Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File:                     CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier:          T2gMRXrbfXjfwoAAEHB6Ki9HNl/e7V359RNUEL/xo9w=
Subject key identifier:   32:2C:01:14:05:C5:E2:8F:55:D5:CB:D7:2A:BA:28:C1:AE:81:73:51
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer:       /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial:       019F22EC47A166FF8048B4D42C2D36E758B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number:          198F
Signing time:             Thu 02 Jul 2026 13:02:17 +0000
Manifest this update:     Thu 02 Jul 2026 13:02:17 +0000
Manifest next update:     Fri 03 Jul 2026 13:02:17 +0000
Files and hashes:         1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: Typ8Vur1MrP0PqZ4pIw9MJIuTw/Jh1i66t7DOJp00Dc=)
                          2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
                          3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:ec:47:a1:66:ff:80:48:b4:d4:2c:2d:36:e7:58:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
        Validity
            Not Before: Jul  2 13:02:17 2026 GMT
            Not After : Jul  3 13:02:17 2026 GMT
        Subject: CN=322c011405c5e28f55d5cbd72aba28c1ae817351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:fc:47:31:0c:45:6b:9a:98:6e:55:cc:00:
                    21:32:6e:7c:44:4b:82:4a:cc:fd:05:08:a8:2d:eb:
                    0d:66:42:44:55:29:64:1f:9d:f3:bc:0e:2b:7f:7b:
                    ad:74:29:fd:8a:20:af:56:b4:08:ea:2e:b4:e8:ba:
                    16:f4:fc:f0:83:0d:e1:8d:89:7c:47:16:99:85:c8:
                    64:1c:fa:1d:01:16:6d:b5:3a:03:37:0a:4a:92:48:
                    4c:06:3d:7b:6e:83:a4:e9:c6:0d:33:f7:2d:59:69:
                    e8:a4:21:58:08:56:44:ca:36:38:d0:dc:1b:b4:c1:
                    3d:88:03:4f:93:06:29:0d:ee:c9:e1:35:14:8c:ab:
                    05:68:bf:19:14:04:a6:5e:38:14:4a:09:0f:e1:09:
                    62:e2:c2:a3:de:a1:df:5b:b7:7c:2c:13:00:f8:3d:
                    3e:92:84:8a:ad:95:a3:94:43:11:09:79:73:fa:7c:
                    5e:ce:03:64:e2:42:7d:34:88:c9:c5:6c:4a:f6:51:
                    75:59:28:d0:50:73:e8:ac:bf:ae:de:65:24:c0:49:
                    2e:3c:80:85:4e:5d:bc:6d:8f:75:9b:ee:f9:a6:79:
                    6e:70:d3:bf:78:d6:85:81:ba:f8:30:f7:30:67:a1:
                    b0:b4:aa:39:0c:8e:b6:be:c8:82:7c:db:eb:fa:b4:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:01:14:05:C5:E2:8F:55:D5:CB:D7:2A:BA:28:C1:AE:81:73:51
            X509v3 Authority Key Identifier:
                keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:be:e7:82:a4:6b:de:08:42:cb:47:44:05:c4:4d:5d:63:7f:
         dc:07:2f:ac:1f:fc:e7:dd:be:e6:a4:47:b3:97:8b:73:f1:19:
         7f:b3:b1:ab:28:ac:b2:27:e3:cf:99:d7:c2:f2:0b:10:a8:20:
         00:cc:8b:e8:74:9a:1e:f8:79:2e:27:19:32:46:c8:f1:c1:69:
         50:44:91:8b:3f:82:43:21:3c:09:56:e4:a0:40:04:7e:1c:3f:
         b6:ac:ad:34:4b:06:25:b6:26:cc:74:7f:77:22:7d:9b:e7:91:
         f9:ca:68:80:ae:ac:f0:46:2d:c6:f6:9b:07:ea:0d:d9:16:85:
         96:6a:7a:d8:ea:34:18:ec:56:25:71:f5:15:92:fe:48:7b:08:
         2a:1a:85:c9:d8:26:a0:d1:9d:f0:d8:03:39:00:59:13:70:36:
         82:87:99:17:a2:20:3b:68:a1:89:3b:a9:3d:79:79:d7:3f:ca:
         84:a3:b0:d0:ea:7d:fd:55:68:8a:c2:e7:21:95:c5:e4:a6:e4:
         98:d1:49:78:47:33:0f:f5:6f:b4:40:0a:1f:c0:6f:3f:8d:82:
         2e:4c:58:16:e1:eb:37:15:20:43:a4:98:f3:10:d9:f5:ff:eb:
         12:9a:e2:f3:6a:10:1c:c6:cd:e4:64:02:ac:c9:07:2d:e3:0d:
         5b:c7:90:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8i7EehZv+ASLTULC0251i0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjYwNzAyMTMwMjE3WhcNMjYwNzAzMTMwMjE3WjAzMTEwLwYDVQQD
EygzMjJjMDExNDA1YzVlMjhmNTVkNWNiZDcyYWJhMjhjMWFlODE3MzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcD8RzEMRWuamG5VzAAhMm58REuC
Ssz9BQioLesNZkJEVSlkH53zvA4rf3utdCn9iiCvVrQI6i606LoW9Pzwgw3hjYl8
RxaZhchkHPodARZttToDNwpKkkhMBj17boOk6cYNM/ctWWnopCFYCFZEyjY40Nwb
tME9iANPkwYpDe7J4TUUjKsFaL8ZFASmXjgUSgkP4Qli4sKj3qHfW7d8LBMA+D0+
koSKrZWjlEMRCXlz+nxezgNk4kJ9NIjJxWxK9lF1WSjQUHPorL+u3mUkwEkuPICF
Tl28bY91m+75pnlucNO/eNaFgbr4MPcwZ6GwtKo5DI62vsiCfNvr+rTt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIsARQFxeKPVdXL1yq6KMGugXNRMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJr7ngqRr
3ghCy0dEBcRNXWN/3AcvrB/8592+5qRHs5eLc/EZf7Oxqyissifjz5nXwvILEKgg
AMyL6HSaHvh5LicZMkbI8cFpUESRiz+CQyE8CVbkoEAEfhw/tqytNEsGJbYmzHR/
dyJ9m+eR+cpogK6s8EYtxvabB+oN2RaFlmp62Oo0GOxWJXH1FZL+SHsIKhqFydgm
oNGd8NgDOQBZE3A2goeZF6IgO2ihiTupPXl51z/KhKOw0Op9/VVoisLnIZXF5Kbk
mNFJeEczD/VvtEAKH8BvP42CLkxYFuHrNxUgQ6SY8xDZ9f/rEpri82oQHMbN5GQC
rMkHLeMNW8eQ6g==
-----END CERTIFICATE-----