Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          VTN8PNgyE1iL6saJpbfuRuZAqX05zbOnauMxlsoWKEs=
Subject key identifier:   08:A3:CC:EA:1A:4C:59:18:F9:B6:54:A9:9D:94:BE:5F:AC:F5:75:2C
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       019F22107046F301D887B6A6770210F7F2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0E3A
Signing time:             Thu 02 Jul 2026 09:02:10 +0000
Manifest this update:     Thu 02 Jul 2026 09:02:10 +0000
Manifest next update:     Fri 03 Jul 2026 09:02:10 +0000
Files and hashes:         1: RvemEYu6d9uXP0B24R0lC57HD8g.roa (hash: 9b4V5juxcrPJgnNUjLn/7LskPGWZqz+b2M3iYcgQ1TU=)
                          2: Te7hhMphvQ5EXJGUARJ2QmuB9is.roa (hash: VThy3BxGB0l0YexK6a3YlAdq8VXpKxHqVaWw46D49bE=)
                          3: alPF32vcZlTUO2FjOCdnGpcccJI.roa (hash: qcVlGmcJPOUYfeL5XleLKcxk84wFFFeO1Uoc+U/JJPs=)
                          4: fYCn4v8iFHoElnhPm0C9SUJygw0.roa (hash: NaE7YkLP9K4FMPCq8fK6cLrMNnOJGZccxSrQ3P0JIpA=)
                          5: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: OsV70EFaho4wXOsHRWRdFdyAc1U+LyfFyNCfdg4ByGk=)
                          6: ntmmZtCvWH1KgnK0mtBoZQdJAjE.roa (hash: 4hpauTiGCt/CjAVeMXrvC/dDlvUsOGjOLsKwSRTfhvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:70:46:f3:01:d8:87:b6:a6:77:02:10:f7:f2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jul  2 09:02:10 2026 GMT
            Not After : Jul  3 09:02:10 2026 GMT
        Subject: CN=08a3ccea1a4c5918f9b654a99d94be5facf5752c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:b4:09:b1:88:9d:27:d4:26:6d:a2:93:79:
                    8b:fe:e6:bf:15:56:3f:c5:d3:45:29:3f:5e:81:9d:
                    2f:ab:90:7a:28:0d:6b:16:16:3d:b0:9d:3f:94:06:
                    2b:36:0b:48:ba:0c:44:b6:c7:fa:e1:c1:5f:71:0f:
                    4a:e7:e3:84:5f:bf:c0:8d:b5:79:4b:66:6d:da:a5:
                    8e:e2:2d:6f:62:d3:5f:a2:12:c9:58:c4:88:4d:39:
                    fe:d7:a1:30:10:de:85:93:6a:e6:d5:e9:5a:d4:4f:
                    c3:ae:20:73:8c:6a:43:b9:e5:c0:2e:a1:1d:f4:40:
                    7b:db:b1:5b:de:83:06:85:2f:9c:52:4a:7b:0f:c8:
                    1f:83:06:b4:ed:1f:dc:40:6c:ce:e8:ec:97:55:23:
                    ec:00:f8:70:03:45:55:7c:91:bc:30:e5:de:a8:d6:
                    a7:fe:ee:19:92:73:44:b9:37:d3:5b:eb:0b:6f:6e:
                    a6:0f:77:de:78:58:7b:5f:f1:4c:71:40:c5:82:c0:
                    4f:cb:55:a9:be:be:2b:73:45:33:03:45:88:45:f1:
                    63:d9:ed:25:77:fd:ab:72:6d:bc:48:1e:3b:a1:c8:
                    58:8c:7f:5c:c3:e5:51:c9:d3:75:f8:6d:ce:48:bd:
