df:37:62:88:b7:c2:80:42:08:d2:dd:66:4d:
         e4:8e:17:03:62:15:e0:46:4f:72:19:ce:e1:35:fe:81:bb:7d:
         1c:2a:26:91:79:04:97:2b:89:c0:82:c4:27:9e:3d:35:ed:dd:
         d1:e0:b6:88:1a:19:32:4f:b9:2d:f1:0f:52:06:1b:6f:2d:74:
         1b:27:50:ab:7c:35:6d:a3:f6:25:2a:e4:34:6e:d4:62:4c:06:
         bd:53:f3:06:64:cd:f0:19:6f:79:5a:39:02:25:9c:34:96:3a:
         b7:23:ef:47:29:bb:6d:cd:94:c3:33:25:b7:eb:1a:85:07:11:
         c6:dd:70:fa:67:78:5e:e9:50:21:a6:e8:42:a0:25:82:65:89:
         55:5c:97:a5:35:b4:c5:36:96:36:78:2e:ae:2a:50:6f:03:25:
         7b:35:2d:f1:82:33:6e:64:8d:89:52:a7:b7:3a:8c:ca:54:d9:
         3a:69:a2:6b:21:70:f5:85:89:33:82:e5:ca:bf:fa:91:49:cd:
         b9:4e:31:1d:be:47:c8:7d:f7:41:68:98:46:b2:47:80:1c:aa:
         43:3d:d9:02:a2:f4:46:5b:76:fe:da:46:2a:84:f1:15:72:30:
         13:23:c8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iEFdF5dZqHzGmIZVkLniMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx
MDU5NWQwHhcNMjYwNzAyMDkwMjAzWhcNMjYwNzAzMDkwMjAzWjAzMTEwLwYDVQQD
Eyg4ZDdlMDQxOTIyMTgyOGNiNmY2ZjM3NTg2ZmJjOWYwYjA2ZGFkYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR/cGY7zc2iMbLeLqCrqudHiIEJV
7Q0fvZoiRjSGtwh8y6I4f5CgHgGUhocpuY20N0HbrTawxMwiaKaeSFQRRw85wPxm
4y8cucVzJkMK7AZBbuNLZIOIp4co/rOMI5kWhgiUjJ6JkGYHuG/4ikMjGSvS4Csk
BDhjrLf9oGe0ktZadL6WR2isM8+jVJqnDdOrH0LPC7g41qah1JcV9PMu8bPsEv9J
XFYQBayFTP/ZmOdhLbEb0545R61HT7lZWvn05ZDcXAH4GJMakeuEGu1fST8vHL6P
Q4tjM5tEiaMjVkuJvcDijUJwJzhZi+RaXmU5CPEPeffdN6NmZxqF7UGOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1+BBkiGCjLb283WG+8nwsG2ttHMB8GA1UdIwQY
MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt
N2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0
LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ8JmnfQ
m8E6QKUZgi9EoqUyYVA9qwXfN2KIt8KAQgjS3WZN5I4XA2IV4EZPchnO4TX+gbt9
HComkXkElyuJwILEJ549Ne3d0eC2iBoZMk+5LfEPUgYbby10GydQq3w1baP2JSrk
NG7UYkwGvVPzBmTN8BlveVo5AiWcNJY6tyPvRym7bc2UwzMlt+sahQcRxt1w+md4
XulQIaboQqAlgmWJVVyXpTW0xTaWNnguripQbwMlezUt8YIzbmSNiVKntzqMylTZ
OmmiayFw9YWJM4Llyr/6kUnNuU4xHb5HyH33QWiYRrJHgByqQz3ZAqL0Rlt2/tpG
KoTxFXIwEyPIww==
-----END CERTIFICATE-----