Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File:                     ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier:          X+DxCVgpJe7AIvX/qbKEqrbvmL3VyeZPlX/HpkW9nMU=
Subject key identifier:   9F:22:83:60:10:C6:B7:EB:DB:5D:6F:46:88:F5:51:FD:D4:89:D7:05
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer:       /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial:       019F22103E695D4B60BE3540CEAC3096514E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number:          1990
Signing time:             Thu 02 Jul 2026 09:01:57 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:57 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:57 +0000
Files and hashes:         1: A1dGDDi1OYigZK5SVk3AfsJoxJ8.roa (hash: ymU3iCZelIy0c5l6QoCL4pY5leFZomtGyloWJN3ojX4=)
                          2: Oh22G_915CY9u5MflKN_pMtA1DI.roa (hash: FsseF+o2oG0Sc0WcfTJeMuviJKeiZFceVmBH8y//bkA=)
                          3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: NyaC6YnVuxdtW3wN8XONeMQGWL+i8V6UFZZENxznjFU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:3e:69:5d:4b:60:be:35:40:ce:ac:30:96:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
        Validity
            Not Before: Jul  2 09:01:57 2026 GMT
            Not After : Jul  3 09:01:57 2026 GMT
        Subject: CN=9f22836010c6b7ebdb5d6f4688f551fdd489d705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:c8:91:6c:52:64:13:65:cd:67:f7:13:0b:
                    79:39:c7:ac:0a:94:0f:de:0c:93:56:db:5d:f0:b7:
                    8a:da:e0:15:fa:0b:59:36:e0:1e:90:a7:66:1a:93:
                    b9:11:d7:4c:9e:63:5a:71:4c:ef:5b:e1:ad:bf:02:
                    3b:95:29:16:45:9c:5b:e1:06:fc:18:49:b9:16:94:
                    40:6f:82:76:52:b2:a3:a3:72:d5:8f:3b:5c:b9:e7:
                    52:ba:25:3f:41:fd:1c:a9:2c:e3:e0:19:ad:24:d6:
                    3f:bc:9f:de:f5:55:4a:a6:d0:21:46:fd:57:5c:c5:
                    92:57:82:52:95:20:7a:87:46:8b:58:53:c9:34:3a:
                    e6:27:1b:fb:87:71:7c:31:60:2e:22:8d:8b:fb:64:
                    6d:0f:c2:33:6a:53:20:b8:8d:e9:61:74:3d:ea:e5:
                    4d:ee:cf:1e:86:ff:6d:b0:67:c0:99:72:d4:3c:69:
                    1a:d1:b8:4f:6d:4c:eb:25:00:64:a9:01:97:f6:60:
                    1c:11:56:84:76:8e:13:19:81:57:8a:89:16:6d:61:
                    9b:71:a2:b1:e1:05:14:2e:6e:cb:a5:11:b1:a5:c9:
                    93:f9:db:bf:67:26:1b:f6:39:14:59:c7:79:37:ce:
                    ac:ce:f2:d7:82:37:39:7f:42:d6:91:47:74:d9:05:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:22:83:60:10:C6:B7:EB:DB:5D:6F:46:88:F5:51:FD:D4:89:D7:05
