Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          s4xq6lS24suDX1u293CplmpTdKy0w0PNFosjb7pP12w=
Subject key identifier:   33:70:4B:47:D8:DD:8A:34:CD:88:57:7E:F4:06:5D:6D:91:9B:A9:C5
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       019F216B6C4C3207304617AD5710618F5CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          191A
Signing time:             Thu 02 Jul 2026 06:01:55 +0000
Manifest this update:     Thu 02 Jul 2026 06:01:55 +0000
Manifest next update:     Fri 03 Jul 2026 06:01:55 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: klBa+VFSKC/GQd/5jAJmFLISATPIM8mEmqHiSK88G6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:6b:6c:4c:32:07:30:46:17:ad:57:10:61:8f:5c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: Jul  2 06:01:55 2026 GMT
            Not After : Jul  3 06:01:55 2026 GMT
        Subject: CN=33704b47d8dd8a34cd88577ef4065d6d919ba9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:f2:c2:23:60:16:5b:2f:ad:67:1e:64:6c:
                    f1:47:ad:ca:a6:54:16:ee:d5:c3:f3:a7:2c:fe:2b:
                    8b:f7:bc:14:92:2b:ab:ea:8b:89:b3:17:cc:d9:7a:
                    39:45:c4:9f:b3:f5:72:78:92:d9:51:9c:a1:de:22:
                    f4:42:19:73:22:a4:ca:db:fd:4b:b1:d8:89:6d:fb:
                    18:bb:c1:f8:ca:f5:4d:65:f6:86:2d:bf:4e:4a:bf:
                    73:16:df:37:ac:e8:30:2c:e6:b0:f6:28:b8:e3:9e:
                    d1:1b:9a:48:06:2c:72:11:89:d2:89:85:c8:9f:78:
                    2d:b0:5e:3f:98:54:d8:88:3b:da:50:4c:c4:f0:88:
                    fa:6d:fb:13:9c:f8:a2:c4:29:d0:d7:a0:e9:a5:d7:
                    e2:76:a5:62:0c:bf:dd:3a:f7:1b:1e:9b:57:5e:2b:
                    89:4a:df:a6:fd:1d:8a:38:d1:14:9b:ef:74:32:e6:
                    79:fd:6e:f3:83:7e:90:00:58:be:37:aa:89:76:57:
                    3f:da:bd:4e:d0:50:cf:82:df:74:7b:14:a4:c4:77:
                    d7:42:4b:21:84:63:6c:ec:80:72:e2:06:36:6e:b5:
                    0f:2a:fe:ef:a9:b6:37:2c:c1:d2:0a:aa:7f:cc:8f:
                    35:43:72:6e:86:18:3e:b0:59:0c:94:ab:77:e8:b1:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:70:4B:47:D8:DD:8A:34:CD:88:57:7E:F4:06:5D:6D:91:9B:A9:C5
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:61:29:15:00:08:5e:c7:c4:1a:7f:b4:82:4b:af:0f:8a:93:
         b1:1a:c1:11:72:fc:7e:a8:30:8f:87:f4:ee:a4:b3:1b:24:d4:
         b5:2d:41:a8:7d:8b:7d:37:a9:4c:48:f4:84:d4:fe:2c:6c:1e:
         49:79:f3:25:f3:08:ad:00:19:8b:56:3c:ac:4c:8d:aa:d6:f7:
         42:50:bf:9b:2c:6f:88:5d:63:2a:f6:8c:16:5c:02:a5:d9:5b:
         3e:96:f9:2b:e8:11:b0:83:e8:ca:79:f3:dc:ce:7e:cb:27:82:
         eb:75:8c:78:f6:65:2a:e9:35:15:6f:eb:a1:e3:cc:37:0f:19:
         5f:98:55:b2:6e:23:c1:ac:3b:32:1a:b5:84:60:e8:b1:b4:c9:
         5b:5b:9d:bf:61:98:39:08:de:6d:fe:e7:c5:82:29:b0:b4:c0:
         12:3f:ed:fb:57:7f:e5:09:e5:5c:6e:7f:fb:af:da:bf:8a:d6:
         73:cf:3e:a9:6f:71:0e:5f:59:20:26:c8:d9:23:4a:ff:d8:1c:
         56:d7:7a:33:db:35:15:e7:85:e5:97:fb:3b:6b:7e:9f:cd:88:
         e0:b4:cc:89:cb:26:e9:e3:15:07:2e:7c:01:2a:f9:d7:a3:fa:
         38:98:65:ae:6b:ad:79:6b:b4:47:7a:4c:66:d6:ab:06:28:01:
         fd:b9:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----