Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File:                     1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier:          XKbeBxCUIQJYaNX0S1kvlXP4fALC87aM8R06kkaJE7A=
Subject key identifier:   2C:BC:CE:9F:30:77:E4:78:CF:8E:04:EB:26:8B:F1:32:8C:3C:DE:64
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer:       /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial:       019F22EC33EFFBA996A5E4769CDB1FC0B40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number:          17BD
Signing time:             Thu 02 Jul 2026 13:02:12 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:12 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:12 +0000
Files and hashes:         1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: ikkk4CUUjFEV/otH5IQKnEK5b188DJ0vrEkPDgbUiyI=)
                          2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
                          3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
                          4: D-z7JgZfXVz5M7KGZigcnnB7Qa8.roa (hash: R0f5zXUfLuI1QNtFDnJTWAW8urYG/SU87Sq0DHQLqMk=)
                          5: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
                          6: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
                          7: QZlMcTzXSMFD3l1XOfNrAicLHi8.roa (hash: w17u57VFgcqjea52EXeiTFUC7g06QWK/Z1l/OPBEixU=)
                          8: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:33:ef:fb:a9:96:a5:e4:76:9c:db:1f:c0:b4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
        Validity
            Not Before: Jul  2 13:02:12 2026 GMT
            Not After : Jul  3 13:02:12 2026 GMT
        Subject: CN=2cbcce9f3077e478cf8e04eb268bf1328c3cde64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:2c:3f:35:6b:03:29:5d:7d:e5:cb:6f:76:
                    ec:5c:a0:41:bd:b9:30:f8:f5:7e:78:74:6a:a9:47:
                    7f:37:b8:d1:fc:44:9f:bb:41:9c:7d:3f:77:85:72:
                    33:78:20:26:dc:e9:70:54:6c:64:89:bf:36:8a:ef:
                    df:e6:77:6d:fe:1e:91:36:d1:54:2c:0a:88:75:8a:
                    b4:04:b3:6e:b3:03:31:01:f8:e0:10:f8:90:ad:a4:
                    08:1f:06:69:9c:9d:e0:55:ad:37:c0:b3:44:26:3a:
                    56:82:e9:35:a1:38:f0:3e:0e:c0:8b:da:91:ee:ff:
                    cb:ac:bf:fa:19:d2:18:f0:70:78:df:79:3b:43:2c:
                    73:6c:34:56:aa:2d:a9:1c:a7:d7:87:89:94:04:6d:
                    a3:7e:c2:9a:d8:fd:e8:f6:41:6b:b7:15:87:71:29:
                    ca:c6:e4:0b:a6:cd:29:ab:3a:61:2e:fd:90:16:d5:
                    56:e4:eb:5d:1f:d7:06:96:11:f1:d2:3f:8a:2b:57:
                    3a:9a:85:36:be:2d:c5:a6:c6:85:6a:ea:84:9c:a1:
                    05:99:b3:5b:5a:96:90:f6:b4:37:3f:cd:6c:d5:fc:
                    86:f1:2e:a6:d7:2d:5e:b4:ec:db:12:ee:da:6c:9c:
                    33:c6:0e:e3:00:d6:a3:7e:7f:11:48:4a:98:7f:75:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:CE:9F:30:77:E4:78:CF:8E:04:EB:26:8B:F1:32:8C:3C:DE:64
            X509v3 Authority Key Identifier:
                keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:e3:b1:51:82:d3:53:2c:43:68:f9:12:5d:bb:5b:f0:3f:
         92:38:27:32:48:b5:29:47:d4:4e:b1:86:2c:21:16:5f:4e:ed:
         ab:66:cd:7b:c7:40:49:57:1a:3c:54:b5:d7:8c:89:2a:2f:64:
         7e:2c:d6:ea:44:d9:aa:5a:5b:eb:36:2f:0a:d6:88:6b:ff:62:
         41:f5:75:36:12:6d:41:00:53:9b:5a:fa:5b:3d:a3:70:4a:d9:
         25:f7:25:f0:af:5e:6f:e5:08:89:55:36:b7:a6:9e:46:14:ce:
         3d:91:cb:81:1e:bd:a9:8c:83:b4:42:32:68:1a:7e:59:c8:1b:
         f9:fa:99:42:ea:38:02:1c:0a:1d:95:2a:d8:4a:58:7f:a1:24:
         04:86:45:a5:ef:0c:8e:3b:62:c4:3e:a9:b9:0a:d1:0a:f8:a3:
         7e:16:83:56:f5:99:dc:eb:7b:37:7c:f9:1e:d2:7f:5b:6d:d3:
         6f:8a:21:c3:1d:0d:ae:14:a3:f9:25:ef:4e:0f:d3:a5:64:4d:
         13:b7:c3:3a:54:9e:fe:3b:47:ef:4d:37:07:ff:9b:b5:92:43:
         c7:85:84:0e:5b:c3:f3:3f:d0:ed:14:e4:97:c8:aa:16:55:d3:
         0b:b8:f9:08:bb:df:fb:3d:c2:98:87:98:bb:3e:ee:a8:ad:82:
         d9:8d:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----