Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File:                     FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier:          yCLeKtSMHV95/pnoO3+IR+Oa6XJUUmejpb+27sjO55g=
Subject key identifier:   70:B6:3F:B9:1B:96:35:4B:17:7C:DD:08:A3:EC:C3:16:48:DE:BE:DD
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       01A0336DCDF07C95E98363DA3381A2062F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number:          1307
Signing time:             Mon 24 Aug 2026 11:00:29 +0000
Manifest this update:     Mon 24 Aug 2026 11:00:29 +0000
Manifest next update:     Tue 25 Aug 2026 11:00:29 +0000
Files and hashes:         1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: PNAz3iv09F0zazE9o8lueKikI9JfS8sMC9pnQxdL4bY=)
                          2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
                          3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:33:6d:cd:f0:7c:95:e9:83:63:da:33:81:a2:06:2f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Aug 24 11:00:29 2026 GMT
            Not After : Aug 25 11:00:29 2026 GMT
        Subject: CN=70b63fb91b96354b177cdd08a3ecc31648debedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:e8:eb:34:ff:92:a6:7a:42:35:96:5e:40:
                    86:19:08:f1:6a:f9:80:67:ec:44:5a:dc:f9:a6:76:
                    3f:ef:dc:72:9b:ba:a0:4e:e8:5c:08:a4:b0:eb:dd:
                    06:14:e7:4d:5e:9a:04:26:15:60:b4:12:2a:4f:40:
                    86:75:29:d9:56:4e:db:86:a3:d8:71:ea:cc:cf:90:
                    bb:eb:0c:9d:81:97:94:98:ac:5d:0c:38:29:fd:28:
                    37:74:f0:a9:96:97:65:35:d7:f5:3d:55:ab:57:e0:
                    e4:72:98:f9:da:93:d0:50:17:e7:29:07:47:1a:ba:
                    fd:4f:94:b2:29:88:4e:9f:6f:01:de:a2:a5:0c:a9:
                    60:2d:16:d0:8e:f0:4b:94:7a:d7:93:69:84:94:ee:
                    ad:76:c6:80:b3:71:15:4e:e1:a5:52:45:5c:a2:7c:
                    e1:70:9f:c9:58:5b:e4:65:9c:51:33:b4:2b:9a:e8:
                    92:59:4f:e7:52:60:8f:80:a3:04:39:2b:df:aa:80:
                    9c:ba:9d:bd:1b:09:78:04:05:01:a9:46:30:e1:a1:
                    f1:bb:96:96:10:15:60:ea:f3:77:3c:d2:f1:a1:bc:
                    4b:07:e4:8c:5d:b2:06:9e:e1:7e:2a:bb:61:c8:ee:
                    11:d4:9e:45:cd:b9:94:33:54:0e:84:23:f5:76:b4:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:3F:B9:1B:96:35:4B:17:7C:DD:08:A3:EC:C3:16:48:DE:BE:DD
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:45:63:65:dd:45:5d:69:a5:0c:b1:23:55:1c:b7:04:b6:
         75:53:89:5a:b2:36:0d:b6:92:4c:31:8b:c9:1d:f0:92:b7:e0:
         ff:de:11:99:a1:7a:52:5b:0c:86:20:54:97:f0:4c:dc:da:84:
         1a:b0:77:84:11:e2:3b:aa:88:ba:39:00:23:70:b9:f9:6f:3a:
         c3:86:1a:c8:30:73:ac:72:3e:69:eb:a9:d0:91:d0:f2:3b:c7:
         a4:48:f9:f9:8a:f4:72:4a:51:81:f2:26:d4:c6:8b:f7:54:96:
         c2:ed:7f:03:4a:57:50:2f:b7:4d:e1:86:f1:68:d6:fe:00:cb:
         83:48:40:93:bb:b9:9d:da:e7:7c:5c:ff:e6:07:2b:9e:45:57:
         b6:7b:bd:0a:67:3e:fe:15:63:5d:41:c1:f1:a3:12:d7:bb:5a:
         da:2f:f9:8e:86:6d:b6:2d:4d:cd:91:90:4e:a2:46:7b:c9:9a:
         40:25:1c:86:a7:14:3f:d4:8e:c0:01:93:bc:d6:dd:36:ea:83:
         7b:a0:1b:0f:44:ae:5b:58:63:8c:ed:cb:91:eb:b5:24:47:f6:
         e3:7c:6b:0c:45:30:d4:c9:48:d3:fe:c9:25:e0:28:47:43:07:
         07:db:a8:bb:6e:75:60:48:70:8b:ad:d3:58:9b:16:75:1b:0c:
         84:99:e8:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAzbc3wfJXpg2PaM4GiBi81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTM2NjI1OWY5YmFlN2MzNzMzN2I1MTVmYTViZWUwNWY1
M2FiY2UwHhcNMjYwODI0MTEwMDI5WhcNMjYwODI1MTEwMDI5WjAzMTEwLwYDVQQD
Eyg3MGI2M2ZiOTFiOTYzNTRiMTc3Y2RkMDhhM2VjYzMxNjQ4ZGViZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoebo6zT/kqZ6QjWWXkCGGQjxavmA
Z+xEWtz5pnY/79xym7qgTuhcCKSw690GFOdNXpoEJhVgtBIqT0CGdSnZVk7bhqPY
cerMz5C76wydgZeUmKxdDDgp/Sg3dPCplpdlNdf1PVWrV+Dkcpj52pPQUBfnKQdH
Grr9T5SyKYhOn28B3qKlDKlgLRbQjvBLlHrXk2mElO6tdsaAs3EVTuGlUkVconzh
cJ/JWFvkZZxRM7QrmuiSWU/nUmCPgKMEOSvfqoCcup29Gwl4BAUBqUYw4aHxu5aW
EBVg6vN3PNLxobxLB+SMXbIGnuF+KrthyO4R1J5FzbmUM1QOhCP1drS2eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC2P7kbljVLF3zdCKPswxZI3r7dMB8GA1UdIwQY
MBaAFBWTZiWfm658NzN7UV+lvuBfU6vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEt
Zjk1NDAwMmY1MjQ1LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEtZjk1NDAwMmY1MjQ1
LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFdFY2Xd
RV1ppQyxI1UctwS2dVOJWrI2DbaSTDGLyR3wkrfg/94RmaF6UlsMhiBUl/BM3NqE
GrB3hBHiO6qIujkAI3C5+W86w4YayDBzrHI+aeup0JHQ8jvHpEj5+Yr0ckpRgfIm
1MaL91SWwu1/A0pXUC+3TeGG8WjW/gDLg0hAk7u5ndrnfFz/5gcrnkVXtnu9Cmc+
/hVjXUHB8aMS17ta2i/5joZtti1NzZGQTqJGe8maQCUchqcUP9SOwAGTvNbdNuqD
e6AbD0SuW1hjjO3Lkeu1JEf243xrDEUw1MlI0/7JJeAoR0MHB9uou251YEhwi63T
WJsWdRsMhJno4A==
-----END CERTIFICATE-----