Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          P2idQB/sLoMvb15xpH0ctiymEKZUMmzYOpN43kDxkqQ=
Subject key identifier:   C2:44:2E:20:97:BB:4B:42:10:9B:7D:E7:46:F0:D8:3D:AA:1B:57:0C
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       019F221012886B8DC831F93ED182385690CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          0AE4
Signing time:             Thu 02 Jul 2026 09:01:46 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:46 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:46 +0000
Files and hashes:         1: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (hash: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE=)
                          2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: CUSzQqMfi3mdw+ZaErdiXFW9S8MDdUXmM61EDAM0Lfo=)
                          3: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (hash: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=)
                          4: idnfdrhgXtDVR1aINwgs1pF-5Z0.roa (hash: Zsu78wjZemkpbnYJp/D0qkjG+mU9xm9vmrGoqAJVwMY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:12:88:6b:8d:c8:31:f9:3e:d1:82:38:56:90:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Jul  2 09:01:46 2026 GMT
            Not After : Jul  3 09:01:46 2026 GMT
        Subject: CN=c2442e2097bb4b42109b7de746f0d83daa1b570c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:8b:75:ef:2d:b3:b0:a6:a2:62:61:ac:fa:
                    f4:95:92:77:15:95:8a:87:a2:7d:38:e8:f9:6e:5f:
                    10:ae:39:68:5e:d5:92:a3:b3:7b:9d:09:eb:09:14:
                    cd:88:95:f8:b5:51:7e:6d:c3:4a:5a:13:51:4b:01:
                    2f:1d:43:f8:91:ad:87:0a:7c:ac:0c:b4:88:95:45:
                    c6:2a:ee:27:d3:83:a1:db:a7:75:04:59:cc:c8:80:
                    14:d7:29:2d:38:fa:24:3f:05:69:ef:44:ff:e9:e1:
                    3a:a8:da:2a:e4:92:cf:f7:22:75:33:72:7c:d8:5d:
                    1c:a7:cc:75:0c:8c:90:ea:51:52:13:90:46:3a:e9:
                    fe:f6:84:aa:19:9c:03:a4:9a:80:3d:34:fa:e7:7f:
                    bd:d0:b0:4d:1b:44:e8:d4:0c:b2:41:4d:8b:b6:92:
                    d8:d3:94:a5:5b:cb:81:52:78:7d:a8:2f:f6:80:c1:
                    91:6c:15:9b:cf:2e:dd:76:4a:00:a4:49:fe:3c:38:
                    c9:ae:8a:88:40:63:79:ef:f3:6a:d4:fe:7e:8d:c3:
                    5b:95:50:09:a5:3c:b6:ac:fc:5d:e4:d6:16:a2:31:
                    36:2c:65:d1:9f:54:0d:47:ae:6a:dc:24:b6:a5:42:
                    d7:bd:2f:c4:1c:24:ac:2e:79:bb:1c:4d:6f:4a:92:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:2E:20:97:BB:4B:42:10:9B:7D:E7:46:F0:D8:3D:AA:1B:57:0C
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cd:d7:d2:58:13:71:a4:c2:53:d1:99:28:68:c3:6c:39:58:
         8a:b1:6c:32:84:b3:0c:7e:8f:70:01:b2:0a:a3:df:55:17:90:
         9c:b6:23:fb:90:f2:3a:73:f6:00:29:d6:6a:3c:e7:77:19:a7:
         11:dc:cd:87:0a:38:81:9f:43:f4:54:6f:87:b5:1f:82:94:66:
         7c:13:71:60:de:64:33:18:0a:a8:0a:4a:17:8a:d2:39:70:66:
         02:47:51:98:6b:4d:3b:6e:f4:49:64:6b:74:83:ad:66:8e:e2:
         b9:3e:dc:80:6b:c0:62:fc:59:1c:ca:48:ec:8b:cf:7e:4f:69:
         f9:f9:e1:d3:58:6d:58:64:75:de:0f:15:f8:d0:a1:cf:0b:d9:
         78:2f:76:6d:02:48:14:94:b0:93:b4:0e:99:c3:ab:3c:61:1c:
         90:03:3f:e6:2d:f4:e3:54:ed:64:a2:3f:33:4b:a4:9e:5e:d1:
         1b:32:1a:c2:9d:08:aa:ed:d0:43:5a:6a:79:87:5a:ff:c7:b3:
         a2:37:a4:5b:1f:75:c9:27:f0:7b:d5:22:01:6e:00:a2:4c:a3:
         2a:ab:65:6e:12:67:c4:1e:e4:83:94:ad:13:cf:1b:0e:05:62:
         7d:c3:58:44:98:d1:16:11:bd:79:d6:a5:98:c9:87:da:2a:ca:
         8c:95:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:45 2026 by rpki-client