Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
File:                     BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json)
Hash identifier:          Vyt1nqLAKW9WMllHl7cSdyjDNWbGfiHxwSdh/tkSvSA=
Subject key identifier:   9D:C6:1D:33:E1:A9:E2:C6:F6:05:A0:AD:F3:75:4A:32:A9:FC:B2:1B
Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
Certificate issuer:       /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Certificate serial:       019C3189B0DE57A7FC30701C50614BB0DF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
Manifest number:          08CB
Signing time:             Fri 06 Feb 2026 06:00:33 +0000
Manifest this update:     Fri 06 Feb 2026 06:00:33 +0000
Manifest next update:     Sat 07 Feb 2026 06:00:33 +0000
Files and hashes:         1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: 10dAj4gZPTYQrztCiirFJz6rxOVWCr7eMT12Vx1YZsM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:31:89:b0:de:57:a7:fc:30:70:1c:50:61:4b:b0:df:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
        Validity
            Not Before: Feb  6 06:00:33 2026 GMT
            Not After : Feb  7 06:00:33 2026 GMT
        Subject: CN=9dc61d33e1a9e2c6f605a0adf3754a32a9fcb21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:63:f1:b9:03:a5:4d:a5:7f:0a:93:7b:95:
                    2a:b5:16:c8:99:22:3c:b1:e9:88:12:c5:d4:b4:75:
                    13:4a:f8:5d:50:2d:45:33:0e:64:db:43:4a:24:85:
                    de:b2:fd:62:c8:5c:29:bd:51:ad:25:5c:51:79:f7:
                    c7:73:7a:d9:d4:5a:43:bc:69:25:4c:a6:a8:9d:94:
                    01:f6:e7:ac:02:5f:e5:0d:8e:a8:1a:d1:66:4d:92:
                    2b:d9:f4:30:20:1a:46:e4:1d:ac:07:7a:e8:cc:f5:
                    b8:34:f4:4a:f3:f1:9c:2c:0d:c0:ac:32:ca:fe:f5:
                    75:1d:47:04:61:95:81:8e:6c:c5:9f:8b:33:21:3e:
                    a6:a7:6d:49:9d:d5:82:59:53:9e:3b:c4:8f:4f:fc:
                    24:1e:57:a3:a5:6e:d5:9d:df:02:f1:8d:63:a5:24:
                    2f:cb:29:1b:c0:2d:8f:7f:a0:db:90:9e:ad:2b:6d:
                    78:45:5f:b0:2c:62:02:08:b8:80:ee:c4:ad:80:54:
                    8d:6b:12:d3:81:15:5e:24:60:fe:07:60:27:22:b1:
                    03:98:19:48:1b:d1:b9:64:48:82:cf:46:a6:77:13:
                    46:03:03:cf:db:5f:78:19:9c:ab:65:4d:31:f8:ec:
                    9c:b2:ab:62:b6:6b:aa:ff:2c:c6:4d:be:a9:71:4c:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:1D:33:E1:A9:E2:C6:F6:05:A0:AD:F3:75:4A:32:A9:FC:B2:1B
            X509v3 Authority Key Identifier:
                keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3e:b3:7a:9c:ee:fc:4a:6b:80:4d:bc:46:04:42:8b:a3:e1:
         34:32:b0:2c:92:b6:ee:11:96:74:82:46:f2:4a:cf:3e:a9:c7:
         ad:a0:d1:7c:7e:9a:66:13:cd:04:42:2a:f6:b4:33:f0:c6:ae:
         9d:56:32:10:98:c2:40:0b:c5:3d:70:d5:b3:38:7a:02:8f:bf:
         37:6a:64:75:38:c7:3b:78:77:db:5f:ff:c9:40:dc:41:e9:47:
         52:d8:66:3c:73:54:e1:16:b1:9f:3c:62:f9:51:9f:48:fb:72:
         c2:4d:52:bb:48:00:8d:7e:a5:9a:2a:b5:01:61:c9:76:38:eb:
         74:9f:82:c7:ce:b2:44:90:8b:60:d5:5c:57:ac:7d:46:a3:72:
         38:f2:1e:8c:d2:35:47:d0:fb:be:f8:d0:ed:48:60:bd:c8:a4:
         9c:2d:24:7f:7c:2f:cc:76:a3:7b:3d:2f:25:6a:19:01:52:1c:
         0a:fd:40:0a:a9:58:4b:0f:f2:64:1f:a8:99:b5:07:81:86:3e:
         d6:62:15:ea:d6:cd:34:5e:52:ac:e1:26:ce:b9:fa:6a:e0:73:
         4b:65:d2:8f:b5:fd:fe:46:39:e1:a7:6e:54:47:7b:51:bc:71:
         8c:93:a8:7a:d7:b2:38:cd:d4:41:7f:b8:ee:97:1a:d3:2c:b7:
         a1:1e:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:19 2026 by rpki-client