Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
File:                     qvHI3UCIS0nwiAZNPBANKhiahHQ.mft (raw, json)
Hash identifier:          bhtcxQUl6plyKf6A5Z38HY8R/WS33HgP4h3ayWCIsCY=
Subject key identifier:   FB:57:1A:09:5D:01:5C:17:73:D6:94:6F:FB:33:45:35:42:48:FE:07
Authority key identifier: AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
Certificate issuer:       /CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Certificate serial:       019F227D70177CB1E778FBBE0D920DF21CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
Manifest number:          05EA
Signing time:             Thu 02 Jul 2026 11:01:13 +0000
Manifest this update:     Thu 02 Jul 2026 11:01:13 +0000
Manifest next update:     Fri 03 Jul 2026 11:01:13 +0000
Files and hashes:         1: TPinzjQGStjo9WplkE5Cz7wKV1E.roa (hash: PHy3g+7P0F5Q3MN1sN50m0Ft2cJh+htWlf3pquiUF5Y=)
                          2: qvHI3UCIS0nwiAZNPBANKhiahHQ.crl (hash: c9ges3IQNoKPjeV25+xab3hw9FUpcXhjhvZ1aelxeqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:7d:70:17:7c:b1:e7:78:fb:be:0d:92:0d:f2:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
        Validity
            Not Before: Jul  2 11:01:13 2026 GMT
            Not After : Jul  3 11:01:13 2026 GMT
        Subject: CN=fb571a095d015c1773d6946ffb3345354248fe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:0a:e5:b5:d3:0c:b1:7e:81:0a:2d:e7:be:
                    fb:d9:ae:33:26:bd:5c:67:b6:c4:e6:97:23:83:69:
                    eb:c0:87:2c:aa:b1:33:c4:79:2b:fe:12:b0:d6:3d:
                    13:bb:59:50:48:82:09:10:37:cc:87:33:d4:a2:a9:
                    c2:43:22:cc:10:c4:f4:b6:23:3c:ac:b6:92:f1:b8:
                    c5:2c:00:1e:0e:0d:f9:ce:92:90:c0:9d:bc:ba:ec:
                    aa:35:45:27:f7:57:37:f2:e4:0c:ec:54:9e:bf:5b:
                    e5:1c:88:cb:56:7f:75:e4:bd:6c:44:6e:72:cf:2f:
                    75:d0:7b:88:ca:2e:ad:85:eb:0f:06:f6:f8:b9:37:
                    a0:b8:ef:da:f3:48:a6:6e:2a:67:f4:e4:20:7c:f9:
                    57:4d:d2:34:2c:33:af:7d:d0:f1:07:43:61:c8:3b:
                    b2:d0:62:de:ed:cf:6a:c6:84:c1:80:84:48:7b:03:
                    16:d3:4c:c7:c1:bc:e9:b9:27:4f:c4:cc:3b:36:ec:
                    3c:45:46:71:0c:f3:c4:12:c6:2e:73:c6:29:b7:dd:
                    4c:1d:0b:59:bc:1c:15:48:9b:d5:6c:2f:e4:8f:c3:
                    21:d8:a9:4e:5c:a0:e2:6d:b7:0c:0a:ab:97:20:5d:
                    06:73:d0:47:66:9c:fc:f5:4e:d4:62:d0:d2:9c:97:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:1A:09:5D:01:5C:17:73:D6:94:6F:FB:33:45:35:42:48:FE:07
            X509v3 Authority Key Identifier:
                keyid:AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:45:13:9d:7a:f6:18:05:be:26:a2:43:74:a1:c5:b4:42:22:
         3e:d9:e2:81:b7:25:61:91:c9:39:db:14:de:99:6f:3e:fa:8d:
         e7:f0:ba:1f:8b:ca:76:f6:40:1a:1e:15:1b:99:d6:e1:f5:1b:
         b3:7c:29:ed:42:03:58:07:05:0b:7a:f3:9e:79:68:2d:5d:fd:
         40:47:90:bb:93:ec:34:2b:1f:1a:cd:75:6e:01:7c:a7:d1:9e:
         3f:88:76:7d:c9:ce:65:86:1b:4f:7d:34:72:2f:37:0d:59:98:
         5b:08:82:23:cd:75:19:1a:ec:ed:17:31:80:91:79:a1:23:e7:
         1a:46:c5:61:93:88:de:b0:a7:d9:96:02:a4:16:40:17:a8:2e:
         8a:b8:9c:c1:5a:e3:8e:4b:3e:b7:f7:91:27:8f:ff:b0:dc:20:
         5a:bd:b1:c7:4d:a9:e7:09:de:a0:34:47:8a:c1:ff:e8:73:ea:
         40:64:bc:6b:46:99:dd:bc:06:c2:eb:ce:4e:0d:ef:b4:1f:65:
         72:d6:a0:aa:ed:8c:9c:80:99:18:d3:37:47:21:88:bd:18:5e:
         1a:a0:09:33:5b:92:dd:84:9f:f9:e6:62:06:69:ad:55:97:b5:
         c2:3a:55:d5:ac:e4:13:99:8f:6e:b1:75:77:0e:65:52:f7:76:
         3e:b5:cc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----