Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/1/0806515AC2B55184D43E8464C0F153B822A4FD81.mft
File:                     0806515AC2B55184D43E8464C0F153B822A4FD81.mft (raw, json)
Hash identifier:          cA6vepUYESppKYzXxzwfM6hiqlBYlrleKdl9O0Y37Jo=
Subject key identifier:   33:76:85:5B:0A:39:E1:F5:FE:5D:5D:9B:C0:D4:C8:C2:41:00:1B:63
Authority key identifier: 08:06:51:5A:C2:B5:51:84:D4:3E:84:64:C0:F1:53:B8:22:A4:FD:81
Certificate issuer:       /CN=0806515AC2B55184D43E8464C0F153B822A4FD81
Certificate serial:       3849C39B6BCB9DC660DE50E91E1ACD7FA6E68664
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0806515AC2B55184D43E8464C0F153B822A4FD81.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/1/0806515AC2B55184D43E8464C0F153B822A4FD81.mft
Manifest number:          0A
Signing time:             Sat 24 Oct 2026 09:46:09 +0000
Manifest this update:     Sat 24 Oct 2026 09:41:09 +0000
Manifest next update:     Sun 25 Oct 2026 10:33:09 +0000
Files and hashes:         1: BD66FEAF9F98856A39B3A2A485B67DA967A6CDE2.cer (hash: 8y3dPfoTbbc86WeHPRvYjZJYx8qVrnxmsXbSXlsqtSk=)
                          2: 0806515AC2B55184D43E8464C0F153B822A4FD81.crl (hash: LrbpD6BaPpFoHl32vT0ip0A8H6EJf0VwXFp+ue+zQ48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:c3:9b:6b:cb:9d:c6:60:de:50:e9:1e:1a:cd:7f:a6:e6:86:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0806515AC2B55184D43E8464C0F153B822A4FD81
        Validity
            Not Before: Oct 24 09:41:09 2026 GMT
            Not After : Oct 25 10:33:09 2026 GMT
        Subject: CN=3376855B0A39E1F5FE5D5D9BC0D4C8C241001B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:d2:7c:bc:96:2c:70:03:7e:ca:c3:dd:fc:
                    81:1b:ea:e1:ea:90:32:2b:e8:cc:53:f1:32:8c:34:
                    fe:f9:10:4d:69:73:8d:8c:e2:9f:2f:11:0e:6f:b9:
                    0d:ab:1c:ca:ab:cf:12:2e:b6:61:80:71:cb:70:11:
                    a6:b6:c4:ae:c5:8a:36:23:00:b4:e2:ed:f7:4a:09:
                    b6:a5:1f:91:df:74:f4:4c:8a:3b:93:1a:8f:3c:98:
                    52:97:a2:d1:d2:23:32:d0:df:66:2b:7e:27:e6:cb:
                    e0:09:f2:74:07:26:94:95:7c:09:b8:60:73:bf:68:
                    c9:3a:38:7b:92:54:45:7c:f1:9c:bd:8a:2e:72:39:
                    b1:66:77:77:4a:78:f4:50:4f:a5:dc:ff:9a:df:2c:
                    92:1f:33:d3:5f:a2:a7:88:77:6b:20:bd:39:ca:c0:
                    05:7d:81:71:34:f6:75:c9:d2:b6:6e:c8:b3:0b:a5:
                    0b:06:f5:2f:c6:8f:1e:4c:57:c7:a9:94:29:d5:77:
                    1f:ca:ae:ac:37:fb:ee:15:28:38:2d:e5:d1:74:27:
                    95:06:3d:40:c2:6a:09:44:a5:7b:c7:a0:90:31:21:
                    0e:2d:49:07:40:b8:fa:d2:01:b2:32:d6:43:34:fc:
                    6e:77:ed:9a:11:45:c5:5c:73:53:12:09:45:08:f6:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:85:5B:0A:39:E1:F5:FE:5D:5D:9B:C0:D4:C8:C2:41:00:1B:63
            X509v3 Authority Key Identifier:
                keyid:08:06:51:5A:C2:B5:51:84:D4:3E:84:64:C0:F1:53:B8:22:A4:FD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/1/0806515AC2B55184D43E8464C0F153B822A4FD81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0806515AC2B55184D43E8464C0F153B822A4FD81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/1/0806515AC2B55184D43E8464C0F153B822A4FD81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7c:ce:a6:b8:6c:34:29:e0:d8:ee:3e:c4:ad:d2:2b:b8:a2:
         86:e3:c3:e4:eb:78:32:a3:a2:13:d8:de:b3:1b:bb:53:70:6b:
         fe:e9:ef:3a:93:90:df:ca:7e:d2:6a:56:b7:1f:af:7b:cc:e4:
         81:39:08:0e:c2:25:64:cc:ed:52:71:19:bc:8c:54:08:eb:9a:
         92:0c:7d:73:35:07:1e:6c:96:2b:c3:2a:df:43:51:a7:03:96:
         56:e3:ee:a2:5c:44:c5:15:2d:d4:04:74:28:8e:46:33:fa:00:
         38:91:c2:09:d4:49:3d:98:18:10:46:7d:1d:8f:11:0a:d0:32:
         91:2d:45:0b:06:22:de:2f:8b:a7:44:75:24:52:61:b1:42:60:
         fd:14:be:26:d6:6a:06:1c:ff:b0:d7:ab:8e:e4:8c:a2:64:b7:
         c7:e5:94:07:20:24:1a:b1:23:f1:9f:c4:b9:98:ab:f6:13:50:
         13:6c:73:ab:fb:94:4f:f1:59:5a:88:24:ea:79:2d:78:86:05:
         01:87:9e:55:cb:2e:60:5f:88:21:04:39:4c:9f:bf:07:15:ea:
         25:10:14:68:9a:18:d9:29:ff:c7:e3:05:bd:62:d2:74:5d:92:
         9b:d3:c5:e5:11:09:b7:37:0d:78:7c:41:e3:1b:9a:8f:76:d7:
         8d:b1:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----