Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          3DrfimOmxMHo1D51yxU9aeLJVxDz4HbfFUatLW+tb64=
Subject key identifier:   FB:53:03:C3:6D:47:B6:B7:02:E9:B9:AB:3C:2B:A7:1B:96:30:96:EB
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019F23228D7EF6DAB398AFC66E1316E85E01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          19A7
Signing time:             Thu 02 Jul 2026 14:01:34 +0000
Manifest this update:     Thu 02 Jul 2026 14:01:34 +0000
Manifest next update:     Fri 03 Jul 2026 14:01:34 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: eMSuh/VsRQiA+liJmwpa8Fny0+XP4qFiALiudebeqWI=)
                          2: 4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa (hash: 0dpWI2PXhik+N7S7lz0H4gx+qXCOtuPMoys6zPW4AAE=)
                          3: EB7WqqxXodos-Bnfwa3U1V_EWyk.roa (hash: mUbVMHBEzz3yLOktyc5V1n031Bt7w2ivVLElxz97H04=)
                          4: LR-gOJTdtI8bzPduiQVCYwkMZFA.roa (hash: bVwiIJwDd0Bu+uS+HlMtLfyphNhcg2aLcVX98Jb8Wj8=)
                          5: Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (hash: elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=)
                          6: yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa (hash: 9L+sA1TE/tnPgnqt0eplM+GhjWLDs24P3usFFtq4BoU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:22:8d:7e:f6:da:b3:98:af:c6:6e:13:16:e8:5e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jul  2 14:01:34 2026 GMT
            Not After : Jul  3 14:01:34 2026 GMT
        Subject: CN=fb5303c36d47b6b702e9b9ab3c2ba71b963096eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ec:78:3b:e8:24:e1:24:36:8f:40:b0:9d:ef:
                    3f:6b:f4:2c:c9:ad:7b:ef:74:0b:b3:40:32:c4:7d:
                    b2:90:b8:fc:c6:52:77:04:be:35:c4:bc:05:5a:78:
                    bd:f3:37:2b:e4:75:e4:f8:32:98:ad:c4:e1:00:fd:
                    45:e2:ef:d5:4a:cd:e8:ed:a1:c8:63:e9:21:29:73:
                    10:ca:05:23:3b:a3:52:1f:ac:5a:3b:38:1f:d0:fd:
                    36:15:93:7b:40:e3:4d:c7:0a:18:45:fe:ae:f5:83:
                    57:1e:87:46:96:c6:d7:54:37:39:dc:5d:70:fe:db:
                    d4:6a:b2:9c:20:83:be:ea:8b:47:3f:86:c7:fd:00:
                    b7:20:80:e8:59:68:5d:77:67:a7:5d:f0:11:65:53:
                    c3:c9:f8:0a:d8:44:62:3b:ea:2c:2e:d6:f2:cf:b9:
                    a3:7b:86:bf:d1:dc:81:aa:d0:bd:7c:ef:a7:c5:1b:
                    06:f3:74:81:0b:75:2d:27:f6:22:1e:32:37:b3:93:
                    49:a2:fa:9c:db:55:f7:1e:49:77:63:5c:72:b7:6c:
                    00:83:8b:0c:79:5a:73:95:ab:df:48:a2:9e:68:54:
                    e1:23:a1:61:fe:1a:77:71:4c:7a:80:49:9f:19:6e:
                    e8:2f:91:d2:0f:9b:31:b7:ba:87:99:a4:e3:05:32:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:03:C3:6D:47:B6:B7:02:E9:B9:AB:3C:2B:A7:1B:96:30:96:EB
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:df:8f:43:35:34:cc:79:02:46:2e:b9:eb:d4:cc:93:3b:25:
         73:a0:0f:8b:cf:83:b4:ef:bf:91:4e:8a:95:16:9d:57:f9:1c:
         37:84:fd:e6:b4:ff:95:61:5b:45:73:1e:e7:23:f6:c9:72:f1:
         2a:25:ce:6b:5d:56:1b:5e:f5:ad:93:78:95:54:4f:f1:0f:96:
         be:aa:c7:b0:b3:1b:86:85:5b:06:94:a1:e2:26:ed:42:dc:27:
         a1:ed:5b:28:0c:3c:26:3f:e3:7f:11:78:db:36:da:07:73:91:
         29:ee:26:aa:7b:f5:a1:ba:78:e0:81:be:b5:29:8f:85:50:76:
         0c:33:a6:90:b0:1b:cf:e3:57:38:ac:df:74:e3:1d:2b:3d:de:
         a8:62:40:3e:0e:8c:b2:9b:d6:05:d6:ed:f9:0a:2b:54:3d:be:
         e7:95:ec:09:7b:b0:71:44:fe:f2:b2:ce:08:02:91:da:ec:ad:
         f0:01:f8:72:45:5f:25:8e:9f:55:20:eb:9b:62:da:79:36:15:
         70:3a:9f:2b:f3:c1:8b:48:ce:80:f2:23:26:10:b5:5a:0e:c1:
         c7:b0:de:14:ef:f3:64:d8:3b:d5:c9:3f:28:c0:15:0c:f8:a7:
         61:02:3f:e1:94:ce:7b:93:c8:fd:fb:21:d5:46:86:ca:ff:0d:
         60:32:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----