Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File:                     FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier:          pFl+iSqQ/KJyZnLsUIZX3+sWYTk4MoHd26iyYiTnskc=
Subject key identifier:   37:44:52:DD:A5:62:3D:AE:8F:5F:69:47:58:1A:56:89:29:2E:43:00
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer:       /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial:       019CDAA055535D1A42B25370F97311064A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number:          185F
Signing time:             Wed 11 Mar 2026 02:01:06 +0000
Manifest this update:     Wed 11 Mar 2026 02:01:06 +0000
Manifest next update:     Thu 12 Mar 2026 02:01:06 +0000
Files and hashes:         1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: TeC5wMRw+/hbxeczEx+Nh+Oyw55diq4RGwQfzmFkM0M=)
                          2: ZbxImoNqXRLDNvdnH4iMDANgidI.roa (hash: w0C4brd6pZ8lauWP2MWtB50PXapccIM+KpGIY1kaKnY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:da:a0:55:53:5d:1a:42:b2:53:70:f9:73:11:06:4a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
        Validity
            Not Before: Mar 11 02:01:06 2026 GMT
            Not After : Mar 12 02:01:06 2026 GMT
        Subject: CN=374452dda5623dae8f5f6947581a5689292e4300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:57:6a:ab:01:d8:6a:2f:4a:bb:a1:10:53:
                    5a:ce:f0:bf:8e:aa:31:98:72:7a:3b:e1:75:42:62:
                    2d:3f:e0:cf:32:31:06:fb:97:d7:fd:0e:13:a2:c2:
                    06:e9:54:36:c1:6d:6b:7a:db:d9:22:cd:a6:37:6c:
                    9a:3f:59:9d:2a:f6:4b:60:f0:52:c7:c7:57:ad:f2:
                    dc:c0:5e:23:d4:c8:64:5f:63:f5:11:63:2c:27:32:
                    d8:cb:2d:90:93:4c:d0:51:d5:80:3e:60:6e:d4:71:
                    92:0d:7c:78:b6:1f:e4:6f:14:5d:5d:7a:04:94:fa:
                    c7:52:48:91:95:3f:71:d8:1e:fb:f6:86:fd:b1:80:
                    e0:0e:0e:92:03:74:e8:47:d6:59:4a:bc:1e:e1:7f:
                    96:b2:71:d4:f1:fb:a0:a3:18:61:fc:c2:72:05:ce:
                    48:3a:95:77:fa:1b:88:ff:c0:16:59:af:09:ad:54:
                    1c:4c:d0:47:91:f4:58:91:12:2e:8d:57:b3:29:8a:
                    a6:9b:fc:67:78:5c:8d:94:f1:a7:bc:a7:e4:f1:f5:
                    cd:f8:39:dc:2f:22:7f:3c:57:c3:3d:50:f4:d3:81:
                    2c:20:4d:a1:d1:0a:2b:32:b0:0e:7a:02:33:14:ca:
                    71:33:03:4d:55:3d:dd:f5:82:d3:b1:4c:93:9e:74:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:52:DD:A5:62:3D:AE:8F:5F:69:47:58:1A:56:89:29:2E:43:00
            X509v3 Authority Key Identifier:
                keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:44:89:b5:d0:56:0b:1d:4c:4c:0f:eb:36:61:b0:cc:f5:
         78:a5:56:14:8e:5a:b0:a4:78:08:85:a9:3d:fd:35:a4:e8:88:
         30:04:36:ed:56:bb:38:a3:f5:19:22:98:5d:b4:06:ef:1d:c9:
         75:7e:ba:b9:f8:33:2f:5b:f2:b9:80:e3:23:ad:74:3f:d6:3c:
         52:24:87:b5:3b:10:94:b6:f2:1d:93:50:4e:e6:35:a9:7f:8a:
         28:f5:de:67:4d:5a:c3:08:a8:fa:c9:e8:34:c1:36:ec:4c:35:
         5d:a4:19:ce:3c:88:c8:d2:dc:14:49:7c:33:56:75:75:26:bf:
         57:71:7e:71:b5:56:a9:96:c0:e9:19:33:79:f3:4d:ef:d5:48:
         1b:9d:55:ee:13:3c:26:4d:ef:d8:11:53:ae:28:ea:0d:f2:e5:
         80:5b:f2:4e:37:1b:d7:27:18:de:fc:22:f8:70:14:e0:74:c8:
         7d:f6:6b:34:ce:aa:a9:46:2d:ef:e9:0e:4a:84:7a:41:f9:86:
         5e:27:22:26:ca:98:25:58:d1:2a:f7:d2:be:b7:16:64:48:dd:
         27:c5:85:e9:af:eb:41:9d:44:02:fd:5a:18:26:71:22:94:18:
         92:37:f0:97:f8:f5:ab:09:07:ea:b8:ea:70:ff:c6:b0:7e:da:
         d7:c5:20:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzaoFVTXRpCslNw+XMRBkp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1
Zjk2YzIwHhcNMjYwMzExMDIwMTA2WhcNMjYwMzEyMDIwMTA2WjAzMTEwLwYDVQQD
EygzNzQ0NTJkZGE1NjIzZGFlOGY1ZjY5NDc1ODFhNTY4OTI5MmU0MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs05XaqsB2GovSruhEFNazvC/jqox
mHJ6O+F1QmItP+DPMjEG+5fX/Q4TosIG6VQ2wW1retvZIs2mN2yaP1mdKvZLYPBS
x8dXrfLcwF4j1MhkX2P1EWMsJzLYyy2Qk0zQUdWAPmBu1HGSDXx4th/kbxRdXXoE
lPrHUkiRlT9x2B779ob9sYDgDg6SA3ToR9ZZSrwe4X+WsnHU8fugoxhh/MJyBc5I
OpV3+huI/8AWWa8JrVQcTNBHkfRYkRIujVezKYqmm/xneFyNlPGnvKfk8fXN+Dnc
LyJ/PFfDPVD004EsIE2h0QorMrAOegIzFMpxMwNNVT3d9YLTsUyTnnSrGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdEUt2lYj2uj19pR1gaVokpLkMAMB8GA1UdIwQY
MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt
ZTM2ZThkMjkzYWUwLzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw
LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNJEibXQ
VgsdTEwP6zZhsMz1eKVWFI5asKR4CIWpPf01pOiIMAQ27Va7OKP1GSKYXbQG7x3J
dX66ufgzL1vyuYDjI610P9Y8UiSHtTsQlLbyHZNQTuY1qX+KKPXeZ01awwio+sno
NME27Ew1XaQZzjyIyNLcFEl8M1Z1dSa/V3F+cbVWqZbA6RkzefNN79VIG51V7hM8
Jk3v2BFTrijqDfLlgFvyTjcb1ycY3vwi+HAU4HTIffZrNM6qqUYt7+kOSoR6QfmG
XiciJsqYJVjRKvfSvrcWZEjdJ8WF6a/rQZ1EAv1aGCZxIpQYkjfwl/j1qwkH6rjq
cP/GsH7a18Ugcg==
-----END CERTIFICATE-----