Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          6dLwUep7rOVH0eWJppE6RijGimGNJFYzYlVMjVl0UGk=
Subject key identifier:   03:91:E1:22:5D:C2:0A:74:6E:09:D5:4D:71:BA:B6:F1:86:67:E5:44
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       019BDF92ED3DF46021C82FCF056D4011042D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          17E2
Signing time:             Wed 21 Jan 2026 08:01:46 +0000
Manifest this update:     Wed 21 Jan 2026 08:01:46 +0000
Manifest next update:     Thu 22 Jan 2026 08:01:46 +0000
Files and hashes:         1: 1-95ydDTsTiK6J12oExwQqAceXhA.roa (hash: WuOwxJ8SRr9ujpl7cP/Jfh9pKVcexkKqJDvhTMB+dag=)
                          2: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: U+22GBCMUM54F7/DE/VOV7PwESCvgbGc3xLUgcKYZfk=)
                          3: bHkSFgFlWJAc1rsdZHUxChWDAi0.roa (hash: 2jHkMN4ivMz7AdCSyLIw1yyw40GfMM4OcS+Uf+mUQtc=)
                          4: n8LqCvorC98jqc3-1tqgY91YTtU.roa (hash: mKJ9jeuBdJ+ahfwOoLk9MdiLITGIeNZD3t+9U5uOPq0=)
                          5: olMuY2vLp-rTHiiG19684Hs0Obo.roa (hash: AhrmX1s8Thh/vu90E8QqE/FwFFRmye+xTuyBpcZ+7RU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:92:ed:3d:f4:60:21:c8:2f:cf:05:6d:40:11:04:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: Jan 21 08:01:46 2026 GMT
            Not After : Jan 22 08:01:46 2026 GMT
        Subject: CN=0391e1225dc20a746e09d54d71bab6f18667e544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:75:cf:70:40:dd:26:69:ab:c3:61:ad:70:
                    ed:1b:d3:04:69:1f:56:b6:7e:a3:98:85:99:43:34:
                    0e:fd:90:4b:ee:11:dd:da:11:a3:bb:1a:26:42:59:
                    9b:c9:c6:e3:24:a3:9d:97:c2:5f:1d:27:b2:0b:6f:
                    4f:e8:68:ae:2c:db:48:e4:88:94:ec:4c:51:11:b1:
                    a5:bb:cc:80:11:db:bc:00:52:34:fc:a9:6b:f9:54:
                    85:ef:09:7b:d3:ba:0f:a7:a8:13:e5:f3:a6:bb:31:
                    d9:74:19:9b:af:41:ad:76:a2:36:79:ff:79:10:d5:
                    ef:3e:06:d4:31:47:87:69:cb:17:ef:3a:8e:7f:4c:
                    f0:62:8e:43:d5:69:62:07:fc:63:8b:2d:d3:64:53:
                    6f:dd:05:83:72:4d:0b:15:79:ed:e3:20:60:f8:4f:
                    5e:7a:4f:c0:e9:eb:31:41:cc:e8:8a:c3:8f:01:16:
                    21:d6:4a:55:b1:38:4c:1d:06:8d:31:a5:fb:6f:dc:
                    f1:6f:7e:7a:d5:ae:6e:a5:27:9e:48:ae:fc:ef:ef:
                    27:1c:06:2b:ec:60:77:f7:c7:60:e7:de:6e:a5:b2:
                    e4:a7:b8:17:81:ed:a0:e1:fb:38:3f:91:e1:77:cb:
                    5b:c3:36:54:dd:0d:d8:6c:d9:7d:a4:cd:35:f1:a7:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:91:E1:22:5D:C2:0A:74:6E:09:D5:4D:71:BA:B6:F1:86:67:E5:44
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:73:57:7e:7c:40:bf:f8:0e:59:8c:7b:a0:00:60:da:bf:
         7c:ce:4c:ec:ff:12:42:f9:94:3b:af:a8:03:29:91:39:b7:58:
         89:46:18:e0:b7:5c:1d:82:18:4b:ee:06:04:a7:81:74:01:8b:
         66:01:0c:7d:8f:22:35:01:63:70:a1:06:19:34:58:d8:c0:73:
         75:86:b8:c2:01:e8:36:2c:fe:2d:c7:69:10:77:1d:cd:12:23:
         01:89:ac:e2:8f:fa:e1:ff:73:2f:6e:91:27:3c:35:5d:14:34:
         bc:50:23:f1:d8:df:c3:77:54:5d:bc:90:99:cc:fd:4c:23:18:
         5f:d2:a3:24:c8:50:9a:2c:d1:f3:da:7c:90:cd:67:bb:e4:eb:
         8e:d1:76:7a:a4:3f:0f:a5:f4:b0:29:5e:b4:ad:a8:3f:1f:c8:
         4d:56:2b:e0:31:d8:0e:b6:96:e2:8e:56:d6:e5:f8:cb:7d:23:
         2f:26:25:84:5d:ef:08:72:77:25:8d:dc:52:0c:b2:b7:0d:f5:
         68:c7:5a:84:14:4f:19:fa:ca:63:59:3d:6f:19:5a:75:55:22:
         a2:9b:7d:70:35:d6:f1:b3:fe:3e:84:e3:1f:29:c9:db:c4:18:
         8a:24:19:0e:38:53:21:cb:de:ee:da:6c:6a:27:bb:60:dc:e6:
         6d:51:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----