                    8a:60:e0:9a:80:11:38:28:3a:cc:d6:b1:9a:e9:8a:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:CC:EA:1A:4C:59:18:F9:B6:54:A9:9D:94:BE:5F:AC:F5:75:2C
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:c2:ba:f5:f6:f7:b4:30:a3:52:95:46:a3:8b:5d:e3:15:
         7e:0d:e2:25:70:21:83:d7:3f:f4:bc:2d:27:85:06:c2:bc:bd:
         1a:7e:10:91:4c:22:07:3e:7c:19:31:e9:02:f9:bf:17:c7:4c:
         89:c9:15:e3:17:0b:1c:0a:a3:ab:65:be:36:53:09:bf:2b:45:
         01:f5:7d:26:13:04:7a:dc:23:5a:ee:94:0c:33:91:ee:ed:88:
         53:f0:4c:3e:eb:3c:18:9e:98:a3:e2:b3:31:4a:39:5a:90:d6:
         97:7f:70:18:de:4a:d4:24:54:67:08:c3:93:b5:c3:e9:37:cd:
         e9:a6:e7:7e:78:70:08:03:3f:1f:4e:dc:18:37:b5:c9:4f:91:
         b6:ac:84:62:7c:73:50:2e:d0:19:c2:fb:33:96:06:e5:e3:fc:
         d4:ee:f6:f1:bc:e8:1f:43:03:28:d5:9c:88:5a:d6:a7:0b:3a:
         e6:3d:a3:a4:82:85:7b:98:94:39:df:dd:b5:64:a1:f5:a8:f9:
         f0:6d:4b:57:5b:98:f7:80:c1:bc:9a:27:22:8f:16:e2:13:74:
         dc:22:6a:28:42:16:53:9b:d4:d7:4d:78:6f:4a:06:93:0b:b7:
         57:ca:fb:a5:ca:ad:17:5d:3b:e4:cc:38:ef:68:0c:43:f1:4a:
         38:33:07:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iEHBG8wHYh7amdwIQ9/LvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmQyMjBiMmI1YTQ2ZmJlYjI3ZWYyZDk2OWZhMjFkZDMz
OGM1YjMwHhcNMjYwNzAyMDkwMjEwWhcNMjYwNzAzMDkwMjEwWjAzMTEwLwYDVQQD
EygwOGEzY2NlYTFhNGM1OTE4ZjliNjU0YTk5ZDk0YmU1ZmFjZjU3NTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkO0CbGInSfUJm2ik3mL/ua/FVY/
xdNFKT9egZ0vq5B6KA1rFhY9sJ0/lAYrNgtIugxEtsf64cFfcQ9K5+OEX7/AjbV5
S2Zt2qWO4i1vYtNfohLJWMSITTn+16EwEN6Fk2rm1ela1E/DriBzjGpDueXALqEd
9EB727Fb3oMGhS+cUkp7D8gfgwa07R/cQGzO6OyXVSPsAPhwA0VVfJG8MOXeqNan
/u4ZknNEuTfTW+sLb26mD3feeFh7X/FMcUDFgsBPy1Wpvr4rc0UzA0WIRfFj2e0l
d/2rcm28SB47ochYjH9cw+VRydN1+G3OSL2KYOCagBE4KDrM1rGa6YrqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAijzOoaTFkY+bZUqZ2Uvl+s9XUsMB8GA1UdIwQY
MBaAFIFtIgsrWkb76yfvLZafoh3TOMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTct
ZTk3ODIwNDFjYzI0LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzEzMTEtZjQ3Zi00NmRiLThjNTctZTk3ODIwNDFjYzI0
LzEvZ1cwaUN5dGFSdnZySi04dGxwLWlIZE00eGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOLCuvX2
97Qwo1KVRqOLXeMVfg3iJXAhg9c/9LwtJ4UGwry9Gn4QkUwiBz58GTHpAvm/F8dM
ickV4xcLHAqjq2W+NlMJvytFAfV9JhMEetwjWu6UDDOR7u2IU/BMPus8GJ6Yo+Kz
MUo5WpDWl39wGN5K1CRUZwjDk7XD6TfN6abnfnhwCAM/H07cGDe1yU+RtqyEYnxz
UC7QGcL7M5YG5eP81O728bzoH0MDKNWciFrWpws65j2jpIKFe5iUOd/dtWSh9aj5
8G1LV1uY94DBvJonIo8W4hN03CJqKEIWU5vU1014b0oGkwu3V8r7pcqtF1075Mw4
72gMQ/FKODMH4A==
-----END CERTIFICATE-----