Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File:                     KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier:          xNdaKy7SeYZqLiNNjX/v15ib6BDl4yNI5PAmazuQhWk=
Subject key identifier:   61:2F:55:B9:83:46:0F:F1:D0:16:C8:34:CD:1F:24:0D:31:51:A1:8E
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer:       /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial:       019BE4EFA56348BDC50F4E74224BDD44897E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number:          0BED
Signing time:             Thu 22 Jan 2026 09:01:09 +0000
Manifest this update:     Thu 22 Jan 2026 09:01:09 +0000
Manifest next update:     Fri 23 Jan 2026 09:01:09 +0000
Files and hashes:         1: 1-WjY3ZbltqNn70hQqbSKhe1NRv4.roa (hash: GkpZZWuDnJ+3LATbTn9aArAM20dJMxzITFfRrF/Zq0A=)
                          2: 32V4Zq0MwIl-DrSlEKpj3hqVg30.roa (hash: 2i8tDXY2lhPHdCYRHAAzRDSTcPKnMihLy1Kog+Lyudw=)
                          3: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: wj5FxS4eq8xIHVwQovJBkKodmbMgmsRiJnZuCq1g7t8=)
                          4: mw0__WWtiangkmj3iSbQ7xPqIrU.roa (hash: 7RC8QkTUg2AijQafAn/F6pifQS5LL4cCUw1mroRIuM0=)
                          5: t8cDBvSSlhqOc0bhGZF5cAeQ6xY.roa (hash: 8ZnTwTn9VpwZV+0x3MX+NZpzb/rqu3OUB+CyqNMTeSA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e4:ef:a5:63:48:bd:c5:0f:4e:74:22:4b:dd:44:89:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
        Validity
            Not Before: Jan 22 09:01:09 2026 GMT
            Not After : Jan 23 09:01:09 2026 GMT
        Subject: CN=612f55b983460ff1d016c834cd1f240d3151a18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:96:a5:34:41:4f:c9:ae:4f:fd:30:85:6d:
                    ac:1f:54:cb:f6:2e:b6:ab:68:2e:ee:a2:35:62:d4:
                    84:43:05:06:54:37:9f:33:cd:86:50:ef:64:e0:be:
                    df:e4:15:70:8a:39:2c:d8:22:98:92:0f:d9:e0:f9:
                    60:0a:94:ba:77:40:20:03:a2:df:f4:4a:7c:6b:a1:
                    3c:33:b0:2c:95:6b:40:33:e8:f0:17:c5:8e:06:ff:
                    9c:cd:3e:5b:17:e7:c0:db:20:40:e6:64:f5:db:2e:
                    af:0c:ad:1d:8b:66:8a:64:32:2f:20:3e:11:89:1a:
                    f9:af:ef:1f:c2:10:b8:40:0c:fc:24:4f:2e:48:27:
                    3d:2d:44:ee:0e:d0:45:31:9a:f7:08:27:d9:a5:24:
                    b3:e6:45:c7:f5:4a:af:86:73:10:c2:7f:8a:05:f2:
                    e6:02:6d:60:59:f2:3e:64:8f:d4:74:b6:e6:2e:e3:
                    13:41:be:14:de:24:2f:79:cb:72:84:f1:61:36:48:
                    56:f0:fa:2e:77:13:0c:6c:fb:1f:31:27:92:f9:7d:
                    bb:ca:c5:a7:48:7b:c7:5b:ec:3b:ba:9b:4a:d5:65:
