Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File:                     Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier:          MI/hYRjzPqKcw2TjP64hYUngC5HJYQQx7RWbhE8Nid8=
Subject key identifier:   31:2D:50:EA:1D:31:63:67:3F:F7:8E:C4:DE:EC:C4:28:24:93:A4:40
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer:       /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial:       019F22100866BE43FD4BCC97CACE93167829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 09:01:43 +0000
Manifest this update:     Thu 02 Jul 2026 09:01:43 +0000
Manifest next update:     Fri 03 Jul 2026 09:01:43 +0000
Files and hashes:         1: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (hash: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js=)
                          2: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: s2wqvi0AIOKM2jmJ77S/YhCjen9C/1b6OYrmcrrGYOA=)
                          3: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (hash: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:08:66:be:43:fd:4b:cc:97:ca:ce:93:16:78:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
        Validity
            Not Before: Jul  2 09:01:43 2026 GMT
            Not After : Jul  3 09:01:43 2026 GMT
        Subject: CN=312d50ea1d3163673ff78ec4deecc4282493a440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:7d:db:b0:b0:06:41:bb:0e:0c:2e:f6:e1:
                    48:41:c1:a9:ac:ee:72:2a:0e:e5:89:81:48:dd:07:
                    68:18:6f:d4:02:6c:e8:ed:9d:48:b9:31:0c:f2:d1:
                    cf:64:6e:82:19:8d:22:24:4e:c2:dd:33:9b:13:19:
                    9d:de:ce:48:30:b6:86:46:c7:19:6f:cb:c1:98:13:
                    f4:96:49:01:82:da:44:ed:61:b9:88:e3:f4:b9:c4:
                    85:0f:4d:38:53:08:85:a7:51:fd:38:2a:8d:08:8b:
                    67:a4:67:15:a9:c4:03:a9:96:1e:4e:10:4f:7c:9c:
                    2b:d5:06:31:90:02:a4:b1:57:0b:40:38:fc:02:93:
                    7b:04:90:ee:d5:86:c4:ce:f8:d6:cc:41:93:f7:81:
                    f2:93:13:0f:38:b2:16:7f:b7:de:ed:71:c8:7c:4f:
                    25:dc:32:5f:63:2d:96:84:cd:2f:9c:cd:38:cb:85:
                    54:95:4d:f5:50:71:8a:73:a1:e2:2c:c4:d4:eb:61:
                    7a:23:a2:93:a7:ad:f7:67:f8:e0:f4:ed:b9:d6:22:
                    e3:4d:94:f0:fa:f1:db:5a:48:09:51:98:12:ee:5c:
                    38:72:bc:27:3b:cb:f1:21:76:c1:09:da:fe:5c:b5:
                    0a:27:03:1e:90:19:98:74:cc:fe:e8:47:11:1c:68:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:50:EA:1D:31:63:67:3F:F7:8E:C4:DE:EC:C4:28:24:93:A4:40
            X509v3 Authority Key Identifier:
                keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:c0:b8:4b:0f:27:d1:5d:62:c9:29:83:28:6c:20:34:56:
         80:cc:87:23:4b:fb:18:51:b1:a1:e0:25:d0:ff:69:dd:82:fd:
         7d:e2:fa:ef:11:4c:ec:9f:a5:94:f5:d4:8a:b7:a2:2d:ef:4d:
         6f:b2:02:f0:28:4b:08:71:a8:2a:f6:00:16:5e:d2:28:96:07:
         9a:00:a0:18:20:40:2c:68:2d:ec:38:7c:32:09:ee:96:9c:c8:
         11:46:cb:a4:46:4d:44:96:ea:20:b6:a1:1e:dd:e9:d4:1b:2c:
         66:73:f2:1c:2b:b4:05:b2:4e:30:fc:57:b0:0f:cf:f6:2d:aa:
         16:e7:74:16:9c:ab:2d:a4:f1:43:55:f2:21:c6:7c:f7:fd:35:
         74:18:5b:c1:19:38:92:30:dd:c3:7b:af:9b:56:dc:21:8d:96:
         da:4a:e2:f1:8b:74:24:f2:3c:c1:f1:f5:87:63:41:6b:a3:f8:
         e4:25:1f:83:4a:8b:5c:cf:00:5f:5f:39:99:7c:bc:24:5e:0d:
         d9:a9:66:70:28:fc:cc:73:16:f0:21:20:d2:08:bf:04:c4:28:
         88:78:4c:c4:66:44:ff:2d:a5:1c:40:d0:9f:86:77:8b:c3:97:
         33:66:04:bd:f9:4a:ca:31:32:bc:57:30:fd:ad:3d:f3:3d:b3:
         1c:ae:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----