Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File:                     rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier:          47zoWauCUtudclvzMEUsbntX2BXH5AE3DizrxFuQdqg=
Subject key identifier:   8E:85:FF:37:72:58:6E:1A:80:A2:E1:7B:B1:81:9D:C6:71:12:75:5A
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer:       /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial:       019F227DA4C5EA5B8F4C6802FCDCBBE3D20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number:          0B3B
Signing time:             Thu 02 Jul 2026 11:01:27 +0000
Manifest this update:     Thu 02 Jul 2026 11:01:27 +0000
Manifest next update:     Fri 03 Jul 2026 11:01:27 +0000
Files and hashes:         1: HPjdErKX1660Wu5s3Fbu_90wV10.roa (hash: XoWOK8TjiKV/F4rH7IzW3ugdSSR8xjGdlOumvhasewI=)
                          2: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: 5rLBNmUbrBlLb1YCd25sSCTaaxdmK1U/yaa3nqqy68U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:a4:c5:ea:5b:8f:4c:68:02:fc:dc:bb:e3:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
        Validity
            Not Before: Jul  2 11:01:27 2026 GMT
            Not After : Jul  3 11:01:27 2026 GMT
        Subject: CN=8e85ff3772586e1a80a2e17bb1819dc67112755a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:26:b4:4e:22:73:11:2b:e4:72:38:8b:ec:
                    6f:43:f3:40:b9:04:c8:9e:86:05:8f:d6:cf:01:70:
                    72:30:20:10:3c:f4:79:68:1d:e7:4e:ad:e6:28:4f:
                    b8:92:42:b4:43:f8:06:71:22:f7:8c:25:9a:9c:5a:
                    1a:29:15:b0:78:82:ca:63:21:ca:bc:bc:97:3a:16:
                    40:fa:0b:75:7b:a2:4c:62:c8:fc:32:09:ef:5c:ad:
                    31:8c:7e:89:f3:a9:63:8b:6e:f0:5e:c1:6e:c7:72:
                    d8:4a:de:ff:86:99:53:83:71:c3:fb:42:fc:6b:51:
                    cd:26:85:f3:ec:74:5e:bf:f5:c3:23:aa:02:f0:33:
                    7f:1c:bb:6c:86:9d:0c:99:f8:8c:b3:6f:32:3c:6c:
                    84:11:f9:21:9f:24:70:26:d7:02:00:43:36:14:3f:
                    29:7d:7a:be:c2:9b:af:93:a3:f4:90:4a:54:ee:82:
                    41:d2:e2:48:af:40:3e:30:c8:6e:dd:dd:80:d0:0f:
                    71:2f:ac:7c:9f:48:06:e0:5b:7e:a4:35:25:f5:00:
                    70:5c:db:b0:c2:e9:ad:50:db:dd:b5:2d:11:85:34:
                    3e:14:06:b5:48:15:d7:89:f1:d0:b9:ad:f0:f3:29:
                    74:b5:e3:c7:3b:b9:b0:56:c0:bc:04:41:41:22:0c:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:FF:37:72:58:6E:1A:80:A2:E1:7B:B1:81:9D:C6:71:12:75:5A
            X509v3 Authority Key Identifier:
                keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:8b:cb:63:73:04:0e:57:23:c1:fd:62:6e:bf:e8:ff:3e:
         a8:e8:d3:c5:b0:a0:e1:22:36:79:62:bb:25:8a:7b:22:52:ef:
         ec:c0:d0:30:56:30:fd:82:2a:99:20:ab:b2:7a:80:e8:3e:ec:
         4b:5b:e0:89:ff:91:99:33:b8:39:b6:f5:87:d1:e5:f9:57:fe:
         ec:e4:01:1c:7c:54:97:f9:f3:0a:f1:c2:b2:90:22:c0:af:a1:
         ef:b3:af:99:c1:a4:db:80:99:5e:a2:7b:a7:3f:b2:dd:98:14:
         b0:01:2e:10:1a:f6:ba:21:2b:00:0a:03:02:33:b2:9c:0e:51:
         ec:51:e4:fd:f4:13:03:ff:54:22:ab:df:28:9c:9b:7b:85:97:
         2e:3e:97:93:bf:15:a1:97:df:85:7d:71:52:e0:0e:8d:48:e1:
         f7:95:cd:5a:83:c9:f7:b1:a4:10:92:12:c0:00:f1:b7:b4:0d:
         fd:d5:45:b9:0a:00:85:0b:cf:77:e4:de:cc:0c:4b:e0:11:5b:
         43:8c:ca:c1:48:51:44:ee:ed:cd:19:86:4c:f2:9d:22:59:07:
         4d:3c:60:f5:b8:dc:dc:46:9a:60:1d:46:47:fd:80:82:66:3d:
         2a:e9:80:75:15:a7:e0:36:45:60:b1:af:c4:75:27:8f:15:f6:
         77:41:cd:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ifaTF6luPTGgC/Ny749IMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQ2NGVjYzk0NmYyOTJlNDA0ZjJjMzUxOTIyZWNmNGM1
OTBmZDgwHhcNMjYwNzAyMTEwMTI3WhcNMjYwNzAzMTEwMTI3WjAzMTEwLwYDVQQD
Eyg4ZTg1ZmYzNzcyNTg2ZTFhODBhMmUxN2JiMTgxOWRjNjcxMTI3NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv0mtE4icxEr5HI4i+xvQ/NAuQTI
noYFj9bPAXByMCAQPPR5aB3nTq3mKE+4kkK0Q/gGcSL3jCWanFoaKRWweILKYyHK
vLyXOhZA+gt1e6JMYsj8MgnvXK0xjH6J86lji27wXsFux3LYSt7/hplTg3HD+0L8
a1HNJoXz7HRev/XDI6oC8DN/HLtshp0MmfiMs28yPGyEEfkhnyRwJtcCAEM2FD8p
fXq+wpuvk6P0kEpU7oJB0uJIr0A+MMhu3d2A0A9xL6x8n0gG4Ft+pDUl9QBwXNuw
wumtUNvdtS0RhTQ+FAa1SBXXifHQua3w8yl0tePHO7mwVsC8BEFBIgzznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6F/zdyWG4agKLhe7GBncZxEnVaMB8GA1UdIwQY
MBaAFK0kZOzJRvKS5ATyw1GSLs9MWQ/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUt
NTkyZWQ3Mzc2MWNhLzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iMjY4NTktOWIxNC00NTBmLWJiODUtNTkyZWQ3Mzc2MWNh
LzEvclNSazdNbEc4cExrQlBMRFVaSXV6MHhaRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmSLy2Nz
BA5XI8H9Ym6/6P8+qOjTxbCg4SI2eWK7JYp7IlLv7MDQMFYw/YIqmSCrsnqA6D7s
S1vgif+RmTO4Obb1h9Hl+Vf+7OQBHHxUl/nzCvHCspAiwK+h77OvmcGk24CZXqJ7
pz+y3ZgUsAEuEBr2uiErAAoDAjOynA5R7FHk/fQTA/9UIqvfKJybe4WXLj6Xk78V
oZffhX1xUuAOjUjh95XNWoPJ97GkEJISwADxt7QN/dVFuQoAhQvPd+TezAxL4BFb
Q4zKwUhRRO7tzRmGTPKdIlkHTTxg9bjc3EaaYB1GR/2AgmY9KumAdRWn4DZFYLGv
xHUnjxX2d0HNHQ==
-----END CERTIFICATE-----