Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File:                     72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier:          oa5LPTUGI85G0QCdpEW2VQsTD6e+gVl4HmkZJxyU4Uw=
Subject key identifier:   89:C0:F7:10:9D:D7:36:9B:3B:0B:5B:1E:1A:74:EC:A9:27:EE:03:10
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer:       /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial:       019F2369A99CC73F2830ECFEA329790EF723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number:          14F9
Signing time:             Thu 02 Jul 2026 15:19:14 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:14 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:14 +0000
Files and hashes:         1: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: IXB1C6LXTXrGHUHYO7x329xQ1vU6v0kNZcWGHdrvKpw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:a9:9c:c7:3f:28:30:ec:fe:a3:29:79:0e:f7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
        Validity
            Not Before: Jul  2 15:19:14 2026 GMT
            Not After : Jul  3 15:19:14 2026 GMT
        Subject: CN=89c0f7109dd7369b3b0b5b1e1a74eca927ee0310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:61:f3:e0:1e:47:83:b4:1c:18:88:62:df:
                    70:45:dd:05:15:5d:89:a7:41:d0:5b:09:31:a0:6d:
                    94:9b:4b:12:a7:73:c9:c2:dc:89:bc:a9:53:d1:4d:
                    e4:39:e8:9d:39:c9:55:1c:1d:60:f7:9a:6b:73:b1:
                    1e:06:b4:02:db:f2:e9:8d:72:28:48:d2:8a:05:b3:
                    90:83:57:b1:ef:db:9a:ad:ea:36:2b:78:5c:4d:6e:
                    f1:22:c3:4e:cf:95:aa:44:d4:98:68:86:f9:e3:49:
                    a8:a9:ed:ad:22:97:be:65:48:b9:bc:84:b7:fb:48:
                    96:4d:97:14:47:b8:5f:f8:5c:ff:0d:24:32:fa:77:
                    84:91:69:94:f0:54:a3:45:d3:31:46:9b:52:df:07:
                    15:ff:5f:6b:5b:34:a5:88:47:54:6b:91:c2:c8:ef:
                    0b:1b:2f:79:82:6b:3e:15:b4:ca:f4:64:29:b1:06:
                    86:cd:ff:21:6e:58:29:09:91:37:e0:c3:80:f0:d3:
                    e1:25:94:b0:26:f5:79:64:6e:b0:7c:50:45:84:bd:
                    38:d9:a7:61:94:91:81:7a:32:44:52:c8:49:a6:5f:
                    23:9b:67:03:b3:11:1c:42:7a:29:fd:e1:6b:07:f0:
                    58:e7:cd:7e:c4:c6:48:69:c8:e3:f7:c4:fb:e3:d9:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C0:F7:10:9D:D7:36:9B:3B:0B:5B:1E:1A:74:EC:A9:27:EE:03:10
            X509v3 Authority Key Identifier:
                keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:0f:d7:7b:55:36:86:e4:12:1d:ea:e0:1a:de:2d:2b:14:
         c3:b9:c4:9f:6a:5e:92:7e:97:96:de:d2:c9:12:bf:e8:64:64:
         4a:a1:d0:ba:ae:1d:af:9c:bb:bb:e3:f2:2e:7b:68:00:2e:42:
         f3:fc:09:ac:09:cb:77:f7:2f:9d:5c:fa:a5:df:3a:0d:b6:56:
         a2:6c:d5:a5:bd:7b:7f:e4:e4:48:e9:98:1e:90:a1:4c:ae:6a:
         4a:7e:83:f8:58:1b:02:ca:ed:e6:44:e9:90:29:c2:5a:57:68:
         3d:86:49:94:df:b5:36:fd:b3:75:64:12:cf:51:66:2b:ed:28:
         2f:70:c6:e5:a6:8e:de:c5:f9:62:01:b0:97:b9:f3:4b:9e:bb:
         15:df:77:95:8e:93:31:a9:39:ec:82:47:b5:26:37:41:82:88:
         e4:8c:c4:f2:87:bc:d1:39:97:60:5c:80:8f:6f:bc:84:17:0b:
         26:07:ce:20:04:de:a0:9d:0c:1b:02:c7:6b:0b:eb:b7:7d:f8:
         cd:99:f9:49:ed:27:90:8a:c6:fb:4a:69:49:39:45:97:02:50:
         f7:73:4a:10:9b:45:f5:04:54:45:6c:ff:34:5c:6e:ac:72:60:
         df:4e:ef:e3:d3:97:9c:7c:85:97:6d:20:b1:b2:a7:38:83:a1:
         4d:99:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:00 2026 by rpki-client