            X509v3 Authority Key Identifier:
                keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:18:5f:92:d9:ae:98:a0:10:d4:53:f5:ed:98:2b:44:aa:
         76:7d:9f:51:5a:3f:58:cc:99:c7:fa:41:78:ac:9e:ba:cc:30:
         a4:1b:24:d9:9f:ce:e5:7c:a7:68:3b:a8:35:42:94:a1:13:3a:
         4e:f4:0e:97:52:94:39:2c:91:cf:f6:83:52:19:dd:2a:f6:dc:
         ce:7c:d8:84:57:92:6d:3a:53:75:7b:f4:70:d5:ab:c7:ea:98:
         19:d4:4e:de:29:dd:58:d6:f2:f2:20:3f:56:7f:98:3a:26:53:
         fb:91:9f:c0:63:c7:b0:6e:41:69:2f:fa:c9:43:3e:8c:fd:d1:
         0c:86:41:26:b8:98:ef:9c:48:6d:38:63:22:bf:9e:2e:f5:9e:
         ec:d9:71:b4:9a:1c:d2:bf:58:f9:6c:aa:8b:68:db:66:37:87:
         13:9e:0f:34:08:2d:3f:c2:59:09:8c:aa:03:70:89:17:49:2f:
         fd:0a:97:50:1f:5d:f1:27:1e:ea:85:7e:2b:1b:3f:9d:31:2e:
         6e:68:8f:d7:5b:80:13:76:19:3f:6c:de:7d:d7:47:7f:9b:46:
         cf:64:19:bb:5d:8c:9e:14:4d:55:37:08:e3:52:59:87:6f:ab:
         a4:63:a0:8a:fb:18:33:43:14:7f:ef:cd:5e:bd:ca:1b:d1:64:
         ec:bd:df:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iED5pXUtgvjVAzqwwllFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjk3NTFhMGFjODFhNjU3MTkwNTQ2ZWE0NzgwY2Q4NjE0
MGRjOWYwHhcNMjYwNzAyMDkwMTU3WhcNMjYwNzAzMDkwMTU3WjAzMTEwLwYDVQQD
Eyg5ZjIyODM2MDEwYzZiN2ViZGI1ZDZmNDY4OGY1NTFmZGQ0ODlkNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7IkWxSZBNlzWf3Ewt5OcesCpQP
3gyTVttd8LeK2uAV+gtZNuAekKdmGpO5EddMnmNacUzvW+GtvwI7lSkWRZxb4Qb8
GEm5FpRAb4J2UrKjo3LVjztcuedSuiU/Qf0cqSzj4BmtJNY/vJ/e9VVKptAhRv1X
XMWSV4JSlSB6h0aLWFPJNDrmJxv7h3F8MWAuIo2L+2RtD8IzalMguI3pYXQ96uVN
7s8ehv9tsGfAmXLUPGka0bhPbUzrJQBkqQGX9mAcEVaEdo4TGYFXiokWbWGbcaKx
4QUULm7LpRGxpcmT+du/ZyYb9jkUWcd5N86szvLXgjc5f0LWkUd02QV7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8ig2AQxrfr211vRoj1Uf3UidcFMB8GA1UdIwQY
MBaAFK4pdRoKyBplcZBUbqR4DNhhQNyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlsMUdncklHbVZ4a0ZSdXBIZ00yR0ZBM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NWUzNmMtZGIxZi00ODNlLWIwZWYt
MjI5MDUxODc5Yjc0LzEvcmlsMUdncklHbVZ4a0ZSdXBIZ00yR0ZBM0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NWUzNmMtZGIxZi00ODNlLWIwZWYtMjI5MDUxODc5Yjc0
LzEvcmlsMUdncklHbVZ4a0ZSdXBIZ00yR0ZBM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJMYX5LZ
rpigENRT9e2YK0Sqdn2fUVo/WMyZx/pBeKyeuswwpBsk2Z/O5XynaDuoNUKUoRM6
TvQOl1KUOSyRz/aDUhndKvbcznzYhFeSbTpTdXv0cNWrx+qYGdRO3indWNby8iA/
Vn+YOiZT+5GfwGPHsG5BaS/6yUM+jP3RDIZBJriY75xIbThjIr+eLvWe7NlxtJoc
0r9Y+Wyqi2jbZjeHE54PNAgtP8JZCYyqA3CJF0kv/QqXUB9d8Sce6oV+Kxs/nTEu
bmiP11uAE3YZP2zefddHf5tGz2QZu12MnhRNVTcI41JZh2+rpGOgivsYM0MUf+/N
Xr3KG9Fk7L3f7A==
-----END CERTIFICATE-----