Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File:                     kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier:          wRlDdUP3m3FS2ZC7hkyLo8yTU2nLIBIXw6XcE0EDRPs=
Subject key identifier:   D0:20:96:04:20:3D:B4:10:00:3D:92:14:F3:9E:9A:CA:68:6F:18:48
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer:       /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial:       019F22476E9A381599558542F61ADFEF3B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 10:02:14 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:14 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:14 +0000
Files and hashes:         1: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: 3Fkla0BireL05WlRqg61RjnIEgU/rHYLOEOkB2yH2Po=)
                          2: xLze-dzWhrWc4ZIDUWJZ_BOy1KI.roa (hash: 0OM80oLlh3CK0UhiDUq1hTXKbXwk81sJbwvoCae7MFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:6e:9a:38:15:99:55:85:42:f6:1a:df:ef:3b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
        Validity
            Not Before: Jul  2 10:02:14 2026 GMT
            Not After : Jul  3 10:02:14 2026 GMT
        Subject: CN=d0209604203db410003d9214f39e9aca686f1848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:de:cb:c4:ce:ee:e0:ab:ee:30:54:4f:f9:
                    74:e8:35:6b:b5:e0:cc:f9:07:c5:6a:af:a7:8a:81:
                    84:fb:83:05:dc:a0:b6:57:55:66:bb:ee:92:1b:49:
                    e8:b4:32:64:e3:98:9a:ac:ee:e4:b1:e4:71:f9:5a:
                    4e:c3:6d:6b:da:83:c8:24:83:de:0e:8f:a4:35:c3:
                    60:10:a3:d5:eb:35:64:98:cf:b2:76:b8:36:f7:49:
                    d5:08:3b:02:b8:72:98:e4:fe:64:3b:82:69:5e:b4:
                    ef:c4:51:eb:00:5a:53:cc:dc:4a:ce:c1:ae:17:ed:
                    19:da:42:94:6c:9d:56:33:c5:8a:85:71:46:fe:d2:
                    85:4a:9e:00:b6:df:eb:36:ed:55:ab:b7:aa:8b:fb:
                    e6:b9:1b:02:a8:50:a7:d1:4a:b8:f0:99:7a:a8:63:
                    9f:ab:fc:6e:33:a6:ed:ec:9d:7c:32:71:58:59:35:
                    07:ed:40:42:6d:4b:54:6d:2e:d0:4e:eb:b8:02:58:
                    35:53:02:f3:e3:02:fc:06:a8:59:84:a2:02:24:53:
                    6a:b0:f5:3b:47:01:19:de:1a:ce:39:1d:cb:7d:ef:
                    0f:8c:e1:92:32:98:26:16:ba:a7:ad:75:a6:ea:23:
                    6a:a6:64:e8:8a:73:eb:d2:41:56:92:b7:2f:a7:95:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:96:04:20:3D:B4:10:00:3D:92:14:F3:9E:9A:CA:68:6F:18:48
            X509v3 Authority Key Identifier:
                keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:94:05:ac:b2:ff:06:5f:4a:bc:3c:92:0b:ba:67:f3:64:c3:
         d6:04:14:cc:fc:80:ce:67:36:a8:05:76:0c:9b:fc:da:9d:3b:
         f7:96:2d:25:ff:c3:5b:3a:76:8e:a5:fb:a3:6c:da:7c:08:5c:
         ca:b9:fb:d7:d8:47:54:c3:86:00:8e:ac:33:95:2e:e8:c2:73:
         de:53:e4:3b:bf:6f:60:2d:39:82:16:ff:7a:f0:eb:5d:be:e2:
         55:27:fd:20:d6:b0:eb:4d:02:0c:c7:33:e3:8b:a9:46:e4:47:
         af:09:52:66:b8:a6:96:be:89:ae:52:26:98:84:b8:9a:2b:60:
         af:91:a4:44:b6:7f:5b:e5:ec:0a:6f:a1:80:b3:78:da:20:41:
         89:10:3c:40:f4:2d:24:f7:be:62:9a:88:05:54:d7:54:38:32:
         60:7d:35:34:ea:f8:9e:ed:64:69:f1:5f:ab:93:af:bb:c0:07:
         78:69:54:a2:61:78:82:52:16:21:d4:04:5f:41:6a:a6:ae:2b:
         d2:b1:6f:34:e9:13:51:92:db:37:b5:75:8c:a0:0f:b0:40:1a:
         6e:83:aa:fd:cd:3b:bb:16:bc:63:c4:89:3c:5f:23:04:b5:05:
         5a:a3:50:f6:08:b3:d5:28:d3:8c:f4:95:12:e4:bb:b2:ff:c3:
         2a:32:e5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iR26aOBWZVYVC9hrf7zsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNGE5N2Q5MTJkNzFmODBmZDM2YjczZWZjMGZjNzk2OTc2
MmYzMzcwHhcNMjYwNzAyMTAwMjE0WhcNMjYwNzAzMTAwMjE0WjAzMTEwLwYDVQQD
EyhkMDIwOTYwNDIwM2RiNDEwMDAzZDkyMTRmMzllOWFjYTY4NmYxODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynLey8TO7uCr7jBUT/l06DVrteDM
+QfFaq+nioGE+4MF3KC2V1Vmu+6SG0notDJk45iarO7kseRx+VpOw21r2oPIJIPe
Do+kNcNgEKPV6zVkmM+ydrg290nVCDsCuHKY5P5kO4JpXrTvxFHrAFpTzNxKzsGu
F+0Z2kKUbJ1WM8WKhXFG/tKFSp4Att/rNu1Vq7eqi/vmuRsCqFCn0Uq48Jl6qGOf
q/xuM6bt7J18MnFYWTUH7UBCbUtUbS7QTuu4Alg1UwLz4wL8BqhZhKICJFNqsPU7
RwEZ3hrOOR3Lfe8PjOGSMpgmFrqnrXWm6iNqpmToinPr0kFWkrcvp5V0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAglgQgPbQQAD2SFPOemspobxhIMB8GA1UdIwQY
MBaAFJJKl9kS1x+A/Ta3PvwPx5aXYvM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEt
ODE0ODU2ZTFiMWY0LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hZDM1ODYtYTAyOC00NzQ2LWIzZGEtODE0ODU2ZTFiMWY0
LzEva2txWDJSTFhINEQ5TnJjLV9BX0hscGRpOHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5QFrLL/
Bl9KvDySC7pn82TD1gQUzPyAzmc2qAV2DJv82p0795YtJf/DWzp2jqX7o2zafAhc
yrn719hHVMOGAI6sM5Uu6MJz3lPkO79vYC05ghb/evDrXb7iVSf9INaw600CDMcz
44upRuRHrwlSZrimlr6JrlImmIS4mitgr5GkRLZ/W+XsCm+hgLN42iBBiRA8QPQt
JPe+YpqIBVTXVDgyYH01NOr4nu1kafFfq5Ovu8AHeGlUomF4glIWIdQEX0Fqpq4r
0rFvNOkTUZLbN7V1jKAPsEAaboOq/c07uxa8Y8SJPF8jBLUFWqNQ9giz1SjTjPSV
EuS7sv/DKjLlJA==
-----END CERTIFICATE-----