Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
File:                     258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json)
Hash identifier:          8pHreIYksi3oGIH4OL164565Iny0NMCeHp8pQV2BZaI=
Subject key identifier:   60:22:B0:6B:E6:E8:A3:B1:88:D7:65:32:CF:9D:44:AF:58:3D:BB:6D
Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A
Certificate issuer:       /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
Certificate serial:       68C24A2A336131E7B864075039181708B3CF2E3B
Authority info access:    rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
Manifest number:          01CD
Signing time:             Fri 02 Oct 2026 13:48:13 +0000
Manifest this update:     Fri 02 Oct 2026 13:43:13 +0000
Manifest next update:     Sat 03 Oct 2026 14:54:13 +0000
Files and hashes:         1: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: LA01vV4g2+PDEBYpHQ+xe6Q5NkCI3vWWqe+/cTQjUg8=)
                          2: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=)
                          3: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=)
                          4: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=)
                          5: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=)
                          6: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c2:4a:2a:33:61:31:e7:b8:64:07:50:39:18:17:08:b3:cf:2e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
        Validity
            Not Before: Oct  2 13:43:13 2026 GMT
            Not After : Oct  3 14:54:13 2026 GMT
        Subject: CN=6022B06BE6E8A3B188D76532CF9D44AF583DBB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:c0:67:90:b3:e2:1e:c4:3a:c0:ca:e5:c1:
                    68:09:2e:00:cf:49:33:0f:0e:20:b3:29:ce:80:49:
                    25:08:80:1f:0d:7f:9d:46:67:a8:c0:93:24:f5:36:
                    7d:ac:2d:0a:ac:db:4d:8a:c7:f9:00:97:a4:75:83:
                    0a:18:9e:f2:86:f9:8b:7b:b1:a6:64:6c:86:00:13:
                    2a:9d:37:09:9a:99:8d:46:32:45:d9:ef:7b:80:ac:
                    28:de:70:3b:da:4f:af:1b:4f:4e:2b:85:ea:66:30:
                    d8:4a:8a:3a:1d:ca:f0:04:85:4a:fa:c1:f2:a8:30:
                    6b:04:c7:63:19:c5:18:dc:9c:fd:3e:05:d6:07:2c:
                    45:08:d4:cc:fa:7e:5f:29:ef:06:ee:6b:85:bb:c9:
                    e6:62:dc:7e:a0:cd:a9:d2:b1:c3:89:0a:6f:0a:49:
                    af:9c:69:cb:ba:f9:12:7e:d9:ec:93:19:68:54:aa:
                    ca:9b:c8:b7:35:ae:67:78:5f:de:34:7d:e0:01:1b:
                    db:83:f2:56:0d:40:b5:6e:9d:3c:bf:a0:ab:18:a1:
                    9b:30:31:9e:62:f2:b5:1e:a1:f7:95:0f:54:1f:14:
                    ae:bb:05:09:a9:45:a1:b6:6e:3b:e4:11:b4:06:d8:
                    41:0b:86:4a:3b:74:e6:00:b8:14:e3:3f:6b:17:07:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:22:B0:6B:E6:E8:A3:B1:88:D7:65:32:CF:9D:44:AF:58:3D:BB:6D
            X509v3 Authority Key Identifier:
                keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:82:19:3d:a6:0b:4e:13:89:7f:33:1f:08:56:09:5d:79:
         cc:06:3e:bd:d9:d3:79:50:59:8f:f5:1f:ce:ca:ef:7e:e1:b0:
         e5:75:1d:9e:fc:1d:3b:1a:9b:00:21:68:2f:63:e4:0a:d5:17:
         04:28:65:6b:17:9d:ea:85:0e:2b:d4:57:79:0f:d5:e1:44:6e:
         47:8a:e1:e5:94:8b:2b:6d:5e:68:c0:95:22:43:5b:aa:c8:23:
         d8:52:d9:e3:46:21:15:bd:f6:41:27:71:ec:0e:9e:68:60:56:
         35:f2:fa:c2:37:dc:d5:50:66:c5:a6:ae:69:73:d9:4a:c7:97:
         c2:53:20:5e:ea:5d:27:d7:99:0a:00:0f:03:94:fd:a2:51:55:
         46:c8:f2:bf:d3:b4:fc:3e:b4:e1:04:b1:0f:d0:7d:48:73:d4:
         01:52:8d:99:52:8c:ec:e6:c4:ed:3d:14:08:1a:ab:0b:59:85:
         25:01:50:1f:1a:50:72:9e:c4:d9:59:a7:5e:06:81:3c:34:93:
         3f:72:04:63:54:16:d0:91:f9:04:c9:e4:1a:1a:2b:20:7d:43:
         25:67:88:7e:07:03:93:13:91:9f:27:b4:2b:de:9b:a5:6b:34:
         78:8f:62:fb:ce:69:d2:fa:f6:56:27:ae:b7:ab:d0:1b:db:11:
         bf:a2:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----