Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft
File:                     N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft (raw, json)
Hash identifier:          1YJa3CWjvv1L6wHtKrRB2grSBsmusAczzPI2Z+upamk=
Subject key identifier:   97:A3:69:06:02:16:60:8B:69:CA:83:9F:65:9D:3B:88:2F:A2:DF:8C
Authority key identifier: 37:E8:8A:0A:09:0D:CF:D5:63:26:33:5E:0D:DF:8C:55:62:57:AD:DA
Certificate issuer:       /CN=37e88a0a090dcfd56326335e0ddf8c556257adda
Certificate serial:       01A0EC9D7E27510E5A24AE9F5E3253988325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft
Manifest number:          0C
Signing time:             Tue 29 Sep 2026 10:02:19 +0000
Manifest this update:     Tue 29 Sep 2026 10:02:19 +0000
Manifest next update:     Wed 30 Sep 2026 10:02:19 +0000
Files and hashes:         1: 4Ti325ZbGOcZuFUoChTM7Uq0Z6Q.asa (hash: WAQWGj7do6H/nKPAi0jrKmB6LwEzo/cJdxBMWh3LmDo=)
                          2: N-iKCgkNz9VjJjNeDd-MVWJXrdo.crl (hash: N6xd1OtiyrEDAGh2Mj2H7aO/fRNJhQm/sm+El33wkCQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:9d:7e:27:51:0e:5a:24:ae:9f:5e:32:53:98:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e88a0a090dcfd56326335e0ddf8c556257adda
        Validity
            Not Before: Sep 29 10:02:19 2026 GMT
            Not After : Sep 30 10:02:19 2026 GMT
        Subject: CN=97a369060216608b69ca839f659d3b882fa2df8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:6a:1a:5e:f6:86:03:d2:3b:df:75:e5:e3:
                    4a:6b:cb:34:a2:32:bb:11:27:4b:87:bb:c7:e5:35:
                    94:fa:7e:e8:96:35:a4:e6:50:e0:b6:ee:ce:14:95:
                    df:11:65:91:25:3f:eb:6d:44:fd:4c:3c:9d:e7:92:
                    2e:1f:68:f3:f1:14:06:dd:14:a3:31:a4:13:9c:4b:
                    4a:e5:27:0c:67:00:a1:84:42:fa:7c:0a:dc:b3:fe:
                    8c:2b:45:27:e8:19:fe:a2:a4:7b:03:81:ba:97:5a:
                    6a:77:63:5a:37:01:93:d3:6b:7a:0d:4a:61:26:b0:
                    ad:2e:d3:9d:5d:3d:c7:b5:db:97:06:3a:32:0e:3c:
                    6b:d6:a1:e3:80:c9:74:da:21:90:93:ef:f4:89:03:
                    d4:32:66:1c:84:69:d9:66:50:26:69:54:4f:c7:84:
                    45:9e:c2:44:63:51:e5:c0:10:23:2d:6c:fc:fd:ea:
                    60:da:8a:7a:5f:cf:8f:9b:5d:6d:50:4f:a4:ed:87:
                    17:e6:39:ad:95:5b:f8:7e:04:10:1a:9d:73:27:2c:
                    22:17:ec:88:30:67:1a:b3:13:bc:98:cf:07:93:e3:
                    90:13:a1:9c:90:79:9c:25:a8:08:fc:03:2d:3a:72:
                    ad:87:2b:9e:e1:9f:6c:3d:f6:3a:25:ea:8c:16:b0:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A3:69:06:02:16:60:8B:69:CA:83:9F:65:9D:3B:88:2F:A2:DF:8C
            X509v3 Authority Key Identifier:
                keyid:37:E8:8A:0A:09:0D:CF:D5:63:26:33:5E:0D:DF:8C:55:62:57:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-iKCgkNz9VjJjNeDd-MVWJXrdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a0a430-6292-4878-ae53-ea083eee9736/1/N-iKCgkNz9VjJjNeDd-MVWJXrdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:b6:4b:c2:29:df:48:7d:d6:72:6f:70:45:86:3e:8c:03:
         56:ee:ba:cd:ee:7d:86:8a:04:da:cf:ea:9b:50:be:11:53:53:
         d9:4d:8b:75:89:a2:c4:ea:cf:fa:7b:2c:fe:f2:46:5e:35:38:
         9c:5e:a4:05:c3:98:00:51:6a:ae:9f:32:36:1c:73:b7:08:74:
         ad:60:0b:c5:b8:c7:6f:f3:58:91:5f:d2:e7:47:2b:f0:80:61:
         e6:70:9d:cc:ce:78:11:a2:b2:9f:d1:f4:f6:e8:d5:17:75:50:
         5c:c7:50:9a:70:11:fd:34:e5:50:89:f3:42:09:77:38:cc:2c:
         22:76:a5:ac:7f:37:26:a9:4c:6c:8d:89:04:3a:45:b1:bc:23:
         73:cf:27:a4:ab:36:60:c9:0c:1f:64:db:10:ef:67:c0:63:b6:
         a3:26:09:52:ac:fd:b0:6c:78:81:ec:ad:93:0c:6a:dd:f4:27:
         f7:27:b9:a9:cf:c0:a5:23:82:5b:c7:8a:91:74:bd:6a:38:7f:
         f1:35:51:f4:67:8d:a0:fa:77:7c:ca:99:c8:c0:4d:44:ae:e3:
         ad:66:fa:64:d9:74:f5:ab:ee:7e:f4:df:fd:be:75:86:f1:05:
         c8:62:02:70:c7:5b:9b:2d:88:96:97:6e:6d:a7:97:a9:d7:2f:
         a8:d7:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----