Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
File:                     g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json)
Hash identifier:          gPW00JYHwil/JXQxPmxbtR+K1FZIWtMMtl8Sa0izse0=
Subject key identifier:   82:70:52:FB:7A:39:23:B0:6B:EF:BB:F0:30:E5:8E:F3:88:BD:A1:E4
Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
Certificate issuer:       /CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Certificate serial:       019F21D9FE5F200B658D1D4B4152D4A8E6A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
Manifest number:          08F6
Signing time:             Thu 02 Jul 2026 08:02:42 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:42 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:42 +0000
Files and hashes:         1: XeOUR0-pjJaRQT7Tyhbi_WUTtlg.roa (hash: xjNJnRpeBMnuWS2RuvVGcAOVzSFDblEQbuBSUbq0Xoo=)
                          2: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: VoGH+NjRwyNxy67InY/p+h8tO4XXWwquGw8P6W7sgWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:fe:5f:20:0b:65:8d:1d:4b:41:52:d4:a8:e6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5
        Validity
            Not Before: Jul  2 08:02:42 2026 GMT
            Not After : Jul  3 08:02:42 2026 GMT
        Subject: CN=827052fb7a3923b06befbbf030e58ef388bda1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:81:c4:3d:d7:6f:5e:3b:4a:07:ab:e4:c4:
                    7a:8a:e3:3b:a4:5c:61:6e:b0:61:9c:30:31:53:26:
                    7b:d0:26:4b:ff:6f:6d:53:b3:bb:4e:06:5a:a5:7b:
                    c3:48:f8:e3:67:09:4d:12:f3:f4:10:2f:d8:a9:97:
                    86:f9:d2:6a:db:9d:98:45:69:0f:ef:74:29:9e:88:
                    e5:bd:00:30:6b:aa:f4:b9:9a:9b:35:58:cb:75:d0:
                    22:a1:11:55:25:7c:dd:47:fa:0d:9c:ff:71:a9:8f:
                    8d:6c:f6:d5:b8:5f:ad:0a:db:f3:c4:28:1e:7d:21:
                    7b:13:98:c4:30:ee:9b:33:e5:39:18:e3:f3:5a:8f:
                    1a:7a:f2:06:e1:f7:b2:ec:e6:41:aa:2e:87:4e:c3:
                    28:ed:fa:70:52:2d:7e:a2:c8:12:bd:ad:54:ab:fe:
                    e0:32:33:58:7c:8a:b1:a9:6a:a8:21:91:28:13:2d:
                    40:1d:4a:26:d8:72:c6:a9:23:52:2d:57:51:7e:26:
                    be:0e:a5:c4:5e:0a:be:05:93:af:46:11:d3:96:f4:
                    d6:1c:fa:84:69:32:25:28:b7:21:d9:84:c2:4a:2b:
                    5d:c8:63:56:84:80:7c:94:b9:1d:98:84:ee:2f:89:
                    41:3b:00:e8:55:00:06:ec:74:51:07:cd:ef:10:80:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:70:52:FB:7A:39:23:B0:6B:EF:BB:F0:30:E5:8E:F3:88:BD:A1:E4
            X509v3 Authority Key Identifier:
                keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:36:95:8a:c3:3a:08:91:87:42:57:24:10:a0:20:e4:a8:27:
         3b:f7:18:24:e9:14:9e:bd:c3:14:04:61:8c:80:ec:f1:39:91:
         b3:9c:a8:5d:b8:7c:41:de:6a:4f:0a:23:c6:5c:fd:a8:ec:d2:
         5a:85:4c:50:33:aa:ec:0b:4b:39:5e:15:e1:0c:3c:2b:d1:26:
         39:b3:6b:09:b3:ec:ce:80:74:77:01:cb:ab:0f:fd:3a:fb:13:
         01:65:16:c4:bb:fa:0f:b9:84:3f:bc:2e:2c:35:fa:de:30:67:
         14:22:5b:08:b6:bf:84:66:1a:7e:7e:70:06:ce:9b:06:fc:ee:
         30:5f:f5:85:33:8e:90:62:bd:5c:a1:52:4f:e7:34:3c:2f:e2:
         c8:de:33:b4:78:4d:dc:fd:c5:09:3b:19:ae:a7:c7:86:74:92:
         46:03:d1:2d:e4:54:20:30:69:b7:b6:f5:12:ad:28:22:c7:d6:
         08:d9:09:65:44:8c:a5:f6:91:e3:ac:61:a2:af:05:4f:c9:6e:
         d8:4b:52:cf:98:ae:ff:e3:50:43:04:80:35:7c:98:16:80:3b:
         cd:85:a6:e2:84:38:5e:5a:41:fa:c6:fb:05:03:87:15:33:51:
         85:05:21:93:ac:13:82:98:4f:14:c9:4d:63:c8:68:5b:64:76:
         fb:cb:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----