Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File:                     9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier:          cH4hbG8DuAmHL7scZfCzxH978IxaNltu32RabboK80U=
Subject key identifier:   95:52:5C:46:5F:E7:FE:D4:D0:AF:7D:B8:2E:8B:4C:99:76:D7:22:02
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer:       /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial:       01A080099DF32235CF82AB6A34E65C787548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number:          0EB7
Signing time:             Tue 08 Sep 2026 08:01:48 +0000
Manifest this update:     Tue 08 Sep 2026 08:01:48 +0000
Manifest next update:     Wed 09 Sep 2026 08:01:48 +0000
Files and hashes:         1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: lAkojkb8EUkA42LS1gPR9yIecpiyxCrPplaNvWibOis=)
                          2: TujVxWk7elywpyXmIMnDKFw3mNo.roa (hash: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:80:09:9d:f3:22:35:cf:82:ab:6a:34:e6:5c:78:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
        Validity
            Not Before: Sep  8 08:01:48 2026 GMT
            Not After : Sep  9 08:01:48 2026 GMT
        Subject: CN=95525c465fe7fed4d0af7db82e8b4c9976d72202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:cf:56:a3:ed:a9:7b:6a:4e:06:bb:f9:9f:
                    20:d7:4d:39:ac:20:ba:c8:e1:7d:20:c0:d8:8a:43:
                    77:d7:4e:92:af:b1:03:59:88:55:32:8c:40:7d:60:
                    d1:59:f1:aa:12:e9:59:8e:32:e3:5c:dc:1d:d0:c6:
                    91:a4:ad:be:c9:1a:a5:da:0d:91:86:a3:60:14:5b:
                    10:7f:a0:3e:e5:5a:80:64:d7:ff:87:2a:1a:79:3f:
                    8d:63:d0:d5:3b:2b:b9:1a:52:7f:77:92:fd:2c:99:
                    bd:9f:21:9d:ce:8b:4a:a0:ba:93:c4:70:3c:6c:49:
                    fd:75:87:45:e1:6f:e4:81:21:33:da:09:d1:23:10:
                    94:b4:3c:09:71:5e:31:59:ca:cc:a9:9c:11:1d:31:
                    d1:96:18:ec:b4:50:7a:26:a6:91:19:9a:c8:12:7e:
                    9a:d6:5d:eb:87:0e:39:c1:a3:bc:6f:1d:55:94:cc:
                    ff:8e:c4:70:ef:48:76:09:24:9b:dc:44:ce:53:b9:
                    cb:06:b4:e7:bf:75:61:23:ad:7c:e0:2c:e3:d6:4c:
                    1f:74:aa:00:e7:8e:14:7e:51:e4:07:09:e7:10:1c:
                    52:c4:f3:1c:51:00:3f:73:90:fa:b1:3f:be:6e:93:
                    a2:ba:eb:e5:1c:d1:ec:9b:80:69:0e:bb:f7:32:4b:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:52:5C:46:5F:E7:FE:D4:D0:AF:7D:B8:2E:8B:4C:99:76:D7:22:02
            X509v3 Authority Key Identifier:
                keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:64:52:d9:de:8b:22:36:f2:25:b2:16:6b:52:eb:cc:ba:4b:
         6b:11:b2:b1:9a:bc:84:b7:37:a2:86:99:56:87:a5:e6:6f:ea:
         af:9d:20:e2:97:c7:2d:2b:6e:37:75:7a:38:4e:51:f1:82:9c:
         ce:62:f9:7d:b6:b9:ef:a2:87:e6:c0:ba:e9:04:e8:f0:b3:77:
         8c:f9:71:31:72:22:2d:29:9f:e4:5d:23:7b:7f:3a:88:6f:01:
         13:83:62:d1:15:76:70:d4:51:d2:29:c0:e8:7c:b4:8c:6b:8d:
         2e:69:e2:95:d5:9a:26:d6:70:f6:5c:cc:e4:15:53:dd:96:8c:
         4a:1d:dd:aa:fa:30:e6:93:44:ec:9c:2c:63:8c:ec:de:46:9d:
         5a:64:5f:c4:f2:86:c9:05:8f:e1:c7:86:e7:14:80:6f:a8:b2:
         18:c9:61:e8:7e:50:f0:2d:d2:fb:a2:92:41:3c:c4:a6:30:e5:
         55:a1:f8:2f:5c:a8:30:7f:77:04:f0:d7:9f:76:19:d0:08:6d:
         a1:be:b9:fd:d0:78:38:49:47:24:57:7c:54:86:37:e6:f0:7d:
         db:d4:56:86:af:3b:aa:21:40:2f:81:fb:36:75:de:93:7a:f6:
         ff:d8:5c:fa:f9:00:be:28:71:51:a1:c8:06:12:c3:a7:5e:e4:
         17:c2:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----