Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File:                     T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier:          ArUBnWsMSk1up8okKcp5rJSWjtHhADCMW8if8wCBDz8=
Subject key identifier:   34:11:17:10:84:90:6D:1B:8F:B9:0C:76:44:4B:19:69:05:40:4E:85
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer:       /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial:       019F224791AFA9E8B034C26408787D165258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number:          074E
Signing time:             Thu 02 Jul 2026 10:02:23 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:23 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:23 +0000
Files and hashes:         1: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: alVgvji62zEf337WxNFK+crtDJY3CXXtu2xvzTGc74k=)
                          2: wx17y-l3HkSd9N9CZPeZR_8bXnw.roa (hash: yiL1AQyzbftZhvbhGblm6UfDIK9AiqPEBKJPPMrVRRI=)
                          3: yBDJ-pAMP7frPncua7RF2hKXfCY.roa (hash: mFraCdKMiItFoo5vBUABj/Wg3IFn64JvQY/DrrUSa88=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:91:af:a9:e8:b0:34:c2:64:08:78:7d:16:52:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
        Validity
            Not Before: Jul  2 10:02:23 2026 GMT
            Not After : Jul  3 10:02:23 2026 GMT
        Subject: CN=3411171084906d1b8fb90c76444b196905404e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:54:ab:96:88:33:25:ea:32:03:41:7e:7c:
                    47:a0:d7:19:ff:df:67:40:80:2f:3c:9e:53:52:ce:
                    28:c0:04:e7:64:05:d4:d1:ce:00:d9:a3:ea:91:da:
                    9f:53:2d:ba:da:e9:6f:cb:84:e7:35:df:ab:34:f4:
                    ab:cd:f7:46:e1:ab:88:48:95:f9:60:c4:5f:04:9a:
                    95:37:58:39:3b:c8:67:8e:df:d9:e4:7b:81:e3:23:
                    f9:91:cc:67:35:ed:86:36:bc:aa:96:8b:9b:4c:f1:
                    a8:c3:cf:70:5c:83:d3:ab:2f:85:f7:0e:33:55:37:
                    40:18:74:7d:fb:4a:fe:7a:6f:83:0b:df:d1:e2:36:
                    90:c4:df:10:2e:c7:80:3a:d4:82:04:77:92:4a:14:
                    c1:2c:37:b4:e3:e8:74:66:cb:18:ac:ee:12:8c:3c:
                    fe:33:22:05:88:99:d2:57:07:8f:ac:4c:3f:6d:38:
                    c1:1c:93:3f:9d:1f:98:f5:90:52:7c:e7:ac:cb:91:
                    a9:a6:b4:e1:48:6c:09:d2:99:c5:95:61:60:de:a9:
                    14:70:d2:cc:1f:ca:73:eb:2d:7f:4a:ad:25:6e:8e:
                    cc:19:f3:a4:a4:19:90:0c:e0:c7:71:80:5b:8d:a9:
                    74:cb:32:8b:2a:9a:ab:f5:34:ad:d9:3e:eb:3a:0b:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:11:17:10:84:90:6D:1B:8F:B9:0C:76:44:4B:19:69:05:40:4E:85
            X509v3 Authority Key Identifier:
                keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:b8:5f:62:05:66:58:46:d0:b7:30:b4:37:e7:01:ef:ba:
         84:65:4c:46:00:cf:1d:64:9f:9b:88:dc:41:8c:a8:28:93:91:
         53:4f:f1:30:c4:b7:77:a4:ce:26:44:f8:14:5c:9b:d9:97:34:
         73:4f:eb:83:39:86:d8:7c:0b:f1:a6:ad:be:b0:1a:74:19:fe:
         b4:82:89:57:eb:4d:a1:bf:44:63:85:14:a4:25:38:19:44:60:
         28:21:59:05:74:32:7e:08:0b:c5:aa:53:aa:35:27:b4:21:bb:
         19:f5:aa:a9:7e:d0:23:9d:06:78:9a:e3:28:b3:28:56:a9:f8:
         24:ff:c2:07:26:70:5b:32:ed:9f:26:42:71:ea:4e:ab:05:9b:
         ef:f6:b5:02:ff:32:b9:3c:6c:0c:dc:d3:90:17:5c:12:89:d6:
         f9:6e:0e:bd:f8:91:d2:1f:eb:07:6a:61:77:e1:e2:c9:a4:45:
         56:4e:bb:12:d1:90:8b:cb:7c:d9:ed:b1:a1:f1:4f:66:d8:75:
         05:cc:54:af:8b:51:f3:48:a6:6f:2e:37:68:c7:fc:d4:11:be:
         c4:c8:e7:e0:c5:24:0c:0c:9d:26:8d:b4:88:7a:76:f8:95:a9:
         ac:93:51:e7:cd:92:63:45:48:11:d9:24:d4:23:e9:d8:a7:03:
         cf:24:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----