Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
File:                     5qowZQKj7IBJPXU0jChYsa9-z4A.mft (raw, json)
Hash identifier:          gvtkn38Fg6EONHwutvhiBO1ArLerToXPFFeVfsFd/Yg=
Subject key identifier:   18:0D:BE:1D:38:DC:DF:12:56:92:26:C2:1D:5A:CD:8B:04:F0:4E:93
Authority key identifier: E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80
Certificate issuer:       /CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
Certificate serial:       01A05FA218BB0A0D6E2A1D34632CD7C8A872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft
Manifest number:          08B6
Signing time:             Wed 02 Sep 2026 01:00:53 +0000
Manifest this update:     Wed 02 Sep 2026 01:00:53 +0000
Manifest next update:     Thu 03 Sep 2026 01:00:53 +0000
Files and hashes:         1: 5qowZQKj7IBJPXU0jChYsa9-z4A.crl (hash: g4HyDiGUN6vuSxNweK/rwgp6tCbMXsaDQ5ZqApbIoSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5f:a2:18:bb:0a:0d:6e:2a:1d:34:63:2c:d7:c8:a8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aa306502a3ec80493d75348c2858b1af7ecf80
        Validity
            Not Before: Sep  2 01:00:53 2026 GMT
            Not After : Sep  3 01:00:53 2026 GMT
        Subject: CN=180dbe1d38dcdf12569226c21d5acd8b04f04e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:ff:9a:6d:a3:84:06:77:d2:17:19:6f:33:
                    bf:5b:25:02:ff:a2:fb:96:7b:d9:3e:e9:ac:5b:1a:
                    19:a7:dd:45:0d:d7:e6:45:db:ac:c6:b5:8b:27:ed:
                    43:fe:34:fb:67:2a:55:19:ec:a9:0d:34:92:c3:9e:
                    91:84:82:39:71:c3:a9:38:29:d0:b7:12:63:fd:24:
                    49:2f:4c:eb:8d:9e:20:21:89:e6:ee:c3:b1:55:36:
                    96:b3:a1:60:9f:5b:9b:df:bb:ae:a1:23:97:19:0d:
                    0d:c0:b9:00:4c:d8:98:09:32:8a:ef:2f:db:d8:bd:
                    59:9a:ec:14:b8:8d:22:0c:9f:53:d1:a4:43:5f:a5:
                    da:5c:a1:d8:63:49:d6:65:7e:5e:43:02:4a:96:e5:
                    8e:64:49:00:44:cd:fa:e3:4d:9c:5b:3d:2f:88:47:
                    5e:e6:51:de:45:08:7b:5a:95:64:6e:00:54:62:e5:
                    d7:73:2a:a5:2d:56:5a:a0:02:01:25:ec:c4:74:ef:
                    00:93:d7:6f:93:5c:78:fa:22:8b:af:1d:6d:f9:8b:
                    b1:35:a9:71:03:7d:35:2c:02:7f:03:a4:ac:e0:29:
                    e0:9e:cf:78:52:c8:6e:68:f8:f1:db:34:39:0e:f4:
                    a4:fd:69:4a:7e:0b:9f:99:77:ac:12:04:b6:54:d5:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:BE:1D:38:DC:DF:12:56:92:26:C2:1D:5A:CD:8B:04:F0:4E:93
            X509v3 Authority Key Identifier:
                keyid:E6:AA:30:65:02:A3:EC:80:49:3D:75:34:8C:28:58:B1:AF:7E:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qowZQKj7IBJPXU0jChYsa9-z4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1dc732-888e-42eb-8d8c-ff00f2ac8c78/1/5qowZQKj7IBJPXU0jChYsa9-z4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:15:9b:e1:82:8a:89:95:51:63:b5:78:1d:5c:c4:b0:9a:17:
         fc:93:b7:da:38:3d:71:34:95:12:32:82:f5:fe:56:6b:7e:5a:
         23:c4:e4:01:3a:ee:11:ed:97:8f:3d:99:a5:44:4c:63:30:a4:
         cc:0c:b3:d7:5d:6b:f3:2e:ee:ec:36:47:42:5a:bf:d4:32:a0:
         80:c3:74:e6:86:c2:bf:5a:72:5b:1c:a5:fa:57:2f:1c:67:81:
         5e:ee:54:71:b0:73:da:b6:cf:69:de:a8:89:6c:c7:0e:d2:2e:
         c1:ec:ea:5c:3b:9b:b0:4a:0d:da:de:33:45:5d:38:fe:d4:cf:
         6e:81:e9:15:3f:c7:75:3a:25:95:d5:c2:8b:1f:a1:e4:c8:6d:
         f6:a1:08:ec:b7:67:76:96:67:bf:8a:6f:9a:cf:84:5c:c4:78:
         93:e5:65:fd:a3:29:6c:51:cc:fb:09:63:a0:40:5c:aa:36:a1:
         90:6f:4e:c1:73:61:d2:d8:de:21:4f:ee:3f:cc:f0:3f:7a:e4:
         a1:56:50:7b:6f:b5:f4:f0:fc:29:93:a9:c5:2c:e7:5a:08:bc:
         45:e8:b0:b8:a5:e7:6c:5e:1c:54:b5:75:82:0e:61:31:07:ed:
         9b:73:fa:33:26:66:61:e3:95:69:bf:ee:6d:65:aa:b5:7e:6a:
         98:f1:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----