Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File:                     A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier:          CDddFLzAKrNohzVR0Fox7VTcuQ67eg07IkzyLpoHK0k=
Subject key identifier:   EC:A2:E6:E3:B7:36:38:CD:B6:6A:95:94:65:C3:CD:10:62:8B:6D:91
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer:       /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial:       019F21A24DBD471D879FF69D87903F93233B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 07:01:52 +0000
Manifest this update:     Thu 02 Jul 2026 07:01:52 +0000
Manifest next update:     Fri 03 Jul 2026 07:01:52 +0000
Files and hashes:         1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: 9862MsaVEeFq6t9POxi+Qed69vaccTF7X4wnVzRhDdA=)
                          2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:21:a2:4d:bd:47:1d:87:9f:f6:9d:87:90:3f:93:23:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
        Validity
            Not Before: Jul  2 07:01:52 2026 GMT
            Not After : Jul  3 07:01:52 2026 GMT
        Subject: CN=eca2e6e3b73638cdb66a959465c3cd10628b6d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:a6:0e:f2:f7:74:67:c9:8e:1d:1f:9d:1c:
                    6f:f7:bc:1b:9c:b7:2a:d7:ca:ac:9f:bd:6a:4a:5b:
                    0a:27:cf:16:0a:8a:74:df:35:d8:5f:a6:dd:d1:b2:
                    7d:0e:4d:d1:ba:73:37:1a:15:23:80:41:04:ca:bf:
                    12:4b:19:8c:1f:5b:b3:8f:79:40:76:2c:86:b1:14:
                    02:2c:0d:f2:2a:fc:22:5b:1c:33:a7:dd:d3:d1:c0:
                    b1:96:17:d0:02:e9:37:ea:98:a6:ac:43:0d:9d:df:
                    f3:e1:49:6b:7b:6d:c1:0b:b2:91:b2:f2:bf:35:65:
                    d7:3c:25:1b:67:99:c2:3c:ee:28:f5:ff:48:4b:b4:
                    55:9c:40:21:bb:1b:fd:6d:c9:e8:05:af:1f:be:9f:
                    cf:f7:ad:68:2f:3e:dc:08:1d:26:c5:4f:1c:7e:9e:
                    d9:db:88:3c:45:c3:b6:1f:9e:87:e3:33:3b:28:4d:
                    be:7d:8d:65:85:f5:c1:c4:6b:0e:fe:94:aa:bd:19:
                    e0:4a:ee:e2:8c:43:b7:86:76:39:ec:ca:c5:c1:4f:
                    e9:b7:b1:28:bd:93:b0:84:8f:e3:74:ea:b5:6a:b5:
                    6a:aa:58:3c:b3:d7:1c:83:54:17:cb:1c:2a:fc:4c:
                    b9:ac:eb:ed:52:72:5d:40:9a:41:8b:d3:55:fa:66:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A2:E6:E3:B7:36:38:CD:B6:6A:95:94:65:C3:CD:10:62:8B:6D:91
            X509v3 Authority Key Identifier:
                keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a2:40:d5:a3:b9:e4:4d:07:6a:fa:40:c0:5a:96:3a:a6:cc:
         a9:43:a5:31:bf:2e:87:ab:9f:6a:8e:00:d6:fb:d7:08:88:7a:
         ce:dc:96:f1:f5:86:c2:c7:3b:92:01:0b:01:4e:6d:65:d3:e8:
         62:df:08:dd:62:0c:ed:f1:74:70:95:d4:7a:23:14:2c:67:df:
         59:3a:bc:08:ab:12:f4:e9:60:27:58:20:d3:21:d6:48:54:df:
         08:bb:73:50:7b:61:f0:f4:89:26:31:c7:01:b7:d8:b0:94:af:
         c4:7b:54:24:47:42:2f:b4:07:6c:70:93:02:c7:19:fc:e2:76:
         01:04:0b:9d:62:85:46:3c:7f:b0:69:88:da:d3:c9:86:8a:db:
         f5:d4:a6:03:1c:ff:bf:2b:2b:2d:3f:bc:d9:d1:a3:41:14:d6:
         f8:e7:74:11:8e:b3:fa:8e:44:50:6e:b1:41:c7:aa:cb:81:e0:
         45:03:75:5b:b1:4d:a0:28:c6:c4:64:8e:a6:7d:fe:71:0d:20:
         63:9e:02:31:50:0c:cc:a8:7b:e3:29:fc:c1:83:e0:c6:ed:0f:
         45:78:77:50:27:12:12:90:93:69:06:4a:bd:d9:3e:3f:79:90:
         41:8c:4f:34:35:06:1b:f3:77:66:06:78:ae:cf:cf:8b:49:22:
         61:69:3c:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8hok29Rx2Hn/adh5A/kyM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl
YmU4NjEwHhcNMjYwNzAyMDcwMTUyWhcNMjYwNzAzMDcwMTUyWjAzMTEwLwYDVQQD
EyhlY2EyZTZlM2I3MzYzOGNkYjY2YTk1OTQ2NWMzY2QxMDYyOGI2ZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RimDvL3dGfJjh0fnRxv97wbnLcq
18qsn71qSlsKJ88WCop03zXYX6bd0bJ9Dk3RunM3GhUjgEEEyr8SSxmMH1uzj3lA
diyGsRQCLA3yKvwiWxwzp93T0cCxlhfQAuk36pimrEMNnd/z4Ulre23BC7KRsvK/
NWXXPCUbZ5nCPO4o9f9IS7RVnEAhuxv9bcnoBa8fvp/P961oLz7cCB0mxU8cfp7Z
24g8RcO2H56H4zM7KE2+fY1lhfXBxGsO/pSqvRngSu7ijEO3hnY57MrFwU/pt7Eo
vZOwhI/jdOq1arVqqlg8s9ccg1QXyxwq/Ey5rOvtUnJdQJpBi9NV+mZQewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyi5uO3NjjNtmqVlGXDzRBii22RMB8GA1UdIwQY
MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt
OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx
LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaJA1aO5
5E0HavpAwFqWOqbMqUOlMb8uh6ufao4A1vvXCIh6ztyW8fWGwsc7kgELAU5tZdPo
Yt8I3WIM7fF0cJXUeiMULGffWTq8CKsS9OlgJ1gg0yHWSFTfCLtzUHth8PSJJjHH
AbfYsJSvxHtUJEdCL7QHbHCTAscZ/OJ2AQQLnWKFRjx/sGmI2tPJhorb9dSmAxz/
vysrLT+82dGjQRTW+Od0EY6z+o5EUG6xQceqy4HgRQN1W7FNoCjGxGSOpn3+cQ0g
Y54CMVAMzKh74yn8wYPgxu0PRXh3UCcSEpCTaQZKvdk+P3mQQYxPNDUGG/N3ZgZ4
rs/Pi0kiYWk8Eg==
-----END CERTIFICATE-----