Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File:                     8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier:          eXNOIKyFcqsKoCAFZXiz8UIaIW3iCnRrhSfoEw89nJ8=
Subject key identifier:   F7:64:76:66:66:C0:DE:75:A8:85:11:E4:BA:9D:D0:CE:C9:00:85:CB
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer:       /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial:       01A0A7BAE43A42BAF83C8FB125058AA9FA97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number:          17A3
Signing time:             Wed 16 Sep 2026 01:00:38 +0000
Manifest this update:     Wed 16 Sep 2026 01:00:38 +0000
Manifest next update:     Thu 17 Sep 2026 01:00:38 +0000
Files and hashes:         1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: JTSnKMgv51Pn8z1p+JBVJpLe4tr/J10SckKbfF3qB/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a7:ba:e4:3a:42:ba:f8:3c:8f:b1:25:05:8a:a9:fa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
        Validity
            Not Before: Sep 16 01:00:38 2026 GMT
            Not After : Sep 17 01:00:38 2026 GMT
        Subject: CN=f764766666c0de75a88511e4ba9dd0cec90085cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:74:61:ba:3c:58:26:b8:8a:fe:3e:54:4b:
                    d7:ab:33:36:63:f6:37:90:26:d2:2d:1b:7b:9d:e5:
                    13:91:c8:f7:9b:08:f1:c7:dc:49:31:cb:b7:86:78:
                    62:43:9f:2c:b2:8f:f2:dd:f0:ae:ad:19:a6:a5:e5:
                    48:ba:64:10:8f:ae:52:b5:5c:a8:d5:b7:03:f8:f7:
                    3f:ca:93:b3:d6:ed:31:88:0f:36:d6:68:8b:48:2f:
                    ac:b4:4a:7c:5c:35:71:f2:d9:4b:f8:86:5f:7e:a6:
                    d6:88:85:9b:0b:3b:2b:c6:dd:c9:ed:e3:3d:19:90:
                    c5:f6:62:35:97:f8:5b:89:60:02:94:e6:e7:31:a8:
                    44:43:4f:1f:ed:fa:c7:e3:7e:55:71:54:21:4f:f2:
                    65:90:4c:e8:fe:01:1b:46:2d:73:52:e6:15:b1:a9:
                    3c:5d:ff:78:f3:71:3d:6d:03:25:8c:96:d2:69:6a:
                    ae:c0:21:68:34:ab:3e:1d:40:c2:c3:06:75:74:87:
                    2c:8b:af:b5:58:71:ce:eb:07:7b:e7:4e:36:55:8b:
                    f6:98:f0:84:ec:4d:b5:7d:ba:b9:03:1a:d4:c5:26:
                    1c:70:25:3f:a2:79:5e:aa:9e:ed:48:88:79:51:e1:
                    1f:24:46:e7:f6:4c:3d:e6:95:08:43:0b:66:33:d3:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:76:66:66:C0:DE:75:A8:85:11:E4:BA:9D:D0:CE:C9:00:85:CB
            X509v3 Authority Key Identifier:
                keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:18:f1:d3:c7:af:96:1e:5e:60:45:0e:ce:ac:24:09:e4:
         ee:9b:e3:06:26:e3:c0:81:63:f4:de:b3:5a:47:37:30:75:8c:
         45:d9:ed:36:52:c4:9b:ca:85:50:78:aa:2b:62:f4:1a:6c:42:
         15:bd:6d:ac:1f:93:82:3e:b3:44:3e:dd:dc:b1:d2:0e:83:8b:
         c3:e2:57:b7:06:1b:9d:2e:60:5d:a8:6f:fc:9d:9c:37:e6:58:
         c3:b9:40:92:ba:4f:43:43:9a:4d:d5:c8:6d:79:49:af:ae:f6:
         67:48:51:dc:86:94:57:14:f8:83:3e:42:8d:9a:dc:c4:65:fa:
         ac:9d:1b:be:59:78:8b:3b:2b:96:e9:0d:9b:b5:a5:13:a3:44:
         28:b5:31:26:22:43:6a:fd:f8:2d:ee:71:d5:d9:c7:0f:57:be:
         b9:aa:66:49:86:81:0d:b1:78:b5:53:c7:ee:6e:d4:5f:19:6b:
         26:1f:18:e7:47:68:e1:b7:8d:89:6e:ff:75:1e:f4:85:e1:fb:
         2e:06:95:cb:64:17:a5:89:64:eb:75:6e:df:b7:85:94:0b:11:
         cc:c5:5f:df:18:57:6f:7d:b0:eb:b4:6a:a7:7a:cf:ea:74:74:
         e6:fc:28:cf:45:ba:69:82:48:2a:90:b5:a2:13:7c:b2:22:c0:
         df:94:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----