Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File:                     praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier:          L4qzUw7XvyL7MSf8Yx2Mw/rf4iY/tNHfuGqFbFtCHjo=
Subject key identifier:   6E:16:7A:50:8D:06:D1:BE:9E:63:81:E1:86:BD:AB:B7:5F:BB:5B:ED
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer:       /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial:       019F220FBA385EC5E21DB063651A8BDEB7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 09:01:23 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:23 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:23 +0000
Files and hashes:         1: jaVGzqMMffQE3Q_SdkkikAb_ifw.roa (hash: ACXMwRTCTN9KdhkKmZ8r5uOME2aL+5i4OAjE14uGMqo=)
                          2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: C5kLdkk01i/9LX0yEeohteB1LxODpHdCYcMzgW/ZnN4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:0f:ba:38:5e:c5:e2:1d:b0:63:65:1a:8b:de:b7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
        Validity
            Not Before: Jul  2 09:01:23 2026 GMT
            Not After : Jul  3 09:01:23 2026 GMT
        Subject: CN=6e167a508d06d1be9e6381e186bdabb75fbb5bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:d4:db:55:b5:73:72:c8:ff:5b:31:c9:09:
                    5e:51:5e:dd:47:ce:fc:df:d7:6d:69:9d:34:81:6c:
                    8e:7a:e5:72:c3:50:6e:95:a7:09:f9:b8:54:27:4b:
                    94:86:45:aa:7e:fb:f1:4c:40:db:5a:d1:b3:e0:78:
                    3e:94:2a:6c:f2:3b:1f:c7:78:85:a3:ea:47:6d:f3:
                    ad:96:93:1e:03:a9:c0:00:98:92:03:6e:2f:68:0b:
                    3b:bd:b2:20:ac:90:82:ba:4a:4e:e2:79:7e:34:75:
                    a6:63:c9:b4:3a:2f:18:51:50:dc:c9:c9:dc:e1:42:
                    8e:69:43:f7:05:6b:6f:f8:c8:4d:e5:b4:3d:82:ad:
                    b6:65:31:19:36:71:5c:59:8f:a7:5b:53:c6:26:51:
                    6e:27:47:39:b1:45:5e:9d:fb:ce:c3:ee:df:66:e1:
                    49:41:e3:5a:4e:eb:e3:c3:d9:fc:57:09:32:54:0d:
                    3d:7d:53:52:7e:5f:52:ba:4d:e6:0c:66:0b:92:2a:
                    2f:4b:05:5e:26:d3:32:30:13:f5:29:e3:64:bb:d8:
                    5d:4d:58:ac:bf:2d:d6:67:f9:6d:ea:32:43:be:5e:
                    9a:b9:06:10:78:4f:3f:13:c6:de:43:97:ec:68:52:
                    63:0e:c8:5d:b9:94:06:a3:95:1b:3f:71:f3:fb:de:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:7A:50:8D:06:D1:BE:9E:63:81:E1:86:BD:AB:B7:5F:BB:5B:ED
            X509v3 Authority Key Identifier:
                keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6b:24:a2:c4:bc:87:d2:66:79:c0:0f:49:17:7d:d3:b4:4b:
         41:8d:ef:6a:23:62:78:c9:bd:ec:72:ce:a2:a8:47:c1:95:f9:
         f2:dc:12:81:03:38:c6:f5:28:f7:cb:67:95:c3:23:cf:dc:bc:
         e8:83:65:a8:ed:b6:51:a9:b9:0e:a4:37:14:1a:4b:1b:8e:eb:
         d6:17:91:6f:df:7e:86:d3:73:61:e9:75:ca:be:a5:3e:c6:50:
         1e:d1:a9:c9:15:fb:86:15:3f:f8:e6:04:82:5d:de:ab:25:bb:
         b7:a1:cd:ce:08:ae:89:e3:7e:e5:f3:39:b8:54:d2:fa:53:df:
         b8:21:d2:67:5a:bd:d2:d4:e6:aa:01:e4:cc:2a:f2:c4:39:db:
         38:51:c3:0f:2c:e3:d8:b6:a4:53:90:68:8c:da:b2:22:cb:b2:
         5e:66:92:2f:64:9d:d0:ba:a3:50:e3:11:82:1f:b8:18:31:6a:
         c0:5e:f4:7e:cb:77:c4:cf:b9:4e:de:52:06:40:cd:65:54:cf:
         ea:b2:0e:64:d9:76:50:6d:b9:30:a8:25:c8:e3:01:98:94:a0:
         85:26:11:41:b9:6a:bb:75:54:5b:dc:2d:7e:c0:13:a0:c4:ee:
         da:8b:3f:68:53:2d:51:7c:a0:c2:82:f7:c5:2e:d7:b4:7b:71:
         14:93:31:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iD7o4XsXiHbBjZRqL3rfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YjY4OWRkZWY1OGYwYTMzODNlMmVmNWFhM2EyN2M0ZmU0
NTMxOGUwHhcNMjYwNzAyMDkwMTIzWhcNMjYwNzAzMDkwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTE2N2E1MDhkMDZkMWJlOWU2MzgxZTE4NmJkYWJiNzVmYmI1YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb3U21W1c3LI/1sxyQleUV7dR878
39dtaZ00gWyOeuVyw1BulacJ+bhUJ0uUhkWqfvvxTEDbWtGz4Hg+lCps8jsfx3iF
o+pHbfOtlpMeA6nAAJiSA24vaAs7vbIgrJCCukpO4nl+NHWmY8m0Oi8YUVDcycnc
4UKOaUP3BWtv+MhN5bQ9gq22ZTEZNnFcWY+nW1PGJlFuJ0c5sUVenfvOw+7fZuFJ
QeNaTuvjw9n8VwkyVA09fVNSfl9Suk3mDGYLkiovSwVeJtMyMBP1KeNku9hdTVis
vy3WZ/lt6jJDvl6auQYQeE8/E8beQ5fsaFJjDshduZQGo5UbP3Hz+96y1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4WelCNBtG+nmOB4Ya9q7dfu1vtMB8GA1UdIwQY
MBaAFKa2id3vWPCjOD4u9ao6J8T+RTGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJhSjNlOVk4S000UGk3MXFqb254UDVGTVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZmVmN2YtZDAxMS00Y2RiLWFjMGEt
MzE3MDBmMGUxYTYxLzEvcHJhSjNlOVk4S000UGk3MXFqb254UDVGTVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84ZmVmN2YtZDAxMS00Y2RiLWFjMGEtMzE3MDBmMGUxYTYx
LzEvcHJhSjNlOVk4S000UGk3MXFqb254UDVGTVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2skosS8
h9JmecAPSRd907RLQY3vaiNieMm97HLOoqhHwZX58twSgQM4xvUo98tnlcMjz9y8
6INlqO22Uam5DqQ3FBpLG47r1heRb99+htNzYel1yr6lPsZQHtGpyRX7hhU/+OYE
gl3eqyW7t6HNzgiuieN+5fM5uFTS+lPfuCHSZ1q90tTmqgHkzCryxDnbOFHDDyzj
2LakU5BojNqyIsuyXmaSL2Sd0LqjUOMRgh+4GDFqwF70fst3xM+5Tt5SBkDNZVTP
6rIOZNl2UG25MKglyOMBmJSghSYRQblqu3VUW9wtfsAToMTu2os/aFMtUXygwoL3
xS7XtHtxFJMxpg==
-----END CERTIFICATE-----