Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File:                     1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier:          JrXdkKgUpkSHqOwB4MB2nohkvmxB7qJY41QFvWMRQZs=
Subject key identifier:   60:D1:CD:84:11:FF:FC:FC:59:BE:09:4B:E1:43:93:0D:10:F8:8A:F1
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer:       /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial:       019F2247332FA6466A1C056CB04937AB9C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number:          198C
Signing time:             Thu 02 Jul 2026 10:01:59 +0000
Manifest this update:     Thu 02 Jul 2026 10:01:59 +0000
Manifest next update:     Fri 03 Jul 2026 10:01:59 +0000
Files and hashes:         1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: wb6d2/wg+rVO4f+rB2XgsWIz+hkL6EpQldWf5wPvPV4=)
                          2: dMl0CEajkrxcgLNcfpnLA8OuL7A.roa (hash: CYX2WX+QfrhOpGiBFy1DWZkIM2JKpSw/oiXkQ7UpKFU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:33:2f:a6:46:6a:1c:05:6c:b0:49:37:ab:9c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
        Validity
            Not Before: Jul  2 10:01:59 2026 GMT
            Not After : Jul  3 10:01:59 2026 GMT
        Subject: CN=60d1cd8411fffcfc59be094be143930d10f88af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:29:84:6c:8f:1e:91:b9:60:7c:2a:f1:7b:
                    a2:d4:77:09:c5:b6:76:7f:a5:05:43:61:d8:b9:24:
                    e2:40:a2:34:67:33:cc:e3:32:e2:41:4e:10:d0:15:
                    a8:62:06:e8:9d:2f:f3:af:35:89:d6:70:b2:05:4d:
                    01:68:ed:ad:0e:11:d8:8e:f4:a9:69:8d:1a:de:84:
                    4b:fa:a4:b3:83:7e:cb:f7:2f:91:26:40:a9:7a:5e:
                    04:fe:d7:f1:72:d4:91:ad:29:ad:02:58:1b:a6:67:
                    27:3d:4d:3c:e0:81:03:79:f0:03:92:d3:97:ab:18:
                    d2:bf:c9:23:5f:65:4b:63:f6:41:04:32:5a:39:27:
                    a5:46:ce:1a:43:77:a4:97:5b:93:ea:c2:45:1f:3c:
                    9c:2d:be:9a:0d:07:bb:6d:74:bf:d7:53:0d:a7:a6:
                    f0:ac:7c:97:33:40:32:c0:ef:c7:e3:5b:63:85:cb:
                    ec:0c:f5:e5:94:d2:57:c3:0a:b1:d9:5f:48:c5:e7:
                    46:28:58:52:c8:31:0e:96:82:74:0c:73:40:23:72:
                    fd:f2:96:5b:d7:7e:6e:35:f1:0b:05:a2:a5:e1:50:
                    a9:87:80:2c:30:e2:c1:b5:7a:ab:99:82:1a:e7:8f:
                    f4:06:5b:d8:26:0f:bb:f2:0f:ff:85:d5:ba:ce:77:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:CD:84:11:FF:FC:FC:59:BE:09:4B:E1:43:93:0D:10:F8:8A:F1
            X509v3 Authority Key Identifier:
                keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:60:b4:07:3f:f8:55:a2:d2:1f:76:7d:51:d1:2f:bf:59:
         76:23:87:38:1b:af:dd:60:ae:45:83:a6:ac:37:9e:95:d3:56:
         e3:e3:ae:77:b8:d1:40:f3:3d:9a:e2:48:c7:a5:c6:76:94:86:
         61:a6:ae:8d:f7:09:fb:7c:8b:b1:98:4f:ef:f1:a8:fa:94:56:
         46:45:f6:16:b9:d0:45:a0:b9:b6:1c:14:b5:27:a7:04:29:92:
         a5:50:29:18:fb:5d:ff:f3:a4:0a:cf:62:93:93:ce:88:3c:2a:
         4b:79:23:e9:8e:7a:ee:e5:0e:6b:ae:5f:6b:0d:67:14:8a:67:
         89:b9:b0:7e:9e:10:3b:be:4a:6c:c6:52:4c:62:f1:37:0e:90:
         74:16:b2:f4:70:19:64:3f:8a:78:50:33:0d:51:fd:f3:2c:22:
         0c:92:10:68:4d:4c:a8:1c:2d:39:66:4b:84:8e:93:0e:ef:69:
         ee:2f:9f:a8:4e:df:df:04:cd:d2:02:5a:ef:c4:c9:1f:a6:b4:
         e7:34:fa:02:f9:78:7b:b0:37:65:d9:16:19:40:e1:c1:01:4f:
         5f:06:4a:3d:24:20:27:da:ec:95:1c:eb:18:de:8e:0a:00:8e:
         61:fc:f0:e1:1f:3e:8e:cd:e5:11:1f:1e:7b:6c:77:45:2e:49:
         d1:70:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----