Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File:                     sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier:          rXN8mXFCsgp3NLF78FQSdLgGv8ZWw/VgMB/Jc75UH9s=
Subject key identifier:   DE:3A:BD:E1:FE:69:D9:3F:DB:54:8F:00:C3:78:ED:AD:D8:F1:E9:05
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer:       /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial:       019F21D9CEE151AA563F70C89D512B6C041F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number:          198B
Signing time:             Thu 02 Jul 2026 08:02:30 +0000
Manifest this update:     Thu 02 Jul 2026 08:02:30 +0000
Manifest next update:     Fri 03 Jul 2026 08:02:30 +0000
Files and hashes:         1: Ve64xTr98MUDsiJSZXk12KQ3yVc.roa (hash: wfd77vHmSmUiY8IWmiT9ZwxLolfac6GRsY7+Cx91Rus=)
                          2: dN5Ucpkm5kNY0YR-q9sxfd6c9rc.roa (hash: ZLBcri8/aXQmB4WoSvVto5wYAi5xFB1PoBjafKyFXT8=)
                          3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: oxbt6ExcrgAta70A6rJEXJj4+1oIYGxAPYVF40KbAU0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:d9:ce:e1:51:aa:56:3f:70:c8:9d:51:2b:6c:04:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
        Validity
            Not Before: Jul  2 08:02:30 2026 GMT
            Not After : Jul  3 08:02:30 2026 GMT
        Subject: CN=de3abde1fe69d93fdb548f00c378edadd8f1e905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8d:f3:47:20:5d:82:43:da:9a:a2:26:d6:07:
                    ea:6e:3e:11:b0:36:7d:76:7c:af:6b:c4:70:62:16:
                    28:ed:80:1d:d4:bf:84:51:29:f7:69:72:6a:cf:42:
                    96:b4:3f:3e:eb:2b:0e:9e:f2:8c:e6:d4:85:00:3c:
                    82:08:9c:2c:1d:46:56:da:53:23:4c:14:49:d4:7e:
                    1c:8a:47:cc:61:b1:0e:af:3b:55:75:e6:c8:5c:8c:
                    09:b8:d6:64:fc:3a:3a:b2:4e:49:4a:b9:4b:8c:fa:
                    bf:70:43:9b:0d:ec:4a:02:03:e9:8d:44:aa:e8:6c:
                    bc:28:5c:d3:10:69:bb:0c:20:7d:ba:bf:7f:5b:d4:
                    a2:5f:2d:89:14:98:31:4c:3c:87:64:73:e8:4b:5f:
                    8e:95:e1:38:d6:93:04:d5:9c:54:8f:50:6d:8c:7b:
                    30:d0:9c:e4:76:28:60:73:a1:1b:3c:b7:19:de:6e:
                    5e:60:b5:17:c8:8a:a2:2e:9e:4e:b0:0a:f3:84:af:
                    4f:d0:b6:2c:41:85:0d:c4:1d:c7:eb:22:1b:63:af:
                    5f:ed:8a:0b:df:3f:c7:d5:34:f5:a0:96:69:46:bf:
                    47:51:fa:ad:ed:db:32:39:74:e6:01:f0:cc:ed:80:
                    c5:ce:ce:8d:f1:eb:fd:98:20:a9:8e:65:a9:96:63:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:BD:E1:FE:69:D9:3F:DB:54:8F:00:C3:78:ED:AD:D8:F1:E9:05
            X509v3 Authority Key Identifier:
                keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:04:45:ef:8f:4e:49:19:48:6f:9d:c0:d9:f5:9b:33:63:6f:
         56:be:fe:59:0d:b7:5e:65:10:06:d9:9a:79:27:c1:30:85:bc:
         90:5c:3d:f7:37:11:3c:58:81:6f:0c:75:5e:53:aa:8b:8a:eb:
         72:02:31:0b:3a:59:af:26:3a:f3:22:b5:63:c8:44:2d:53:3f:
         97:a3:c8:aa:d9:4d:c0:ca:bb:a7:d7:4c:47:e6:dd:5b:36:dd:
         33:b9:cb:f0:16:f8:3c:1c:08:c8:45:33:78:41:35:88:b4:a5:
         0b:ba:76:ef:64:41:95:60:b1:98:d7:0f:5b:bb:8b:77:8d:ca:
         04:69:38:59:c1:5e:5a:c8:e7:0f:f2:e8:b6:50:ed:0c:43:7e:
         ab:1e:6d:aa:7a:32:46:9a:72:ae:73:d9:c7:1b:91:20:10:b7:
         12:2e:6b:a7:90:75:90:ff:fb:56:3e:3f:67:3a:30:84:78:aa:
         d7:f6:4b:1e:33:2f:54:04:4e:bd:c2:dd:e7:ff:41:ac:6e:b6:
         6f:d1:66:93:6d:d1:d4:8d:df:6d:b5:ab:3e:b7:88:4b:45:48:
         25:0f:aa:2d:c6:54:d9:4d:1b:a6:5c:7a:b7:3a:06:4a:56:ed:
         14:22:90:53:df:7f:ba:75:73:7e:6a:46:e1:45:c6:04:db:eb:
         f0:6d:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----