Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File:                     DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier:          zA8Ru+3AmtB4SqZ5SS7T98qWKZ8w7QT6M/dCUCKMD8Y=
Subject key identifier:   5D:28:2A:BD:C9:78:82:F3:8C:A1:E5:3B:D7:93:32:84:58:A8:56:EF
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer:       /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial:       01A064C90A5BF5B9B852DD93B584D18F733C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number:          0717
Signing time:             Thu 03 Sep 2026 01:01:31 +0000
Manifest this update:     Thu 03 Sep 2026 01:01:31 +0000
Manifest next update:     Fri 04 Sep 2026 01:01:31 +0000
Files and hashes:         1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: kCxNJuplpK6YHYf6IcHcAKBr8ab9vWHvLYKfM69mfpY=)
                          2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:64:c9:0a:5b:f5:b9:b8:52:dd:93:b5:84:d1:8f:73:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
        Validity
            Not Before: Sep  3 01:01:31 2026 GMT
            Not After : Sep  4 01:01:31 2026 GMT
        Subject: CN=5d282abdc97882f38ca1e53bd793328458a856ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:79:d0:36:2a:3c:93:7c:ec:86:8a:99:36:
                    5e:bd:03:aa:70:53:22:10:20:c4:63:a7:2f:1b:fa:
                    7c:f4:1f:0d:e1:82:62:96:fe:fd:70:29:5b:36:49:
                    35:94:89:88:63:23:cb:68:f6:cd:86:51:39:0a:db:
                    42:14:7d:32:9d:78:2d:51:61:5f:9d:5f:cc:62:4c:
                    2a:42:ba:f2:6b:7d:a5:60:93:15:05:55:a9:73:94:
                    c3:67:38:5c:73:4d:d4:7a:48:86:6c:d7:de:a2:03:
                    c0:1c:32:f3:4b:b9:3d:93:06:da:f2:5a:14:54:b6:
                    88:db:2f:eb:b4:aa:a0:3f:eb:93:1b:3a:6d:c3:c9:
                    ff:30:84:70:e1:cf:ac:d0:ee:88:ac:75:53:9f:c9:
                    41:bd:32:ce:ff:6d:5f:82:e9:b4:e2:1d:3e:84:71:
                    0f:40:1a:ef:89:b4:8e:df:38:f7:d0:03:3d:e5:df:
                    8f:2e:68:d4:48:24:d9:1b:93:5e:7d:7a:fe:e1:4c:
                    dc:07:a4:bb:54:3d:44:7e:6a:1c:23:47:06:69:ef:
                    26:5d:c3:c3:ee:2d:eb:21:4d:95:b7:a6:2f:2e:25:
                    19:ba:a8:a7:de:53:55:00:99:93:ed:31:42:22:05:
                    d9:11:a9:bf:f4:1f:58:6d:f7:0e:e3:6c:1c:25:c6:
                    0f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:28:2A:BD:C9:78:82:F3:8C:A1:E5:3B:D7:93:32:84:58:A8:56:EF
            X509v3 Authority Key Identifier:
                keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:d0:d1:b8:3f:f6:2e:b3:6a:5a:84:eb:e9:c1:e1:20:ba:
         5a:26:cd:33:65:82:c5:0a:0a:8b:63:d6:5b:7f:a3:32:26:95:
         04:cb:d6:a0:4b:2d:7a:b9:0d:f2:7d:d2:0d:93:6b:ac:19:07:
         b3:11:38:d0:9c:5c:a2:60:18:f0:8a:98:1a:05:da:48:34:bb:
         b0:bd:0a:45:e3:aa:80:6f:c4:0d:48:a8:96:c7:46:7a:81:7a:
         0d:7f:38:e2:76:83:99:91:ad:68:d4:17:f6:5b:d6:06:5b:27:
         00:c4:0a:37:8f:66:8f:74:6e:0e:ab:f0:50:e7:8e:7f:e7:26:
         a4:6d:3d:14:6a:f6:30:3d:3e:fd:93:18:4b:08:2d:a7:7b:79:
         27:83:8a:de:5a:39:30:91:89:87:09:4c:f6:ee:42:5e:24:f6:
         4f:c9:43:3d:b7:4f:cc:d4:f9:53:33:09:84:9b:e0:80:d3:55:
         88:84:89:e9:5c:9c:2b:59:0c:ea:05:fc:ff:85:a6:9b:c3:56:
         e7:06:8c:8f:b1:78:c3:f7:8e:d5:88:0f:24:05:86:3e:b0:2e:
         0b:1e:b5:93:3d:80:31:e6:4f:5b:7b:a5:58:94:78:72:db:70:
         65:bf:67:53:ef:d2:dd:61:31:a0:83:86:c1:5b:9b:85:84:d6:
         9b:f5:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----