Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          D7LabL3QhDM01DueTda9WDu5UOv7jnMwNOfgUp4cXFU=
Subject key identifier:   91:68:B2:1A:BA:8E:AF:C4:46:1A:C9:93:70:90:26:8F:9D:7D:9A:3C
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       019F2247EAC7E8CA11EB84209BF4B1301671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          155A
Signing time:             Thu 02 Jul 2026 10:02:46 +0000
Manifest this update:     Thu 02 Jul 2026 10:02:46 +0000
Manifest next update:     Fri 03 Jul 2026 10:02:46 +0000
Files and hashes:         1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: uYhdCebsZFphWImK71ORb4tSiPQ5udCLJ3xD5k+WWPk=)
                          2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=)
                          3: CHwEEgIG46KrfCZubP2sgaYyQKQ.roa (hash: 1VYNsORWI1Jnmpu8/KvoEN63QsZYW/dgbty42oD0bdY=)
                          4: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (hash: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=)
                          5: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=)
                          6: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=)
                          7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:47:ea:c7:e8:ca:11:eb:84:20:9b:f4:b1:30:16:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jul  2 10:02:46 2026 GMT
            Not After : Jul  3 10:02:46 2026 GMT
        Subject: CN=9168b21aba8eafc4461ac9937090268f9d7d9a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:28:bb:bc:0b:fd:f4:ec:bc:61:b1:00:92:
                    aa:0b:88:61:6d:95:0d:ed:02:56:ab:93:f8:c7:31:
                    ff:a4:3f:a3:75:eb:f8:43:33:c6:66:69:b4:61:8b:
                    87:e4:0a:f6:b6:99:7d:c7:67:1e:fa:d2:6b:b5:bb:
                    1d:ec:4e:02:9a:62:dd:17:e6:c7:a3:4d:95:24:ac:
                    72:44:ed:29:d7:8e:09:08:a7:af:6d:f5:31:d8:c4:
                    ea:53:d0:02:f1:c7:28:91:a6:11:63:27:87:2e:92:
                    91:04:62:50:a8:bb:39:67:0c:cd:e1:54:88:b3:a1:
                    42:24:bd:e0:04:79:bd:23:43:46:46:88:bd:ff:29:
                    8d:d5:fb:80:90:89:4f:a2:aa:9d:70:c6:bd:3d:57:
                    99:7b:68:27:aa:7c:23:5c:e3:41:b1:36:2b:b4:f9:
                    2f:d8:15:09:3b:ba:b5:05:c8:bc:e4:37:74:04:13:
                    27:80:06:77:05:34:52:dc:38:71:b7:cf:2c:2a:f8:
                    a5:9f:b2:4d:eb:e7:3d:2c:a5:07:ce:04:bd:d1:cd:
                    cd:12:d0:81:9f:5c:06:85:f9:17:f9:50:c2:32:12:
                    02:11:59:9e:73:24:6c:6e:f5:9e:76:96:45:b1:a8:
                    4c:0d:8b:52:e4:02:f1:ac:9e:f8:84:b9:b7:73:47:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:B2:1A:BA:8E:AF:C4:46:1A:C9:93:70:90:26:8F:9D:7D:9A:3C
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:2b:ec:74:99:26:80:e6:1c:ef:14:ba:b0:e3:1c:f6:45:
         58:63:4a:2a:6e:69:9f:dc:83:89:f3:9e:89:1e:a1:55:9d:da:
         16:85:55:8c:66:d2:fb:77:5c:54:b7:c5:03:1c:51:85:d6:4d:
         f1:b6:57:d4:b4:63:27:51:8d:56:5f:6d:04:84:c4:c4:2b:99:
         ae:10:48:23:79:a6:3a:ec:75:47:be:6a:2d:3d:2a:f9:e8:ac:
         10:5e:08:0d:f7:a3:e7:5d:90:f6:3a:68:6f:f9:2a:1d:8e:fb:
         eb:2c:e7:f8:21:52:ca:87:9d:6e:8b:af:0f:8e:e8:11:78:d1:
         48:4b:61:1b:06:1c:32:42:37:18:2a:16:29:53:7e:56:5a:e2:
         89:8e:db:39:91:13:71:10:89:1a:5d:90:0f:f3:c7:2d:c4:11:
         14:a5:12:f4:da:c7:23:c6:5a:29:d1:31:5c:88:24:b7:20:7b:
         84:bc:78:7d:d0:a7:cc:78:0f:b2:ec:07:f9:be:63:db:9a:b3:
         33:4c:df:fd:dd:45:7b:e0:14:08:ce:ad:ec:ba:47:9a:2c:b3:
         81:28:8a:4c:57:7b:fa:ec:83:ec:8b:6f:7e:7c:ce:31:8a:d7:
         35:c4:22:b6:46:b6:e7:b1:8c:b8:e7:7a:dc:34:75:71:c7:5f:
         4b:da:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----