                    4a:e2:30:bc:66:99:95:d7:30:29:95:20:d5:9a:fe:
                    84:75:bb:df:5c:4e:f4:d4:a0:64:72:74:12:94:43:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2F:55:B9:83:46:0F:F1:D0:16:C8:34:CD:1F:24:0D:31:51:A1:8E
            X509v3 Authority Key Identifier:
                keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:40:ad:20:6a:23:72:fb:72:3b:74:32:d2:b2:85:38:a9:c2:
         4f:89:e8:21:56:11:4e:e3:c9:1a:6d:7b:9c:4c:a5:d1:fd:e7:
         dd:4b:d4:dd:36:d7:d9:3d:70:c0:5f:3d:5a:db:31:c5:ca:a9:
         82:30:64:9b:15:4a:61:65:60:bd:37:91:32:fb:ca:c2:19:22:
         ce:65:0b:d0:5a:6a:cf:3d:8e:ab:69:9c:68:4e:6f:03:1d:ec:
         8c:45:82:78:3b:ef:47:c6:b2:dc:37:e4:ef:0c:44:6d:cd:a8:
         3c:d0:1c:8d:de:7a:a6:42:ed:35:1a:06:92:c0:c0:09:44:67:
         cd:2b:96:5e:94:80:c6:6e:69:78:42:71:dc:e6:97:4c:b4:4d:
         b9:d7:73:30:af:67:59:4e:e1:5c:71:11:3c:95:12:82:0c:92:
         12:6a:ae:65:3f:ef:25:50:58:7a:77:07:8d:23:99:4d:85:55:
         1b:02:7c:42:ea:dd:c7:fe:f7:47:8f:e4:a7:35:ba:32:55:8d:
         c6:d6:2c:fc:47:64:e3:81:95:79:cc:d8:5b:28:47:0c:ee:13:
         40:a0:6c:bf:0f:92:6a:a1:55:e7:94:63:63:3f:8d:00:a9:3d:
         5b:c0:51:72:dc:c4:b7:9a:5f:32:a1:0c:3f:ab:95:b7:be:df:
         58:2b:52:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvk76VjSL3FD050IkvdRIl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy
MDEzNTAwHhcNMjYwMTIyMDkwMTA5WhcNMjYwMTIzMDkwMTA5WjAzMTEwLwYDVQQD
Eyg2MTJmNTViOTgzNDYwZmYxZDAxNmM4MzRjZDFmMjQwZDMxNTFhMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre6WpTRBT8muT/0whW2sH1TL9i62
q2gu7qI1YtSEQwUGVDefM82GUO9k4L7f5BVwijks2CKYkg/Z4PlgCpS6d0AgA6Lf
9Ep8a6E8M7AslWtAM+jwF8WOBv+czT5bF+fA2yBA5mT12y6vDK0di2aKZDIvID4R
iRr5r+8fwhC4QAz8JE8uSCc9LUTuDtBFMZr3CCfZpSSz5kXH9UqvhnMQwn+KBfLm
Am1gWfI+ZI/UdLbmLuMTQb4U3iQvectyhPFhNkhW8PoudxMMbPsfMSeS+X27ysWn
SHvHW+w7uptK1WVK4jC8ZpmV1zAplSDVmv6EdbvfXE701KBkcnQSlEPfEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEvVbmDRg/x0BbINM0fJA0xUaGOMB8GA1UdIwQY
MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct
ODFmNTY2MTg1YjA2LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2
LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUCtIGoj
cvtyO3Qy0rKFOKnCT4noIVYRTuPJGm17nEyl0f3n3UvU3TbX2T1wwF89Wtsxxcqp
gjBkmxVKYWVgvTeRMvvKwhkizmUL0Fpqzz2Oq2mcaE5vAx3sjEWCeDvvR8ay3Dfk
7wxEbc2oPNAcjd56pkLtNRoGksDACURnzSuWXpSAxm5peEJx3OaXTLRNuddzMK9n
WU7hXHERPJUSggySEmquZT/vJVBYencHjSOZTYVVGwJ8Qurdx/73R4/kpzW6MlWN
xtYs/Edk44GVeczYWyhHDO4TQKBsvw+SaqFV55RjYz+NAKk9W8BRctzEt5pfMqEM
P6uVt77fWCtSyg==
-----END CERTIFICATE-----