Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File:                     nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier:          ld7sIQuSTxWnFxpxkkcYd4QFzF+/GFDxNoMvDwYXat0=
Subject key identifier:   96:79:41:39:91:02:0A:52:31:58:A7:88:2C:8D:D4:F9:05:94:6D:9A
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer:       /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial:       01A11F3F8569F59E992232205BF4892F2D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number:          1A93
Signing time:             Fri 09 Oct 2026 06:00:18 +0000
Manifest this update:     Fri 09 Oct 2026 06:00:18 +0000
Manifest next update:     Sat 10 Oct 2026 06:00:18 +0000
Files and hashes:         1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
                          2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: 3vGZg3LEEzCFEEPJs6jdRhxujBXW3VEJxx8JMfAAq3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:3f:85:69:f5:9e:99:22:32:20:5b:f4:89:2f:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
        Validity
            Not Before: Oct  9 06:00:18 2026 GMT
            Not After : Oct 10 06:00:18 2026 GMT
        Subject: CN=9679413991020a523158a7882c8dd4f905946d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:57:64:18:d2:b2:36:a3:fc:95:4e:62:c8:
                    bc:b5:c5:4f:29:47:ec:3b:34:2e:36:ba:6c:24:ea:
                    ec:a9:1f:ae:65:f1:7e:56:ff:64:3f:57:37:54:f5:
                    e1:78:0e:23:76:af:d2:7c:26:41:0c:01:9c:5c:fb:
                    fe:a3:30:cf:06:27:64:09:f9:bd:3b:6a:7b:cc:6f:
                    9d:f3:85:5a:fa:ae:cf:c7:2e:ca:f0:a3:2c:7d:04:
                    bd:ab:6d:63:c4:34:e8:e7:60:42:a8:98:2a:43:8a:
                    1b:0d:76:b1:04:d6:ec:f1:ee:a4:90:43:63:84:e1:
                    a3:96:c5:49:21:85:e1:59:1e:dd:27:65:39:bd:86:
                    ab:4e:71:9f:f1:b8:99:e0:90:8c:36:20:52:34:88:
                    bd:94:f7:c1:50:85:5d:c0:52:47:56:0f:89:db:8d:
                    30:02:e1:28:96:5e:84:cd:2f:3a:15:91:47:88:f6:
                    d6:41:16:19:6e:c8:fc:2a:63:e0:67:9f:7c:cb:8a:
                    57:7d:ac:57:d8:46:32:b9:5f:47:10:ac:52:e0:48:
                    12:a6:5c:ec:59:e1:bd:4d:17:33:82:9a:81:26:d4:
                    f7:a8:ab:8f:69:bc:8d:b2:7e:df:f4:84:82:ad:26:
                    a9:ef:f9:f9:af:0e:cc:ff:28:14:a1:52:ad:f4:fe:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:41:39:91:02:0A:52:31:58:A7:88:2C:8D:D4:F9:05:94:6D:9A
            X509v3 Authority Key Identifier:
                keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:69:e1:d2:27:cb:f4:b4:83:32:29:af:92:61:28:f2:57:8f:
         94:be:39:1f:b7:fd:a6:7a:99:94:13:23:66:f3:91:39:52:48:
         7e:1e:82:da:19:0c:c0:cc:9d:5a:f9:6d:29:37:04:36:50:60:
         63:2e:84:ec:62:1f:9d:b1:07:37:fa:52:6d:42:a5:69:28:ae:
         ca:5d:ff:44:1d:50:01:57:db:12:2d:11:0e:24:a5:46:fc:be:
         49:11:f7:c1:f0:5e:13:62:8a:9d:f0:e4:62:22:72:15:8a:f9:
         b3:05:66:ec:4b:7b:2f:a1:86:55:13:13:b3:73:ce:7d:2f:e9:
         44:73:a1:31:ef:d5:0e:b4:cf:59:11:d8:bb:bc:a1:f2:b4:c6:
         63:54:09:0c:52:3f:e6:12:1c:5c:e3:b1:ec:ff:59:df:9a:24:
         15:f7:3e:49:7d:f8:81:5a:80:f2:5d:b7:15:94:cb:05:f5:e6:
         0b:db:0f:60:65:05:83:09:17:33:38:e7:9b:9a:34:db:f3:be:
         07:a7:f1:9d:34:ae:87:ea:99:58:02:be:8e:d0:e2:19:fc:f1:
         4e:5b:61:56:0a:96:57:9f:5c:50:bc:f2:2d:67:5a:10:43:20:
         6f:92:bf:68:ad:c8:02:ac:31:03:5c:27:c8:19:0c:27:1b:ff:
         29:6e:9d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfP4Vp9Z6ZIjIgW/SJLy1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjYxMDA5MDYwMDE4WhcNMjYxMDEwMDYwMDE4WjAzMTEwLwYDVQQD
Eyg5Njc5NDEzOTkxMDIwYTUyMzE1OGE3ODgyYzhkZDRmOTA1OTQ2ZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsypXZBjSsjaj/JVOYsi8tcVPKUfs
OzQuNrpsJOrsqR+uZfF+Vv9kP1c3VPXheA4jdq/SfCZBDAGcXPv+ozDPBidkCfm9
O2p7zG+d84Va+q7Pxy7K8KMsfQS9q21jxDTo52BCqJgqQ4obDXaxBNbs8e6kkENj
hOGjlsVJIYXhWR7dJ2U5vYarTnGf8biZ4JCMNiBSNIi9lPfBUIVdwFJHVg+J240w
AuEoll6EzS86FZFHiPbWQRYZbsj8KmPgZ598y4pXfaxX2EYyuV9HEKxS4EgSplzs
WeG9TRczgpqBJtT3qKuPabyNsn7f9ISCrSap7/n5rw7M/ygUoVKt9P7VaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ5QTmRAgpSMViniCyN1PkFlG2aMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWnh0ifL
9LSDMimvkmEo8lePlL45H7f9pnqZlBMjZvOROVJIfh6C2hkMwMydWvltKTcENlBg
Yy6E7GIfnbEHN/pSbUKlaSiuyl3/RB1QAVfbEi0RDiSlRvy+SRH3wfBeE2KKnfDk
YiJyFYr5swVm7Et7L6GGVRMTs3POfS/pRHOhMe/VDrTPWRHYu7yh8rTGY1QJDFI/
5hIcXOOx7P9Z35okFfc+SX34gVqA8l23FZTLBfXmC9sPYGUFgwkXMzjnm5o02/O+
B6fxnTSuh+qZWAK+jtDiGfzxTlthVgqWV59cULzyLWdaEEMgb5K/aK3IAqwxA1wn
yBkMJxv/KW6dGA==
-----END CERTIFICATE-----