Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File:                     dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier:          zUmFTSmUjqzwW9hb74wsybQaSLEEQzfFu1tO5LOLFgk=
Subject key identifier:   34:CE:4F:03:64:A8:86:C4:2B:BE:E3:9B:73:53:BF:0B:C3:0C:90:40
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer:       /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial:       019F22EC4B50E7AD0A8DA8B66606B175D448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number:          1951
Signing time:             Thu 02 Jul 2026 13:02:18 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:18 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:18 +0000
Files and hashes:         1: QORmhi_9epbeW9LCcd6n0EGtUY8.roa (hash: yh8fGZBqg446G7IvQWeFZ53Dmb/4eGEcmhE71J/WqVg=)
                          2: VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa (hash: 31aRf+y4KMCXXKPf61vmEKuD5SrxcJx1XR4Sfcx1mPk=)
                          3: d1KZjcdpNHIYVpiceFKi35WBNOI.roa (hash: bhgrHFOFhyZ/ACw8GjeBW0aMegg7PL6RgkmabbugbK8=)
                          4: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: 9tqGKrE2Aifk2JWYZrYTunZxCeOuZ1CCaGDTLE750pU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:4b:50:e7:ad:0a:8d:a8:b6:66:06:b1:75:d4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
        Validity
            Not Before: Jul  2 13:02:18 2026 GMT
            Not After : Jul  3 13:02:18 2026 GMT
        Subject: CN=34ce4f0364a886c42bbee39b7353bf0bc30c9040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:1b:eb:e9:2d:b7:55:d7:df:cf:ee:08:9a:
                    5f:52:3c:8c:3e:fe:ca:a6:71:05:3a:66:e4:46:10:
                    d9:9f:4c:de:58:76:08:9d:25:02:ee:ef:e0:7e:e6:
                    cb:8a:df:bb:36:30:80:e4:a8:6c:9b:49:55:6a:f0:
                    7b:ca:b2:f0:3c:1d:c6:fc:bd:c4:40:2e:ed:b2:a9:
                    36:1d:26:29:c8:2f:d2:32:c0:26:f7:20:a8:59:18:
                    50:f4:b4:09:a1:89:b5:61:75:77:28:fa:8c:23:a5:
                    42:27:9e:a8:2a:b6:4b:2b:57:36:71:4e:44:65:92:
                    c3:9a:81:0c:66:c0:a6:bc:12:2b:70:a0:8f:ee:9c:
                    d4:67:f3:e3:e0:29:c3:ad:a3:2e:d2:d9:aa:d3:bc:
                    84:7e:a6:3a:88:3d:49:99:24:59:86:a9:df:a0:48:
                    c2:74:c0:a6:e4:9a:44:b5:26:17:2c:2d:30:26:34:
                    da:54:dc:56:b0:db:ae:c8:58:a5:08:e3:b2:c5:3e:
                    f6:2a:f2:06:b5:0e:59:d0:1f:ff:9a:1e:e0:26:a7:
                    6c:9d:2c:51:84:9c:d7:27:bd:28:fd:12:07:17:6e:
                    e9:0c:59:df:96:51:69:f0:d9:bc:2c:7b:2e:bd:32:
                    70:b0:a5:97:30:9d:ad:76:77:b2:67:38:1e:4b:8c:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:4F:03:64:A8:86:C4:2B:BE:E3:9B:73:53:BF:0B:C3:0C:90:40
            X509v3 Authority Key Identifier:
                keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:75:c0:65:fa:4a:e1:6a:42:e5:07:1b:d4:8a:71:41:70:a6:
         bb:09:2b:19:0d:fb:1c:69:51:27:58:80:e1:36:27:e1:ac:b3:
         9a:76:5e:cf:b1:f1:68:2f:58:45:74:76:36:83:60:ab:34:75:
         73:bb:a4:01:13:eb:99:56:f2:e1:4a:04:c8:7e:44:d1:f1:47:
         8e:13:c0:a7:c3:eb:1d:32:fa:06:24:52:1d:10:ad:c6:d5:c2:
         e5:fd:ed:81:75:f7:64:03:63:43:38:24:ea:7c:b5:e5:19:6d:
         b1:66:9a:4b:41:5d:ad:3b:05:16:d8:22:88:fc:6c:ba:ed:4c:
         3f:a5:d5:f3:1b:ad:f3:1b:97:7e:c7:9b:82:8c:08:a8:71:4c:
         55:83:15:7c:70:76:1c:ef:a4:d6:cf:16:19:78:6c:09:33:cf:
         bd:76:d8:9d:cb:f6:08:77:53:b4:61:06:0e:24:1b:cf:79:f6:
         67:73:a1:e5:ac:ed:3d:a1:0c:f5:6c:a0:fe:62:a7:19:55:6f:
         24:32:27:49:7a:4c:86:c1:28:b9:6a:da:81:f9:6b:12:26:ae:
         b0:24:5a:2e:b6:4d:ad:90:69:91:3b:7d:b8:d6:fb:6b:cc:a0:
         9f:3d:7c:4e:22:34:fc:e8:b7:1b:71:8a:0a:41:21:7e:59:7c:
         b2:f2:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----