Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
File:                     uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft (raw, json)
Hash identifier:          LZNR9KpCk/OPq2i2RYeu2CczHK0v6lQwaKE9pRQW/2g=
Subject key identifier:   45:B8:7C:10:0D:44:39:2F:49:80:EB:D3:3A:7F:89:14:EB:7E:08:00
Authority key identifier: B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94
Certificate issuer:       /CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
Certificate serial:       019CB3924510A94FC651D3488FA0E50F423F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft
Manifest number:          0F12
Signing time:             Tue 03 Mar 2026 12:00:33 +0000
Manifest this update:     Tue 03 Mar 2026 12:00:33 +0000
Manifest next update:     Wed 04 Mar 2026 12:00:33 +0000
Files and hashes:         1: uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl (hash: 0O2vsrwsXiQT5W76EcbV+sJstXPSE+wjQhx9UXle/9Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b3:92:45:10:a9:4f:c6:51:d3:48:8f:a0:e5:0f:42:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96aed426fb1a06325a2637921a4b5ab98a1a594
        Validity
            Not Before: Mar  3 12:00:33 2026 GMT
            Not After : Mar  4 12:00:33 2026 GMT
        Subject: CN=45b87c100d44392f4980ebd33a7f8914eb7e0800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:f0:03:73:16:c9:0b:75:12:4c:86:05:88:
                    5a:30:f0:8c:3d:0a:5b:40:31:70:32:a2:3f:37:55:
                    7b:45:fc:d1:6d:c8:0f:11:59:e0:a5:d9:50:fe:10:
                    a7:3b:44:c9:b4:fe:e7:f6:98:c5:30:75:13:20:61:
                    e3:4e:34:0d:cc:46:3f:d2:31:37:b1:2c:bd:55:ae:
                    e0:9c:0c:c8:d2:6f:20:98:8f:a4:b0:6f:03:f8:49:
                    7e:ea:e1:ce:9e:ff:f1:87:8c:d9:0b:b2:78:a4:c6:
                    a0:b5:9c:b9:68:90:50:40:17:74:93:8e:3b:df:fc:
                    78:2d:e0:b1:65:8c:3c:5a:f2:7c:c5:65:4c:a7:ae:
                    f3:ca:ed:9c:ce:0a:8b:d6:ea:73:0d:9d:e2:be:58:
                    47:7f:d9:5a:8f:5e:b4:ef:e6:9a:71:ad:cd:6c:ad:
                    f3:fe:1d:eb:6e:c1:2f:65:7c:b7:6f:2c:af:09:2e:
                    b5:3e:ae:57:85:cc:87:89:e2:2e:16:f8:ef:ff:00:
                    db:07:83:1d:dc:3d:3c:23:b4:2c:7c:32:c7:99:73:
                    4a:44:be:57:aa:31:0c:9d:1e:df:10:5e:5c:20:c4:
                    a2:60:aa:56:23:9c:8e:77:0b:e6:ba:13:8e:ed:ce:
                    f7:52:10:04:7f:7d:9b:c4:38:e6:db:5b:a6:18:c0:
                    08:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:7C:10:0D:44:39:2F:49:80:EB:D3:3A:7F:89:14:EB:7E:08:00
            X509v3 Authority Key Identifier:
