Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          /cEmB1WwmvCX64N+Skb/1Z7Ag27wUUnYbO4GFBMrrgk=
Subject key identifier:   FB:F2:86:EA:1D:7C:4F:8E:FE:AF:6D:50:35:E6:74:85:DE:38:92:EA
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       01A0E6D32A7CCA4ED9103395E54117A17055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          1A74
Signing time:             Mon 28 Sep 2026 07:03:13 +0000
Manifest this update:     Mon 28 Sep 2026 07:03:13 +0000
Manifest next update:     Tue 29 Sep 2026 07:03:13 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: bW0/XlDJSIU2Iq3i8LZp1vFUH3sdNiWuE/1ykf6SwKc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:d3:2a:7c:ca:4e:d9:10:33:95:e5:41:17:a1:70:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: Sep 28 07:03:13 2026 GMT
            Not After : Sep 29 07:03:13 2026 GMT
        Subject: CN=fbf286ea1d7c4f8efeaf6d5035e67485de3892ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:8a:68:e4:ac:b4:b0:a8:6e:15:76:6e:a9:
                    99:54:88:db:bc:ea:a5:4f:35:a5:5d:0d:0e:12:95:
                    d3:27:dc:e1:f7:d0:af:9c:1e:a7:c8:b3:15:36:2e:
                    32:77:98:a8:eb:eb:f6:26:fb:89:39:1a:1c:87:4c:
                    a6:e3:31:63:b9:e7:13:a9:e4:13:86:66:e8:40:91:
                    06:66:34:49:94:da:24:52:92:6b:31:7c:58:a5:9a:
                    33:8c:b4:54:4d:31:c6:d1:0d:e0:4d:59:50:c8:d3:
                    94:a0:d7:0b:9d:8e:ee:71:76:f1:52:fc:91:e7:d6:
                    45:07:c0:be:01:8e:e5:7f:bd:83:7d:83:f3:9d:fe:
                    8d:c1:1d:14:ff:52:72:6f:09:84:be:e1:91:0c:be:
                    68:4a:4e:bd:8b:bc:08:52:7b:78:b6:44:46:72:8c:
                    d1:84:ec:87:9a:13:5b:30:85:1c:cb:c8:f4:52:a2:
                    4e:3d:96:2a:c0:45:9b:a3:5b:c6:de:f8:95:60:e4:
                    1d:22:d7:bc:97:8d:58:94:42:65:46:a2:7f:e3:b8:
                    58:20:be:70:d0:c6:ff:d6:c5:f3:f6:dd:0a:36:1e:
                    d2:6f:50:e1:ca:5f:31:f5:ce:16:b2:8c:88:9e:b5:
                    ce:00:aa:8c:6b:c0:f5:bb:b0:3d:10:a3:e0:33:bc:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:86:EA:1D:7C:4F:8E:FE:AF:6D:50:35:E6:74:85:DE:38:92:EA
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:55:7a:44:b2:f0:73:ad:a4:c8:4d:2c:c8:0d:8d:a9:be:
         f2:e7:c9:0c:20:b3:7a:07:ab:1f:e8:52:1c:a0:d9:f1:d4:73:
         a9:36:50:44:32:2e:71:0b:56:4c:46:6b:36:b9:a1:66:98:3b:
         b6:23:9e:8f:76:6a:51:f2:7f:b9:f4:39:75:ab:cb:75:30:14:
         67:d1:84:e6:72:c9:63:08:cf:01:3c:31:e6:ee:cc:c0:71:ff:
         63:e7:95:2a:5a:22:5d:fc:83:81:54:23:95:73:e7:f7:ca:f3:
         d8:fa:95:5b:17:ae:a8:33:a9:54:e3:72:6d:65:1e:a3:b5:da:
         8b:b3:fd:24:04:11:5e:03:9c:f8:4c:76:d3:5d:0c:09:76:a5:
         56:67:cf:9d:56:97:3d:f4:8a:8c:0c:3d:1b:9a:98:85:8b:0f:
         6d:10:4e:34:e4:b7:8f:cd:cf:80:42:a7:d5:b1:48:eb:a5:66:
         45:0b:c5:a7:83:53:c6:7c:2c:88:8b:a4:e8:8b:a7:36:00:c6:
         8e:b5:32:ef:e1:af:60:d1:29:16:cb:9d:d6:eb:da:91:d2:e0:
         d1:92:0b:85:64:c5:a0:19:d7:9b:32:73:6b:a9:a5:20:b5:9e:
         51:8a:5e:e5:47:41:8f:7f:fb:9b:7f:6b:89:01:4d:c9:83:ab:
         f7:b6:ce:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDm0yp8yk7ZEDOV5UEXoXBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2Y2YjUzZjk4OGI1NzczMjBlZjI4OTMzODBhNWVhODI0
YjZhZTQwHhcNMjYwOTI4MDcwMzEzWhcNMjYwOTI5MDcwMzEzWjAzMTEwLwYDVQQD
EyhmYmYyODZlYTFkN2M0ZjhlZmVhZjZkNTAzNWU2NzQ4NWRlMzg5MmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmmKaOSstLCobhV2bqmZVIjbvOql
TzWlXQ0OEpXTJ9zh99CvnB6nyLMVNi4yd5io6+v2JvuJORoch0ym4zFjuecTqeQT
hmboQJEGZjRJlNokUpJrMXxYpZozjLRUTTHG0Q3gTVlQyNOUoNcLnY7ucXbxUvyR
59ZFB8C+AY7lf72DfYPznf6NwR0U/1JybwmEvuGRDL5oSk69i7wIUnt4tkRGcozR
hOyHmhNbMIUcy8j0UqJOPZYqwEWbo1vG3viVYOQdIte8l41YlEJlRqJ/47hYIL5w
0Mb/1sXz9t0KNh7Sb1Dhyl8x9c4WsoyInrXOAKqMa8D1u7A9EKPgM7xohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvyhuodfE+O/q9tUDXmdIXeOJLqMB8GA1UdIwQY
MBaAFOt/a1P5iLV3Mg7yiTOApeqCS2rkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjIt
MDJmMzAxM2Q5MWE5LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjItMDJmMzAxM2Q5MWE5
LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPNVekSy
8HOtpMhNLMgNjam+8ufJDCCzegerH+hSHKDZ8dRzqTZQRDIucQtWTEZrNrmhZpg7
tiOej3ZqUfJ/ufQ5davLdTAUZ9GE5nLJYwjPATwx5u7MwHH/Y+eVKloiXfyDgVQj
lXPn98rz2PqVWxeuqDOpVONybWUeo7Xai7P9JAQRXgOc+Ex2010MCXalVmfPnVaX
PfSKjAw9G5qYhYsPbRBONOS3j83PgEKn1bFI66VmRQvFp4NTxnwsiIuk6IunNgDG
jrUy7+GvYNEpFsud1uvakdLg0ZILhWTFoBnXmzJza6mlILWeUYpe5UdBj3/7m39r
iQFNyYOr97bOdg==
-----END CERTIFICATE-----