Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File:                     3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier:          FO4+Y6uJKnY7rHZ6398G6jumpuRajFjBmcccPuIvC7E=
Subject key identifier:   2E:10:3B:4E:96:4E:FE:89:E7:CA:36:13:1E:8B:1F:A4:10:2C:6F:15
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer:       /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial:       01A0CDB6504BC254719D26217E74D935A3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number:          1451
Signing time:             Wed 23 Sep 2026 10:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 10:01:12 +0000
Manifest next update:     Thu 24 Sep 2026 10:01:12 +0000
Files and hashes:         1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: GSQX5NtkR5D5aSPx5aA3skEBceg5Er1BlkRc1fsub9U=)
                          2: 5NCPJAHZuuvT_Y3OLL7H8HuHVKg.roa (hash: Bkja5xY8wPIuCivflgBr5uP8e0j+G2X5xzd/ng/E16A=)
                          3: NVJf-5Gx0foqJa85FP-HPGtN5wk.roa (hash: s/IHZ+Grwn0n0cxFSQF8OC1Yd8wC2AZzIQiJGNSSJB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:50:4b:c2:54:71:9d:26:21:7e:74:d9:35:a3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
        Validity
            Not Before: Sep 23 10:01:12 2026 GMT
            Not After : Sep 24 10:01:12 2026 GMT
        Subject: CN=2e103b4e964efe89e7ca36131e8b1fa4102c6f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:3f:89:34:14:8e:7e:98:ef:26:30:8e:92:
                    b6:a1:da:d6:87:e5:93:54:c7:51:03:69:6e:7c:4d:
                    19:b4:2d:d8:60:b5:12:ff:36:22:78:8b:5f:fd:80:
                    1b:c2:d6:d2:13:07:b4:54:d0:aa:06:29:aa:7a:fa:
                    70:35:a6:b2:ab:57:8b:95:6b:08:96:55:7e:b2:82:
                    c9:9a:79:f9:a9:08:b9:28:13:70:db:39:7d:a5:41:
                    cc:3b:8d:5d:02:79:ce:73:6f:9d:2a:c7:99:85:b6:
                    27:91:58:6d:aa:70:56:a2:d3:78:17:7d:45:23:97:
                    d1:eb:bd:16:cb:39:fa:83:96:b7:be:4a:45:6c:82:
                    c4:2c:a2:5f:8b:70:a1:c1:12:4a:4e:15:73:87:7c:
                    e3:1e:23:e1:d8:19:1e:65:37:82:65:b0:6c:4e:0e:
                    10:fb:d7:3f:2e:60:3c:1b:80:ac:3f:0e:f3:a7:07:
                    23:5d:17:6f:37:f8:22:1a:89:14:83:7f:50:7c:62:
                    92:e9:6d:0e:1d:8c:7e:27:ce:c4:40:80:32:cd:8d:
                    11:c4:87:d1:45:9f:01:ff:79:c5:9c:f6:19:fc:68:
                    d1:06:67:f6:49:fd:04:61:06:54:29:2c:b1:0d:51:
                    d7:13:4e:48:40:bf:d1:48:1e:19:b1:2e:e8:88:12:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:3B:4E:96:4E:FE:89:E7:CA:36:13:1E:8B:1F:A4:10:2C:6F:15
            X509v3 Authority Key Identifier:
                keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:72:9b:26:e1:4f:a7:2f:2f:ba:09:60:33:fc:02:28:0f:f8:
         66:b6:47:f7:fb:f3:97:cb:83:eb:f6:8d:79:fe:84:ed:7b:05:
         62:73:29:66:72:44:83:91:f8:08:26:b2:cc:f0:b1:89:b1:8b:
         f0:f9:77:6c:bd:db:b6:40:9a:54:4b:29:a1:29:bd:c8:3a:5e:
         83:4c:3b:9f:54:18:ed:86:a8:4a:78:3f:88:d3:43:b0:5b:a3:
         8a:cd:f2:a4:9b:1c:7c:f7:1b:d9:c6:a0:07:bb:73:bd:d4:3a:
         fc:b8:f4:5b:c9:f6:a2:74:15:b3:18:f7:67:3b:e9:e1:f8:18:
         63:b6:87:6f:27:f7:61:33:07:bc:50:6c:03:95:c5:f1:28:c1:
         2a:10:b7:25:5f:de:f0:89:c0:9e:7f:3b:c1:71:63:e9:34:ee:
         66:38:ec:73:95:8e:47:8f:71:f4:ed:23:5d:3c:15:63:e3:59:
         bf:ed:ed:2e:68:22:54:f1:65:9e:4d:11:f3:5e:a0:3b:52:ef:
         f5:00:60:80:80:39:e1:60:83:9b:33:c9:26:9e:43:b2:e1:71:
         51:c9:16:0f:01:c5:ac:2c:75:fa:5a:57:70:da:04:b0:81:b5:
         7e:77:cc:58:7b:d6:4a:64:e8:c0:09:15:a6:97:1c:f7:76:fb:
         63:cd:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----