Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File:                     qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier:          3YoJT2EiH+WcodvRGEjXkIOBSQV6poBjSG0eEFq920Q=
Subject key identifier:   1E:02:80:AC:85:55:DB:00:7F:80:41:1A:F1:B5:2C:BF:51:37:17:4F
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer:       /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial:       019F2247AF299E7C8C289583E0F8EBD419F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number:          1990
Signing time:             Thu 02 Jul 2026 10:02:30 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:30 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:30 +0000
Files and hashes:         1: DccQAZUV3qZdgqhQbHnkJWn4glU.roa (hash: gCexvZF+3EFm1YK+f7oWwdQALyv1CumdqY+4Q5Ew2yI=)
                          2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: UQQ6WtdzHfE60rfuXmDvjO1loE0m+e+C6Sdg/7bzNuY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:af:29:9e:7c:8c:28:95:83:e0:f8:eb:d4:19:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
        Validity
            Not Before: Jul  2 10:02:30 2026 GMT
            Not After : Jul  3 10:02:30 2026 GMT
        Subject: CN=1e0280ac8555db007f80411af1b52cbf5137174f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:e4:70:04:b5:88:e2:aa:08:31:99:b0:8e:
                    c4:f8:37:1a:c2:bb:87:da:49:7f:b4:6a:01:3c:7c:
                    e9:dd:6a:5a:0e:c9:90:02:8a:88:f7:aa:b5:ed:45:
                    ad:62:cc:91:03:37:53:00:25:6b:11:21:7d:d6:2e:
                    39:1a:2c:42:c8:af:f2:bb:69:93:07:f0:52:e9:59:
                    8d:95:97:23:da:61:af:a4:c3:ee:84:ce:f0:a2:28:
                    f6:07:3f:f8:78:cd:aa:f8:f2:2f:ce:5f:7c:5e:95:
                    e9:d6:37:df:86:12:dd:80:71:f8:01:da:53:d8:52:
                    43:38:ce:9c:3b:c9:41:34:56:e5:3f:88:8b:cb:c6:
                    5f:a4:87:39:31:cf:11:d6:52:a8:90:9f:5b:4e:71:
                    e4:52:1d:96:5a:2d:bc:af:38:0b:c1:1c:50:72:7b:
                    59:d4:cf:c9:78:18:64:5c:45:33:bb:a4:3b:d8:44:
                    40:a6:49:62:f3:c9:b5:4c:15:7c:64:82:eb:65:5c:
                    87:63:2f:21:e4:97:a0:59:87:df:20:62:5c:ac:01:
                    3f:c1:cc:11:df:cd:de:22:a3:f5:e2:02:11:cb:00:
                    e4:01:e5:03:2c:e4:e5:20:fe:6e:65:8a:75:29:14:
                    25:e0:71:2c:aa:42:e4:9d:8d:7e:3b:ea:96:42:d6:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:02:80:AC:85:55:DB:00:7F:80:41:1A:F1:B5:2C:BF:51:37:17:4F
            X509v3 Authority Key Identifier:
                keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:09:6d:01:8c:17:56:bd:3a:56:a2:50:3e:23:da:df:4f:
         fe:5d:11:3d:6c:41:1b:fb:7c:3d:d8:cc:9a:45:93:ed:9c:da:
         02:e8:eb:8c:00:96:f3:78:b9:5a:12:1d:db:94:cd:18:3a:0c:
         d8:7f:48:7e:d0:26:74:db:cb:75:7c:ca:45:e6:7b:ba:52:cd:
         62:4c:a4:cb:f1:a5:ab:fb:f9:98:f7:4f:27:f8:a5:f5:e2:d4:
         f8:bd:bc:fd:ae:95:6f:37:b5:44:c0:a9:3b:32:47:c8:2a:ae:
         8b:ec:f9:51:b5:93:6f:a0:87:d3:d1:70:4b:3b:6a:94:5d:1e:
         fc:82:1f:03:6f:71:cb:53:cb:75:a1:72:69:28:35:2d:1e:01:
         52:f1:fc:bd:4c:9c:63:69:aa:3b:35:ab:80:16:46:f8:c6:f4:
         82:08:ee:6e:f5:b9:de:0d:be:60:bd:7d:82:98:4a:2b:d2:8a:
         b9:2a:95:ad:a8:c6:6e:4a:ed:05:f3:52:c7:33:b2:9a:27:92:
         55:2f:55:3c:80:26:70:d3:36:32:67:89:80:37:a6:dc:a8:9b:
         16:38:bf:91:fe:5d:ae:f3:cf:87:15:d8:c3:86:cc:ec:1a:ef:
         f9:6e:f6:2f:b5:c3:dc:b8:47:35:01:9e:90:4f:50:bd:9a:55:
         93:93:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----