Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File:                     5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier:          J/uPtgPgv+Baglzu8Pz46s4NZNGvLVdKOMbvJs28d8s=
Subject key identifier:   1D:3C:09:6C:CA:26:7F:C1:12:30:60:A3:DA:08:3B:95:30:69:57:33
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer:       /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial:       01A134B5C159287D358A270764B571C95D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number:          15F1
Signing time:             Tue 13 Oct 2026 10:01:28 +0000
Manifest this update:     Tue 13 Oct 2026 10:01:28 +0000
Manifest next update:     Wed 14 Oct 2026 10:01:28 +0000
Files and hashes:         1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: bNK1u+nT5mNqPZ/+CwM0eVXVAFCQ3AvCb5Lzma5EI1Q=)
                          2: xyBwWE1V7pzMi_BB3s_8J8GEyes.roa (hash: taqunFOi7PSx5Yj4Rqnf0/xGpAdLHU4niJLVDbS+7yI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:b5:c1:59:28:7d:35:8a:27:07:64:b5:71:c9:5d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
        Validity
            Not Before: Oct 13 10:01:28 2026 GMT
            Not After : Oct 14 10:01:28 2026 GMT
        Subject: CN=1d3c096cca267fc1123060a3da083b9530695733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:6a:e3:04:d8:5d:cb:3c:ec:09:5e:99:c0:
                    20:8a:96:1a:01:2e:f6:38:1b:42:1f:70:e6:39:f1:
                    2f:c3:bc:8b:9c:4f:04:45:f3:07:51:2c:b6:b2:df:
                    d5:98:c8:a8:1e:8c:22:a7:26:f9:71:93:8a:6f:cb:
                    c8:22:c9:2e:45:c2:d9:45:df:7f:bc:02:f1:4b:b0:
                    b1:34:3c:0c:31:9f:c8:6c:29:0f:fa:3a:09:7d:85:
                    83:f2:33:4a:8d:98:85:f9:78:25:db:91:9c:25:ea:
                    56:9d:a3:7a:15:2c:fb:27:3a:ce:73:15:0f:25:17:
                    36:74:ef:55:f4:84:6d:60:9a:6d:73:10:29:a5:19:
                    b8:92:fc:64:f8:f7:68:57:39:17:93:a2:1f:83:06:
                    06:a1:01:53:7e:b6:9c:d5:6a:68:5d:be:6a:fd:e2:
                    ed:e9:bf:53:f8:f4:05:ff:6a:42:7a:c6:b6:e2:c5:
                    36:21:ad:db:ce:41:e0:a8:79:98:b4:f9:23:ea:34:
                    f3:72:cd:82:05:c1:f7:42:80:c7:f8:72:dc:8a:d7:
                    8a:12:09:37:a6:91:f7:fd:6b:1c:9c:92:a0:39:f6:
                    1c:35:76:07:2c:18:6e:bc:60:32:88:9c:54:d3:a3:
                    86:05:4d:f1:a0:41:e3:b4:2a:98:62:90:95:b6:b8:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:09:6C:CA:26:7F:C1:12:30:60:A3:DA:08:3B:95:30:69:57:33
            X509v3 Authority Key Identifier:
                keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:41:c9:eb:fe:59:a6:26:ba:4b:12:90:db:a1:e5:31:ef:
         a8:ca:87:a0:0c:81:4e:78:0f:26:fa:16:70:52:11:88:fa:0a:
         8c:ad:75:1a:05:2f:f7:8f:4f:93:12:e2:28:71:12:ae:87:b1:
         70:08:34:49:ef:b8:c4:56:91:ef:8d:c3:4d:ac:0f:5d:c9:a1:
         26:8e:b2:10:65:b4:bb:4d:7c:06:ef:9f:b5:a5:83:f0:b7:01:
         67:1b:ed:4c:b9:7d:0b:ea:3a:76:13:66:7a:76:58:93:24:8a:
         3e:dd:f6:83:f9:5d:d5:0e:c5:fd:0b:8b:d6:76:9d:80:2d:8a:
         9d:81:68:57:18:21:92:ee:29:0b:a4:eb:b1:bd:b4:f5:56:82:
         03:4e:e0:84:b1:27:49:4c:6b:13:80:3a:43:34:20:00:d7:a7:
         f0:60:7b:25:33:08:58:0c:d3:2b:54:d0:e4:97:2d:fc:80:12:
         79:ea:bb:0c:b1:74:35:2c:84:82:a7:f4:26:b3:6d:1b:40:36:
         c8:14:55:60:83:e3:e1:be:dd:11:22:a5:74:4f:3a:aa:32:2f:
         3c:11:7b:9c:50:49:c5:1e:3a:26:c5:4d:0a:55:7c:35:33:d9:
         03:40:00:51:ff:04:6b:14:b4:b5:4e:c4:d7:00:d4:bb:da:30:
         2a:54:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----