Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File:                     _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier:          Tn5NWAJuK1q90FENaavKpAteP9qQpJO8vbL/znIPeIs=
Subject key identifier:   97:0F:42:74:5E:03:7A:DC:75:87:7F:CD:5C:C3:D8:39:9E:C0:43:D6
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer:       /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial:       019F227D0B89CE30259DBEC7688EA5BABA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number:          17E8
Signing time:             Thu 02 Jul 2026 11:00:47 +0000
Manifest this update:     Thu 02 Jul 2026 11:00:47 +0000
Manifest next update:     Fri 03 Jul 2026 11:00:47 +0000
Files and hashes:         1: IewQ4-Em8YPzzj6aKGxcrGBWA00.roa (hash: d+3Wy6JFrqiHOg5/dyS0zErOjSAHU2d4zx1E1Uy5i+w=)
                          2: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: +cKcZ8UzMvMbjX2Qe86M0VkJL8Zkise4oWlGBz8Frow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:0b:89:ce:30:25:9d:be:c7:68:8e:a5:ba:ba:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
        Validity
            Not Before: Jul  2 11:00:47 2026 GMT
            Not After : Jul  3 11:00:47 2026 GMT
        Subject: CN=970f42745e037adc75877fcd5cc3d8399ec043d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:9b:94:c3:02:83:67:a9:1b:2d:b4:e8:05:
                    68:f9:96:cc:ca:07:5d:95:6e:89:1a:4f:86:33:43:
                    0e:16:1e:e5:5b:1d:7d:a9:0b:9b:f4:bd:36:ae:fb:
                    e2:cc:84:a8:12:ff:b9:93:8c:d1:f5:67:be:76:84:
                    46:b2:19:64:17:21:32:cb:df:35:1f:90:b7:ab:c9:
                    8b:d8:99:74:13:fe:fa:95:2c:6c:d3:6b:ba:68:00:
                    b7:5f:61:82:c1:77:49:f0:1d:ff:59:cb:c1:40:d1:
                    92:1a:97:f8:46:cb:53:83:09:be:4f:d8:e4:42:5b:
                    8d:2a:d2:db:6d:b6:20:8b:36:8d:89:2f:98:d1:96:
                    f1:b2:60:4e:f8:0e:75:0d:af:f6:e0:9b:b9:d9:89:
                    1b:b4:fa:a5:e8:4b:b7:b8:67:73:7e:02:38:15:76:
                    2f:3c:ff:5e:3b:61:f6:b6:53:a9:34:18:8f:66:c1:
                    45:4f:4f:9f:60:2e:0d:e9:9d:7b:ea:d2:50:60:b1:
                    a6:ab:da:15:10:90:24:ba:86:a8:0e:21:32:34:2b:
                    28:a2:9f:58:f4:80:43:0c:b9:1b:3f:ce:33:d4:fa:
                    d1:9b:4d:c3:f1:22:e5:b6:01:3b:0b:3b:f6:63:49:
                    02:ea:8c:21:eb:4c:1c:94:e6:f1:68:e3:e1:46:d2:
                    6f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:42:74:5E:03:7A:DC:75:87:7F:CD:5C:C3:D8:39:9E:C0:43:D6
            X509v3 Authority Key Identifier:
                keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:be:1c:0b:1f:00:5e:dd:19:b6:49:c2:3a:02:4d:bc:1d:
         18:86:a2:a8:c8:ae:28:75:3c:19:a3:93:76:23:49:d7:9a:b1:
         10:37:59:9d:a6:5a:f6:82:85:dd:c3:4f:47:e9:84:5a:5f:35:
         f2:fb:a1:51:a5:1e:e5:0b:d9:39:55:de:8d:27:be:60:bf:43:
         21:2f:b3:68:22:2e:7c:01:10:5d:da:06:b7:d9:73:06:3c:12:
         cd:85:d7:e8:29:69:07:c8:48:3c:86:fb:77:27:7a:15:cb:08:
         98:3c:fb:06:c5:e0:77:17:c5:d8:15:de:53:a0:a3:b0:8d:bd:
         5a:d0:76:0d:94:ef:ca:12:bd:52:01:fb:a6:3d:2f:f1:82:47:
         ea:51:c1:cb:8c:4b:83:27:93:2f:1c:c1:c2:1c:7d:bc:20:83:
         c8:54:20:f7:20:a1:b1:53:30:93:7d:f0:ab:f7:b7:44:41:1c:
         bd:ae:3f:d6:e0:01:05:19:6c:81:df:f3:84:90:e9:f8:49:16:
         7b:4c:0b:55:97:a0:68:98:31:fa:23:ad:d0:f0:c5:f0:c1:33:
         83:82:11:7e:72:84:da:7a:94:0b:fd:fd:75:2d:b9:64:31:12:
         dd:ca:20:13:7c:fb:8c:be:8b:74:5c:d0:ac:fa:58:bb:0b:0f:
         09:16:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----