Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File:                     1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier:          cXvc9Bo6ifCgThiZjwWHPOH3QsDqd/kWSplQjSVNaw8=
Subject key identifier:   90:B9:C5:16:AE:C8:CC:E3:F0:74:40:5B:3E:7C:12:48:08:4C:62:B4
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer:       /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial:       019F236A1742DE62C4A8C66AC567EFAB7448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number:          1992
Signing time:             Thu 02 Jul 2026 15:19:42 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:42 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:42 +0000
Files and hashes:         1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: E7RPCD6vj82a+flRdKLv6ct2ztfrvXw6heWYVJzSF0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:17:42:de:62:c4:a8:c6:6a:c5:67:ef:ab:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
        Validity
            Not Before: Jul  2 15:19:42 2026 GMT
            Not After : Jul  3 15:19:42 2026 GMT
        Subject: CN=90b9c516aec8cce3f074405b3e7c1248084c62b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:be:1f:a4:90:a0:f9:2b:3b:e0:78:6a:fa:
                    4a:79:d2:56:f8:27:6c:6f:d5:71:9e:b6:12:73:a0:
                    92:d0:9e:10:e5:f2:06:ad:5f:e0:3c:59:5f:a7:0e:
                    83:cb:c0:d5:65:e4:fd:42:cb:2c:82:fc:52:3e:ed:
                    b3:ae:f1:d8:b4:86:9e:1a:d0:eb:b7:db:ed:48:ef:
                    04:dd:19:63:d8:fd:7f:96:8f:c8:47:08:ca:92:6f:
                    4b:2c:f0:f4:60:57:a8:30:d1:70:b0:c1:17:e6:cc:
                    68:2b:d5:15:e2:e4:d1:15:fa:f9:48:25:9a:cd:98:
                    da:95:d0:7e:58:90:cb:93:98:6d:51:89:9f:55:a2:
                    80:e2:61:ca:c1:9c:2a:97:71:7d:76:09:1c:1c:8b:
                    7b:99:43:b2:78:7f:d7:3a:06:5f:6c:b6:bf:48:00:
                    cf:67:bc:c6:a1:b8:55:35:cc:0a:3b:41:11:e4:3a:
                    b7:41:ee:43:95:12:8a:3a:79:8e:c2:81:73:af:61:
                    52:0f:85:79:6e:19:4f:ca:0d:1b:ba:77:22:71:cc:
                    18:32:0e:a5:d3:d2:6c:c3:ce:23:4a:b8:b0:b1:1e:
                    76:db:a7:a5:5b:89:9b:4f:d0:c4:ee:74:05:4a:8b:
                    64:3d:f2:b0:aa:90:3d:2f:e6:46:83:a3:a1:71:3c:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B9:C5:16:AE:C8:CC:E3:F0:74:40:5B:3E:7C:12:48:08:4C:62:B4
            X509v3 Authority Key Identifier:
                keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:f4:5e:e5:af:a7:3b:1d:48:a9:72:50:78:d9:03:3d:ab:
         68:ca:d6:01:b6:fb:31:34:8a:68:e7:27:d3:3d:63:1d:63:05:
         da:82:25:2f:39:ef:e0:dc:16:70:cd:a7:75:36:4f:42:31:96:
         a6:dc:a2:12:c8:12:3e:2f:0b:48:31:c1:64:3f:e0:08:da:b9:
         9d:48:e7:c9:2e:95:94:39:12:15:a2:1e:54:79:d6:19:ef:b5:
         9b:4c:13:69:76:c7:48:41:b4:90:8f:cf:7d:8f:ef:38:e3:03:
         bc:33:e2:b3:d5:81:61:f4:06:4d:cd:b7:8e:90:79:61:af:31:
         50:de:16:0d:55:8f:ae:ad:03:b6:97:dc:41:f0:13:02:96:a3:
         c6:4c:61:89:be:d7:52:dc:90:6e:c7:91:3f:bd:48:48:81:66:
         1c:db:22:b8:d5:47:fb:a7:80:74:ff:1f:75:9f:7f:9f:a4:f6:
         58:ca:6a:c8:e6:d2:06:ad:11:c1:3a:3c:48:01:d5:bf:a1:89:
         ad:2a:1f:d0:8e:99:dc:2b:6d:e1:47:68:c5:0b:34:17:b2:82:
         3d:11:aa:17:e6:46:20:d4:48:79:a2:86:04:f0:38:40:42:67:
         ba:99:1d:f5:6b:15:7d:b9:42:6b:dc:0c:9f:b3:e4:ee:4a:a6:
         41:c5:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----