                keyid:B9:6A:ED:42:6F:B1:A0:63:25:A2:63:79:21:A4:B5:AB:98:A1:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWrtQm-xoGMlomN5IaS1q5ihpZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4a57b2-4458-4f61-bf28-79296d3e6328/1/uWrtQm-xoGMlomN5IaS1q5ihpZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:f8:e7:54:f2:7f:33:9c:a0:64:e4:b9:ea:b4:0f:16:e9:
         cd:32:05:e2:1d:f9:ec:a2:fe:a3:19:b3:ce:c3:e8:30:5e:d1:
         ad:24:b8:52:81:9c:f5:62:eb:32:3e:8f:62:bc:0c:a8:1a:d9:
         77:35:e9:8b:16:df:f3:17:a5:d0:2a:45:14:46:a1:f2:32:5d:
         92:bf:3a:69:48:64:f5:6f:26:c1:a1:e2:67:d9:d9:3a:f3:05:
         9e:70:af:da:a3:d8:da:55:4f:76:dc:ff:f7:dc:6e:f1:6c:35:
         10:f9:38:b8:d9:ea:2e:cd:24:10:d4:4d:5d:4e:fb:1b:fb:0f:
         e6:0c:cb:cc:0b:2e:67:5a:a7:c7:36:dc:41:08:8d:c5:e7:24:
         77:00:b1:5e:8f:19:d7:93:21:e5:47:36:1d:04:08:bf:50:d6:
         07:bb:73:6b:95:47:f7:2c:48:63:42:55:d9:c2:bf:16:8f:2e:
         c7:06:fe:09:dc:07:11:a7:1d:ee:f6:8a:d0:f6:91:14:9c:44:
         a5:72:e8:8c:ac:cf:f3:de:51:c7:14:5a:86:fb:93:2f:bb:d2:
         35:39:33:17:78:ac:1f:4d:7c:c0:10:68:eb:b3:05:cd:6c:ca:
         f8:73:d8:2d:80:80:2e:dc:9b:8e:47:34:2a:c4:2e:54:c1:3e:
         87:8c:4d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyzkkUQqU/GUdNIj6DlD0I/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmFlZDQyNmZiMWEwNjMyNWEyNjM3OTIxYTRiNWFiOThh
MWE1OTQwHhcNMjYwMzAzMTIwMDMzWhcNMjYwMzA0MTIwMDMzWjAzMTEwLwYDVQQD
Eyg0NWI4N2MxMDBkNDQzOTJmNDk4MGViZDMzYTdmODkxNGViN2UwODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+HwA3MWyQt1EkyGBYhaMPCMPQpb
QDFwMqI/N1V7RfzRbcgPEVngpdlQ/hCnO0TJtP7n9pjFMHUTIGHjTjQNzEY/0jE3
sSy9Va7gnAzI0m8gmI+ksG8D+El+6uHOnv/xh4zZC7J4pMagtZy5aJBQQBd0k447
3/x4LeCxZYw8WvJ8xWVMp67zyu2czgqL1upzDZ3ivlhHf9laj1607+aaca3NbK3z
/h3rbsEvZXy3byyvCS61Pq5XhcyHieIuFvjv/wDbB4Md3D08I7QsfDLHmXNKRL5X
qjEMnR7fEF5cIMSiYKpWI5yOdwvmuhOO7c73UhAEf32bxDjm21umGMAICQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW4fBANRDkvSYDr0zp/iRTrfggAMB8GA1UdIwQY
MBaAFLlq7UJvsaBjJaJjeSGktauYoaWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgt
NzkyOTZkM2U2MzI4LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80YTU3YjItNDQ1OC00ZjYxLWJmMjgtNzkyOTZkM2U2MzI4
LzEvdVdydFFtLXhvR01sb21ONUlhUzFxNWlocFpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcT451Ty
fzOcoGTkueq0DxbpzTIF4h357KL+oxmzzsPoMF7RrSS4UoGc9WLrMj6PYrwMqBrZ
dzXpixbf8xel0CpFFEah8jJdkr86aUhk9W8mwaHiZ9nZOvMFnnCv2qPY2lVPdtz/
99xu8Ww1EPk4uNnqLs0kENRNXU77G/sP5gzLzAsuZ1qnxzbcQQiNxeckdwCxXo8Z
15Mh5Uc2HQQIv1DWB7tza5VH9yxIY0JV2cK/Fo8uxwb+CdwHEacd7vaK0PaRFJxE
pXLojKzP895RxxRahvuTL7vSNTkzF3isH018wBBo67MFzWzK+HPYLYCALtybjkc0
KsQuVME+h4xNYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:52 2026 by rpki-client