Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          HlZgW4cIcqWy9YF1oWk5v9U+1XU/rJovV88/JKS9xI8=
Subject key identifier:   45:3E:1A:CE:26:70:68:11:1D:16:1D:C2:C5:3F:CE:B9:79:72:A6:F8
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       019F22477F446D540E2AF3B0167E42E151F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          1620
Signing time:             Thu 02 Jul 2026 10:02:18 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:18 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:18 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: uTB9r3QTYQtyYH+Ktvr/yENiEGV2YolRWQJ3IhAKTmA=)
                          2: fzdQ-DiiI7ywifu_IGVttENLXng.roa (hash: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:7f:44:6d:54:0e:2a:f3:b0:16:7e:42:e1:51:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: Jul  2 10:02:18 2026 GMT
            Not After : Jul  3 10:02:18 2026 GMT
        Subject: CN=453e1ace267068111d161dc2c53fceb97972a6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:61:f2:09:45:a9:44:4f:0d:13:6e:8d:d1:
                    b3:10:c3:dc:1e:23:d2:94:21:16:99:5c:07:25:45:
                    4a:51:cc:ec:9c:26:36:22:bd:c2:38:09:9d:33:d7:
                    b6:4b:77:be:db:d3:13:e0:e7:88:bc:71:55:ea:1d:
                    26:90:0a:5b:9f:c1:a6:d4:16:b3:f1:ab:a3:03:8d:
                    f4:01:e8:16:f1:82:70:f9:ed:4f:ec:03:c0:28:d7:
                    6c:a2:b1:68:0e:63:98:17:5d:7f:ee:1f:25:12:67:
                    61:18:57:0b:e4:4b:b2:67:12:5b:7c:1e:a8:47:13:
                    d6:c0:a6:99:d3:22:cc:3c:fb:c5:ff:26:a5:a7:c7:
                    b9:3b:cd:39:f5:9b:78:4f:0b:56:31:91:35:86:ce:
                    96:4a:74:0f:f2:69:74:94:62:68:26:a9:c3:9a:48:
                    d8:fa:1e:47:02:5d:41:98:fa:c0:4b:76:3b:7f:a1:
                    ae:10:3d:0e:03:4b:3c:dd:2f:79:f0:53:d1:72:5c:
                    13:5f:24:d9:34:ee:16:c6:bb:48:58:e4:57:01:70:
                    73:47:97:d4:f0:77:8b:1d:94:c6:d1:85:32:23:6d:
                    ce:9f:5b:7e:c2:31:30:87:19:ce:2f:10:ae:a6:e7:
                    6a:1d:e9:b1:8e:7e:85:1d:b1:f0:9b:9b:8d:3c:3e:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3E:1A:CE:26:70:68:11:1D:16:1D:C2:C5:3F:CE:B9:79:72:A6:F8
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:c2:90:54:6d:1c:7e:6c:32:5c:1b:9d:65:c5:36:09:0f:
         ef:95:6b:fe:c4:1a:3a:c7:d3:c3:cc:86:45:70:bb:da:d9:28:
         6b:ef:c7:ca:fe:7c:3b:81:5b:a3:95:57:56:fa:27:79:8f:87:
         65:f2:2a:08:f4:c4:c9:95:dc:ab:4c:32:8a:0a:08:12:c4:e7:
         6b:b3:75:2a:73:04:1f:85:54:fe:45:35:cd:44:09:e9:6a:67:
         9d:29:2d:f8:d0:02:c3:2a:29:42:97:ef:74:34:3d:99:8b:67:
         7b:26:b5:26:df:64:89:4c:45:46:c8:9c:da:84:65:8a:7c:b8:
         2a:79:9d:d5:e0:26:36:e9:00:e3:d7:42:d8:99:a5:1a:b4:42:
         2f:c2:4b:02:9e:e5:e3:3d:89:b0:32:d7:ec:8a:38:46:7e:d0:
         c7:63:bb:64:72:46:c3:93:04:fb:9a:69:fd:93:d7:7a:7d:01:
         ad:df:bc:6c:d0:7f:9f:ea:a5:f9:69:ec:e7:98:75:fb:68:cb:
         60:fa:37:ee:fa:25:0a:40:e3:ad:52:43:7d:60:57:83:40:4d:
         89:d3:b9:81:be:5b:c6:72:b0:c7:5c:25:7d:b3:39:44:4b:3e:
         55:ed:04:d9:f8:4e:72:f3:9c:46:64:18:14:a8:a5:2b:c1:c7:
         b4:f0:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----