Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File:                     A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier:          +0rUUyuSQlIy/G1RdsOZPm4wizpJZxIy6mZcCJkdXgg=
Subject key identifier:   08:A5:33:E3:2E:F4:F5:AE:B1:28:6E:61:55:ED:23:88:B4:E5:96:77
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer:       /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial:       019F236A5BFE3466A5C502C68A6131CC3003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number:          0E7C
Signing time:             Thu 02 Jul 2026 15:20:00 +0000
Manifest this update:     Thu 02 Jul 2026 15:20:00 +0000
Manifest next update:     Fri 03 Jul 2026 15:20:00 +0000
Files and hashes:         1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: 0s6RWSY8TqcYmu86+YOpxbF8hUJxpzpp1HE16KpirAE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:5b:fe:34:66:a5:c5:02:c6:8a:61:31:cc:30:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
        Validity
            Not Before: Jul  2 15:20:00 2026 GMT
            Not After : Jul  3 15:20:00 2026 GMT
        Subject: CN=08a533e32ef4f5aeb1286e6155ed2388b4e59677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:bf:51:f7:b3:3a:0b:e7:96:ed:f6:7a:f4:
                    23:20:33:a8:b6:d0:e4:93:d3:6f:43:21:95:4e:e7:
                    f1:f8:20:53:1b:7e:30:86:3f:e2:a1:81:2c:54:33:
                    08:ae:08:56:fa:aa:19:d3:dd:d8:06:a5:1a:ab:e0:
                    a2:6a:69:cf:42:fb:31:2e:e0:20:d4:4a:74:22:7b:
                    78:94:cb:29:85:26:60:7b:49:f4:c2:5a:9b:12:05:
                    48:38:66:c7:62:fe:04:5e:82:cd:44:18:f2:38:4c:
                    01:ea:88:e1:3f:e9:86:14:f6:ee:11:a5:28:81:94:
                    0f:7e:9d:48:88:21:fe:23:b8:d9:d6:ca:5b:2d:e7:
                    43:38:63:fc:8a:1a:a5:b4:dc:2a:ce:e4:9c:de:49:
                    c8:70:b6:ec:8b:d4:cf:c4:bc:a4:52:86:af:12:11:
                    d8:77:d1:5d:4d:f7:f7:5f:5b:a7:98:f6:9d:6b:a0:
                    38:d3:eb:ff:4b:21:af:74:5f:49:f2:12:11:be:61:
                    ef:28:5c:92:9a:01:24:76:d0:8c:9b:86:fa:96:7c:
                    f2:fb:8d:56:cc:c3:01:3c:f4:22:9a:d4:c4:f6:03:
                    0c:a2:ff:af:4e:12:d7:98:36:31:17:d3:1c:d7:91:
                    34:91:1f:94:3e:66:8d:e6:28:68:b4:d3:41:03:3b:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A5:33:E3:2E:F4:F5:AE:B1:28:6E:61:55:ED:23:88:B4:E5:96:77
            X509v3 Authority Key Identifier:
                keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:00:61:e7:d5:3d:ce:0e:2e:67:09:0f:85:de:55:56:25:a8:
         ca:c3:57:14:dd:87:d0:29:fa:aa:b1:9d:21:20:3b:82:ef:38:
         e4:a2:9e:95:7d:a4:e0:1e:61:50:60:3a:3f:66:17:c6:01:95:
         45:e1:75:68:70:45:6b:36:77:6a:0e:16:63:b8:89:6b:44:2a:
         9f:f8:67:19:cd:63:fb:94:c4:90:9d:48:c6:02:69:46:f9:58:
         a5:fe:a0:ed:82:e6:bc:70:cf:c3:ac:79:3d:97:c1:76:88:3c:
         e3:1f:69:3b:9a:7b:a8:47:cf:7d:64:50:33:87:c0:51:06:ee:
         fd:60:13:41:05:7f:cb:6a:82:76:db:1d:7c:f6:4d:12:c6:f7:
         d0:d6:21:08:03:68:d3:78:8f:e5:ce:c5:e4:a8:8c:45:7f:ec:
         5d:ea:0f:97:dc:ae:b4:a8:96:a6:50:8a:8d:6c:84:82:f3:19:
         88:5d:b2:37:6b:ec:c3:b1:ba:c1:f7:a4:57:76:81:a3:5f:88:
         57:9a:c2:49:19:a2:29:bb:ce:db:a0:b8:8a:e8:56:fb:1c:19:
         b8:2c:3d:1a:47:b4:74:a8:2b:d6:d7:b1:1e:c3:2f:22:ef:c9:
         af:40:b3:ac:12:a0:ca:a2:ab:0e:27:27:9b:b3:b4:58:4d:28:
         12:13:56:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jalv+NGalxQLGimExzDADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjYwNzAyMTUyMDAwWhcNMjYwNzAzMTUyMDAwWjAzMTEwLwYDVQQD
EygwOGE1MzNlMzJlZjRmNWFlYjEyODZlNjE1NWVkMjM4OGI0ZTU5Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4y/UfezOgvnlu32evQjIDOottDk
k9NvQyGVTufx+CBTG34whj/ioYEsVDMIrghW+qoZ093YBqUaq+CiamnPQvsxLuAg
1Ep0Int4lMsphSZge0n0wlqbEgVIOGbHYv4EXoLNRBjyOEwB6ojhP+mGFPbuEaUo
gZQPfp1IiCH+I7jZ1spbLedDOGP8ihqltNwqzuSc3knIcLbsi9TPxLykUoavEhHY
d9FdTff3X1unmPada6A40+v/SyGvdF9J8hIRvmHvKFySmgEkdtCMm4b6lnzy+41W
zMMBPPQimtTE9gMMov+vThLXmDYxF9Mc15E0kR+UPmaN5ihotNNBAztQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAilM+Mu9PWusShuYVXtI4i05ZZ3MB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQBh59U9
zg4uZwkPhd5VViWoysNXFN2H0Cn6qrGdISA7gu845KKelX2k4B5hUGA6P2YXxgGV
ReF1aHBFazZ3ag4WY7iJa0Qqn/hnGc1j+5TEkJ1IxgJpRvlYpf6g7YLmvHDPw6x5
PZfBdog84x9pO5p7qEfPfWRQM4fAUQbu/WATQQV/y2qCdtsdfPZNEsb30NYhCANo
03iP5c7F5KiMRX/sXeoPl9yutKiWplCKjWyEgvMZiF2yN2vsw7G6wfekV3aBo1+I
V5rCSRmiKbvO26C4iuhW+xwZuCw9Gke0dKgr1texHsMvIu/Jr0CzrBKgyqKrDicn
m7O0WE0oEhNWtA==
-----END CERTIFICATE-----