Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
File:                     Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json)
Hash identifier:          F8HzKXsO9rN4gwff6oo76heVxEpJs6ILc1ox/4RtMs4=
Subject key identifier:   E2:19:E6:97:01:53:C4:EB:C8:48:5B:B1:7D:B1:1A:B7:D8:3F:82:A9
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Certificate issuer:       /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial:       01A15364DA3D812C7323F38817A347AD1B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
Manifest number:          0F4E
Signing time:             Mon 19 Oct 2026 09:01:20 +0000
Manifest this update:     Mon 19 Oct 2026 09:01:20 +0000
Manifest next update:     Tue 20 Oct 2026 09:01:20 +0000
Files and hashes:         1: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: dicThoZPLKpfcdsJPwpUqPb9OUSUBWKQM7Ay2roRV1I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:64:da:3d:81:2c:73:23:f3:88:17:a3:47:ad:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
        Validity
            Not Before: Oct 19 09:01:20 2026 GMT
            Not After : Oct 20 09:01:20 2026 GMT
        Subject: CN=e219e6970153c4ebc8485bb17db11ab7d83f82a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:78:3a:fa:ff:11:ee:25:20:54:2a:c5:33:75:
                    f7:da:5d:7e:2d:f9:1f:8b:f4:e8:06:e1:c9:79:28:
                    f2:6e:e5:59:e1:c7:d9:a7:0d:15:15:22:51:e9:a7:
                    27:4f:7f:e2:a0:ce:f3:d4:88:d9:89:e2:4a:8f:ad:
                    67:9b:15:6b:13:85:ab:72:1d:45:10:be:1f:68:ae:
                    d3:a0:4a:bf:8a:c4:31:9c:e6:4e:fe:76:0f:a2:1e:
                    39:ac:1e:ca:4b:ed:33:45:09:d6:c3:60:13:dc:77:
                    54:63:bf:f8:3f:4e:29:fb:87:7c:62:70:79:a8:41:
                    c7:84:67:58:0f:50:95:36:be:a0:86:84:e6:80:67:
                    a6:68:6b:79:2c:35:af:68:6e:22:ec:e2:48:47:97:
                    b8:38:59:0b:45:fd:36:6f:0b:12:01:da:03:32:dc:
                    bb:e4:9c:ca:cb:8d:e2:16:ef:ad:a8:05:54:19:72:
                    bd:9b:dd:7a:41:9f:a7:76:f7:fa:65:d1:84:5a:42:
                    5a:aa:1f:d0:17:70:d2:4d:c1:83:22:9a:57:1d:c4:
                    e8:9e:78:fa:46:a4:d7:ba:92:6a:38:89:35:69:23:
                    8e:5f:a5:45:d3:3c:06:a5:2f:2a:b1:2f:38:88:29:
                    57:1b:fc:40:bc:3a:b6:b1:e0:bd:6e:a7:f7:2e:33:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:19:E6:97:01:53:C4:EB:C8:48:5B:B1:7D:B1:1A:B7:D8:3F:82:A9
            X509v3 Authority Key Identifier:
                keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:98:5c:14:a2:20:86:83:4c:74:66:b5:4d:90:00:f1:a1:b4:
         50:6d:5c:a1:5d:74:f5:b3:15:d2:23:f6:f6:ac:41:b9:ec:a4:
         04:9b:de:5b:ac:34:b5:51:a8:ac:a4:5f:31:6b:ce:cb:a0:37:
         a0:56:df:0f:a1:5a:ce:fa:18:95:eb:fc:48:6c:93:8d:fc:5d:
         02:24:10:f2:11:82:c2:f4:28:09:00:9e:d7:97:ab:f8:67:c3:
         14:bd:72:f2:31:a1:82:da:96:e4:c3:ac:a5:56:7a:ea:f1:6c:
         0c:8e:b2:36:ea:34:ce:48:17:d6:70:df:43:05:a5:66:c7:27:
         46:04:b6:14:cd:b6:f9:81:3d:7a:73:69:31:40:31:86:2a:12:
         2c:4c:da:aa:52:5a:5e:a3:92:d4:7a:9c:49:fc:cf:1f:93:90:
         67:ba:96:1b:74:e6:73:09:54:8c:3e:1d:23:e2:17:d2:ef:9a:
         fd:93:ef:2c:37:61:0f:83:b0:82:ea:2a:8f:0f:a8:7f:16:f8:
         b1:4b:9b:ae:34:7f:ee:80:fc:83:a3:ad:74:14:51:ee:fb:e1:
         04:a4:df:f3:3d:4f:62:67:1d:30:ed:c1:30:a7:f9:8a:d5:19:
         51:b0:af:e3:c6:55:f3:0f:eb:0e:26:ef:be:75:e4:9a:cf:dc:
         bb:a5:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----