Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File:                     CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier:          Unt5+p5uVCsmHu7gmYJsFVsNc2LWNAfmA50xf5j7t0U=
Subject key identifier:   6F:49:73:6D:2D:35:10:96:C2:CE:B5:5D:D7:8A:FB:2D:AC:9A:CF:CF
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer:       /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial:       019F22477ECBAD95F95320D756F790BFE64A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number:          0C2F
Signing time:             Thu 02 Jul 2026 10:02:18 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:18 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:18 +0000
Files and hashes:         1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: u9U78s1rZA83D5+w8B7mLpBiSNgUkddAx+3yUQsxfZs=)
                          2: wwo_DxaaSlkeSM_BlRmma4rbf0I.roa (hash: mqk1cRlhcQcCo6/bhwR5BjCAjJJ/RC++qOvJ8wDbdP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:7e:cb:ad:95:f9:53:20:d7:56:f7:90:bf:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
        Validity
            Not Before: Jul  2 10:02:18 2026 GMT
            Not After : Jul  3 10:02:18 2026 GMT
        Subject: CN=6f49736d2d351096c2ceb55dd78afb2dac9acfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:1c:15:04:c8:57:67:19:c3:33:4a:4b:69:
                    13:4f:8f:2e:b5:45:1f:ea:58:f3:af:f5:63:08:c6:
                    4e:d2:b9:ac:b0:bb:6e:b9:12:2a:88:15:25:ac:4f:
                    0d:09:3b:82:32:59:99:fc:53:2e:61:0b:7e:39:9e:
                    95:b8:a6:97:48:fe:dc:39:76:df:f5:d2:cd:42:35:
                    4e:81:63:f1:75:09:3d:3e:fa:0d:a9:07:b7:97:29:
                    9c:f5:20:e9:06:41:92:50:cb:b4:6e:f3:ac:1c:86:
                    7b:c2:d7:5d:e4:b5:20:ed:f7:99:d5:46:94:20:d7:
                    f1:5b:6d:7c:81:45:27:f5:ac:98:4a:99:dd:ef:f3:
                    ac:0c:c5:ad:f3:03:a2:15:b9:3c:3a:8c:84:46:25:
                    a3:1b:5c:e5:b9:19:fa:c5:58:a6:81:44:9f:6b:60:
                    5f:31:95:1b:67:3d:00:1c:39:11:2d:e6:01:22:6a:
                    81:c2:81:c4:78:99:14:9c:f7:93:33:9f:5e:73:19:
                    03:13:5b:4e:d1:69:a9:1a:e9:12:b2:38:e9:8b:4b:
                    cd:76:49:49:50:ac:f0:1c:94:0b:84:40:d4:83:32:
                    00:84:7d:46:5f:af:fe:5e:b5:1b:d7:d4:7e:02:38:
                    5a:86:06:9b:2c:7d:20:61:e9:c5:3e:77:3a:ec:ef:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:73:6D:2D:35:10:96:C2:CE:B5:5D:D7:8A:FB:2D:AC:9A:CF:CF
            X509v3 Authority Key Identifier:
                keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:b3:7d:61:72:d6:b1:9d:a3:af:56:74:7b:85:50:11:99:
         81:42:df:2d:08:80:36:3d:24:e1:ea:81:24:93:04:33:56:a4:
         c2:12:c9:70:30:0f:78:0f:05:30:6c:0f:19:7f:49:56:3a:22:
         78:9d:48:c1:e2:76:53:e0:f0:bf:7c:40:64:46:5e:93:9d:f1:
         56:09:c1:9e:ad:95:32:92:90:89:b7:5c:0b:6a:1c:d7:3a:45:
         ea:37:aa:8f:02:f5:12:6b:05:c5:8c:67:92:6a:0a:7b:51:b4:
         00:f8:15:c5:4f:52:1a:ac:bc:95:35:07:0a:8b:e2:6d:3f:df:
         07:7b:19:3a:d2:54:10:25:d7:8e:b4:95:b4:ef:c4:a4:81:12:
         d8:74:a2:46:2e:18:6b:39:16:e1:3e:5c:46:6e:ae:46:22:5f:
         f8:bd:ef:66:c3:d7:18:61:06:6f:2c:aa:de:8c:15:fa:05:d8:
         44:ab:74:54:01:18:dc:6f:0e:5b:5e:62:2d:c0:14:2f:2c:e1:
         57:a8:ec:d5:0d:93:86:f8:05:21:2b:52:01:70:5f:04:3c:71:
         90:94:1c:a1:91:3d:9f:e3:94:70:6e:ab:18:c5:78:bf:64:29:
         5c:43:1d:41:ff:e3:16:62:8e:2a:71:85:da:11:4b:75:3b:cc:
         bd:54:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----