Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File:                     UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier:          AFh7Mtx7K/LItcOvO6AhVZVmjMQuo2YjdnLoxKY8wqc=
Subject key identifier:   A2:4F:62:6B:65:E6:5A:AA:22:7D:A0:FC:68:E8:D5:0D:55:24:DA:19
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer:       /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial:       019CDCC57E50D7E9BF7E9C3C6585F2A89111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number:          11FB
Signing time:             Wed 11 Mar 2026 12:00:56 +0000
Manifest this update:     Wed 11 Mar 2026 12:00:56 +0000
Manifest next update:     Thu 12 Mar 2026 12:00:56 +0000
Files and hashes:         1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: LNXOnO/VaBglweqxAjmj2mDhzMrWIi7Y07XEZK+gXVY=)
                          2: uc4ULWEehhRdcmjm5-M-3dtNgb4.roa (hash: 4DcEizGzLbEoSz/XPNUF0gHOSRKi0znncm1nJ9Fh0vI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dc:c5:7e:50:d7:e9:bf:7e:9c:3c:65:85:f2:a8:91:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
        Validity
            Not Before: Mar 11 12:00:56 2026 GMT
            Not After : Mar 12 12:00:56 2026 GMT
        Subject: CN=a24f626b65e65aaa227da0fc68e8d50d5524da19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:ac:4b:a4:e6:e8:47:5c:99:55:3c:79:0c:
                    94:7e:c8:34:e4:46:ed:09:be:ab:c9:8b:fe:a1:e0:
                    5c:eb:c6:a0:70:40:71:ee:b5:ca:31:31:32:71:ba:
                    12:0a:5c:d8:1f:9e:37:9b:82:63:41:52:54:66:61:
                    e7:b4:d1:f0:5e:cb:31:59:3e:39:9f:bf:5f:39:e9:
                    3c:41:46:72:8a:c2:20:70:77:81:63:2a:04:71:db:
                    05:20:9c:07:af:13:e2:2d:c6:55:e5:56:6f:ac:79:
                    20:c0:49:e8:1c:46:2d:7f:49:31:b4:92:50:e8:de:
                    ba:0b:30:6d:51:7c:01:de:e7:83:d4:73:6e:96:b7:
                    90:e7:6c:d7:4a:aa:b6:5b:9a:00:b9:a7:a6:96:dc:
                    a9:47:2a:df:28:c9:c9:49:cb:27:11:bf:07:6d:57:
                    c9:db:cd:fc:99:a0:2b:ac:13:e7:48:21:83:f7:4b:
                    69:76:b7:32:01:b1:34:4f:d9:83:6e:04:d2:1f:50:
                    28:0b:1f:15:88:be:d4:f4:72:bf:5a:c5:df:43:0e:
                    83:7a:1b:3a:de:60:ef:e7:dc:75:4e:17:98:76:62:
                    bf:10:e0:d4:f5:57:ed:13:60:d6:10:34:d2:59:b0:
                    ab:10:60:a2:01:63:cd:a3:6a:54:67:dd:80:98:8e:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:62:6B:65:E6:5A:AA:22:7D:A0:FC:68:E8:D5:0D:55:24:DA:19
            X509v3 Authority Key Identifier:
                keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fe:ce:97:8a:a8:c4:cf:94:40:1d:53:ce:6c:f7:e5:21:ec:
         e8:6a:3b:b4:96:3d:bd:85:c4:4b:69:04:82:e9:be:27:48:d3:
         14:63:fc:ef:8d:0c:bd:00:8a:d9:29:20:04:1d:99:22:b1:45:
         f8:69:c5:13:bf:1c:87:23:58:f9:07:7e:6c:a7:31:30:c9:f5:
         41:ff:07:9e:c6:3a:2b:d5:13:52:00:18:43:96:db:5b:69:3f:
         b5:32:2f:c1:52:20:97:2b:ee:9b:5d:85:53:33:66:fb:8a:24:
         ed:11:30:16:74:3a:ef:0d:43:cc:74:9e:68:5a:5d:24:b1:e8:
         28:a2:e7:94:50:fd:01:09:a8:69:da:1b:b5:94:e0:d3:47:1b:
         49:a6:d5:c9:c2:fe:b7:f4:de:e8:78:32:f5:22:3a:e6:b1:5b:
         46:5d:fd:77:ae:80:a0:dc:ef:39:14:94:a2:59:85:1c:66:e1:
         73:09:73:5d:b7:d0:2a:cc:55:d0:e9:ef:32:91:43:da:24:92:
         55:82:81:2b:fe:26:7d:b8:4f:0a:20:45:6e:14:c8:76:11:49:
         13:b9:89:1f:95:34:02:80:ab:00:de:92:f1:78:13:f9:e3:3c:
         26:eb:4c:be:90:d8:03:f6:0a:a3:63:4e:1b:d7:81:36:e5:e6:
         d5:30:ba:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzcxX5Q1+m/fpw8ZYXyqJERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzAyY2RlZTA0MzA5NGFjMmYzMzE3MDEyNWY5NGY3MDM0
ZGE4ZjAwHhcNMjYwMzExMTIwMDU2WhcNMjYwMzEyMTIwMDU2WjAzMTEwLwYDVQQD
EyhhMjRmNjI2YjY1ZTY1YWFhMjI3ZGEwZmM2OGU4ZDUwZDU1MjRkYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhusS6Tm6EdcmVU8eQyUfsg05Ebt
Cb6ryYv+oeBc68agcEBx7rXKMTEycboSClzYH543m4JjQVJUZmHntNHwXssxWT45
n79fOek8QUZyisIgcHeBYyoEcdsFIJwHrxPiLcZV5VZvrHkgwEnoHEYtf0kxtJJQ
6N66CzBtUXwB3ueD1HNulreQ52zXSqq2W5oAuaemltypRyrfKMnJScsnEb8HbVfJ
2838maArrBPnSCGD90tpdrcyAbE0T9mDbgTSH1AoCx8ViL7U9HK/WsXfQw6Dehs6
3mDv59x1TheYdmK/EODU9VftE2DWEDTSWbCrEGCiAWPNo2pUZ92AmI4uTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJPYmtl5lqqIn2g/Gjo1Q1VJNoZMB8GA1UdIwQY
MBaAFFJwLN7gQwlKwvMxcBJflPcDTajwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2Qt
ZTI4MGI2NTAxNzA0LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kOGM4NWUtNDE5OC00ODY5LWI5Y2QtZTI4MGI2NTAxNzA0
LzEvVW5BczN1QkRDVXJDOHpGd0VsLVU5d05OcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqf7Ol4qo
xM+UQB1Tzmz35SHs6Go7tJY9vYXES2kEgum+J0jTFGP8740MvQCK2SkgBB2ZIrFF
+GnFE78chyNY+Qd+bKcxMMn1Qf8HnsY6K9UTUgAYQ5bbW2k/tTIvwVIglyvum12F
UzNm+4ok7REwFnQ67w1DzHSeaFpdJLHoKKLnlFD9AQmoadobtZTg00cbSabVycL+
t/Te6Hgy9SI65rFbRl39d66AoNzvORSUolmFHGbhcwlzXbfQKsxV0OnvMpFD2iSS
VYKBK/4mfbhPCiBFbhTIdhFJE7mJH5U0AoCrAN6S8XgT+eM8JutMvpDYA/YKo2NO
G9eBNuXm1TC6sA==
-----END CERTIFICATE-----