Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
File:                     kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json)
Hash identifier:          /oKdUHHP8q3YQ8qMJuwpFF4ADIu04XymNDnYXrosO7M=
Subject key identifier:   6D:3E:DF:49:3D:01:C0:F9:AF:86:BE:4A:8C:2B:07:F4:B6:70:2C:B2
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Certificate issuer:       /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial:       019B6DD8288B82241194A5F4532EF20D16F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
Manifest number:          17A5
Signing time:             Tue 30 Dec 2025 06:00:41 +0000
Manifest this update:     Tue 30 Dec 2025 06:00:41 +0000
Manifest next update:     Wed 31 Dec 2025 06:00:41 +0000
Files and hashes:         1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=)
                          2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=)
                          3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=)
                          4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=)
                          5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=)
                          6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=)
                          7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=)
                          8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=)
                          9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: ZIL3WJImTJgkhxx7WkkopDbRSqb48xbl6rtl7mygnjw=)
                          10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=)
                          11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:d8:28:8b:82:24:11:94:a5:f4:53:2e:f2:0d:16:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
        Validity
            Not Before: Dec 30 06:00:41 2025 GMT
            Not After : Dec 31 06:00:41 2025 GMT
        Subject: CN=6d3edf493d01c0f9af86be4a8c2b07f4b6702cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:b1:bc:a9:77:ab:4e:ee:87:8e:07:7f:14:
                    75:ed:3d:50:8b:e9:1f:a5:43:e8:21:c1:24:55:eb:
                    7d:af:fa:3f:88:ba:75:cd:00:10:d7:05:ec:87:f1:
                    25:05:9c:1f:80:fd:e7:49:75:41:ae:01:6f:6f:39:
                    d6:93:ba:e6:2f:24:aa:29:0b:28:60:38:02:37:20:
                    ca:93:68:d5:77:3a:35:e1:73:1f:a2:2f:88:3e:6e:
                    da:04:24:53:15:84:7e:b2:15:e7:da:4c:05:46:16:
                    17:63:ff:f4:d0:3a:8b:21:77:88:d5:2d:2e:16:04:
                    ac:54:fa:77:96:33:e6:3d:d1:50:b9:9c:c3:89:e3:
                    a6:a8:8e:fe:f6:c1:bf:77:1f:49:9e:c4:cd:d4:b5:
                    17:9a:f5:3e:84:10:ed:f1:a9:cc:ce:bc:1c:d4:85:
                    58:15:e7:0f:b1:94:43:62:2d:2b:38:94:07:13:f2:
                    f2:96:9a:a4:04:5e:f3:5a:dc:9b:18:30:40:77:08:
                    39:19:a3:2f:ca:c5:13:7a:fa:bc:57:3f:cb:9b:c6:
                    11:3e:dc:88:9e:41:51:d6:06:83:d7:0c:3f:d2:e4:
                    e4:a4:8e:6f:05:a4:64:e0:a4:f7:06:67:a1:b7:8d:
                    0e:28:2d:63:17:3e:29:c9:98:40:6e:c0:c3:bc:21:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:DF:49:3D:01:C0:F9:AF:86:BE:4A:8C:2B:07:F4:B6:70:2C:B2
            X509v3 Authority Key Identifier:
                keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:2a:80:b0:e6:76:3f:88:55:0b:15:38:16:d5:be:18:13:
         79:39:48:cd:4c:88:c2:6b:12:3c:9a:d1:35:df:d1:33:e6:a5:
         75:7f:6f:1b:c5:17:43:e9:e6:6d:29:31:9c:f6:da:b7:b2:84:
         03:56:50:2c:ac:89:e0:6a:6f:04:0d:13:66:f6:6d:55:74:af:
         d7:93:5e:75:ff:42:8d:9f:31:a1:23:1a:60:bf:fc:7f:1d:13:
         21:63:e2:b2:4f:fc:c2:7e:7e:3c:c9:7e:0c:c9:dc:a5:35:4c:
         08:c4:8b:8c:9f:f6:10:22:89:3d:42:de:9d:dd:0a:b2:47:cc:
         e9:11:c8:6c:4a:2d:96:a4:d4:27:f3:da:f7:bc:24:9d:44:0f:
         6e:09:89:e3:46:a6:4d:7d:e0:e9:0c:ff:f3:da:00:ab:85:22:
         33:f2:6c:97:d9:e9:a0:3e:c2:15:cc:48:d0:82:d9:31:d7:8d:
         fa:3b:0f:7f:65:91:af:d1:b9:64:6a:ff:ce:f9:2e:ef:ce:e3:
         09:06:a1:13:94:cd:9b:83:23:ca:3e:79:8c:76:6a:b8:f4:fb:
         85:ec:b3:71:79:86:6f:ea:f2:02:67:c0:07:a6:22:aa:55:da:
         ff:fe:c8:be:88:9f:97:eb:e3:2b:83:b8:c7:81:ae:dc:51:1f:
         a9:2f:c4:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtt2CiLgiQRlKX0Uy7yDRb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjUxMjMwMDYwMDQxWhcNMjUxMjMxMDYwMDQxWjAzMTEwLwYDVQQD
Eyg2ZDNlZGY0OTNkMDFjMGY5YWY4NmJlNGE4YzJiMDdmNGI2NzAyY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFOxvKl3q07uh44HfxR17T1Qi+kf
pUPoIcEkVet9r/o/iLp1zQAQ1wXsh/ElBZwfgP3nSXVBrgFvbznWk7rmLySqKQso
YDgCNyDKk2jVdzo14XMfoi+IPm7aBCRTFYR+shXn2kwFRhYXY//00DqLIXeI1S0u
FgSsVPp3ljPmPdFQuZzDieOmqI7+9sG/dx9JnsTN1LUXmvU+hBDt8anMzrwc1IVY
FecPsZRDYi0rOJQHE/LylpqkBF7zWtybGDBAdwg5GaMvysUTevq8Vz/Lm8YRPtyI
nkFR1gaD1ww/0uTkpI5vBaRk4KT3Bmeht40OKC1jFz4pyZhAbsDDvCF/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0+30k9AcD5r4a+SowrB/S2cCyyMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfsqgLDm
dj+IVQsVOBbVvhgTeTlIzUyIwmsSPJrRNd/RM+aldX9vG8UXQ+nmbSkxnPbat7KE
A1ZQLKyJ4GpvBA0TZvZtVXSv15Nedf9CjZ8xoSMaYL/8fx0TIWPisk/8wn5+PMl+
DMncpTVMCMSLjJ/2ECKJPULend0KskfM6RHIbEotlqTUJ/Pa97wknUQPbgmJ40am
TX3g6Qz/89oAq4UiM/Jsl9npoD7CFcxI0ILZMdeN+jsPf2WRr9G5ZGr/zvku787j
CQahE5TNm4Mjyj55jHZquPT7heyzcXmGb+ryAmfAB6YiqlXa//7Ivoifl+vjK4O4
x4Gu3FEfqS/E1g==
-----END CERTIFICATE-----