Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft
File:                     21291D2963EE74682B10BECBA6060EF246C76881.mft (raw, json)
Hash identifier:          gWv3S0qGKYobszXFvvy1NMjp9oCF0IJz3M2pOWlu4Y0=
Subject key identifier:   5D:60:D0:84:8F:17:A1:15:5E:DC:8D:BC:A2:8B:92:08:EF:D2:98:53
Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81
Certificate issuer:       /CN=21291D2963EE74682B10BECBA6060EF246C76881
Certificate serial:       3F0444730B5391F16A856586A5F8A8D42482F2C0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft
Manifest number:          74
Signing time:             Sat 08 Nov 2025 12:40:55 +0000
Manifest this update:     Sat 08 Nov 2025 12:35:55 +0000
Manifest next update:     Sun 09 Nov 2025 15:28:55 +0000
Files and hashes:         1: 326131343a373538333a326230303a3a2f34322d313238203d3e20323134323035.roa (hash: VYyQ9HRup4ddqrcoUKfcEWZA3flgJAKyvMn8Qb2hQCc=)
                          2: 21291D2963EE74682B10BECBA6060EF246C76881.crl (hash: wuWbriUmcD1w0md4U6yeeIrBhiZ3dDS8GGaqzjQR+Ts=)
                          3: 326131343a373538333a326130303a3a2f34302d313238203d3e20323131323831.roa (hash: 7kcvc7XAv56qFVmafM/D1iw7yZ48tgW4TPaORt+OViQ=)
                          4: 326131343a373538333a323930303a3a2f34302d313238203d3e20323134363339.roa (hash: Ig0MdxpLUWBFH0/Ucxj7iGLUl0RuOHs0CxE43qARgYQ=)
                          5: 326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa (hash: kC7ihYm/R5OERXYsLtyhxzyEmlKI1XwHLSptM6n0vvg=)
                          6: 326131343a373538333a323030303a3a2f34312d313238203d3e20323133343133.roa (hash: qcv62vhft+CfRefcIljQMYwhTtHw5pqiJA6YzH0JoaE=)
                          7: 326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa (hash: QTSey6Hp5GxpO8W9pZDSl/g5MxHZNI9D5mYgXqg8BF0=)
                          8: 326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa (hash: PTSU8qGNCimGfVZLMLacuvM/VXxIUmWAazoLI57rq4o=)
                          9: 326131343a373538333a323030303a3a2f33362d313238203d3e20323035393431.roa (hash: bttdf07pV56EPNWCClejJ5VLezHQTqirYk24CtzpecY=)
                          10: 326131343a373538303a666639303a3a2f34342d313238203d3e20323035393431.roa (hash: 5FD/Mehv7v0xNezRDRW9iBPyN5Dfwk8GJ9l323IIqtY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:44:73:0b:53:91:f1:6a:85:65:86:a5:f8:a8:d4:24:82:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881
        Validity
            Not Before: Nov  8 12:35:55 2025 GMT
            Not After : Nov  9 15:28:55 2025 GMT
        Subject: CN=5D60D0848F17A1155EDC8DBCA28B9208EFD29853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:02:cb:9e:e6:2e:99:9c:29:c1:ff:e3:73:
                    1b:0e:a8:73:57:57:9d:e0:6a:9e:71:9a:09:41:9b:
                    54:9b:c6:a2:20:d8:af:df:62:28:d6:ba:fe:16:80:
                    6c:43:e9:07:2d:35:a8:ac:88:6c:aa:5f:41:29:2c:
                    9c:f6:e3:ae:c9:7d:56:18:33:06:43:97:91:41:5d:
                    e3:41:7f:b6:b4:71:f4:96:1b:b8:32:89:e7:8d:bd:
                    4f:0b:f1:da:0d:e3:35:f6:c2:6d:4b:8a:ae:db:7f:
                    f1:46:95:27:38:21:de:ab:9a:30:ff:59:1d:84:ce:
                    06:03:aa:78:85:0b:81:ac:58:d1:ca:53:44:df:35:
                    a1:bf:9c:6d:88:65:df:bb:52:54:f9:8f:64:b5:f9:
                    ac:06:2a:1d:3e:1b:b7:01:d0:c3:86:ef:88:28:09:
                    98:b4:be:84:83:20:30:54:4e:3e:21:83:0a:97:ac:
                    04:39:95:9c:6e:a7:ad:39:df:47:fa:c8:c8:25:99:
                    8a:d2:65:83:9a:97:2a:9b:71:13:0c:00:c8:c6:6e:
                    b1:47:7f:ab:89:5a:6c:da:09:57:ad:fb:73:d4:20:
                    8f:46:c6:10:1b:01:70:c1:5e:90:9a:b4:ed:ba:d5:
                    52:8f:6a:4d:e1:cb:88:85:c5:4b:61:86:7b:c6:bb:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:60:D0:84:8F:17:A1:15:5E:DC:8D:BC:A2:8B:92:08:EF:D2:98:53
            X509v3 Authority Key Identifier:
                keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a0:44:b3:78:4e:41:e1:d2:ff:be:5a:6d:b8:4b:50:53:84:
         d7:b7:d8:3c:fc:93:ec:7e:c4:08:15:86:2b:9f:45:6c:32:05:
         98:f0:f4:82:dc:58:5d:be:fe:d6:57:c3:2e:80:a3:ac:09:6d:
         a0:38:58:ac:2d:00:3c:e8:97:95:ca:33:2a:9b:ae:77:d0:42:
         18:5b:7e:26:3c:a4:80:0d:ec:78:2d:eb:8e:ab:69:14:7d:3e:
         cc:94:28:66:31:86:a5:aa:a7:04:95:0e:d8:01:57:11:20:03:
         47:ca:85:2d:96:c8:23:94:cb:ae:ac:b3:83:28:2e:07:59:ad:
         22:95:97:93:f3:1c:bb:2a:53:de:59:1a:c3:6b:56:50:b5:7c:
         52:88:0a:ca:4b:ff:4d:6f:70:23:b7:ef:b0:af:2f:20:61:f4:
         c8:ca:b5:35:bc:7f:aa:34:cf:37:54:ac:b8:e2:99:21:c3:2c:
         4d:23:32:00:13:be:3f:d8:76:0d:fe:ba:1a:6a:40:48:18:46:
         36:06:dc:d0:96:a6:73:0e:f3:b3:5c:4a:63:13:da:8d:08:37:
         c8:4b:51:dd:9f:17:2d:d0:c6:56:d7:06:8a:fa:71:85:25:30:
         d9:17:95:32:53:0e:cb:5d:1e:27:53:d2:66:63:d6:e8:c8:66:
         f0:f9:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----