Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File:                     Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier:          NctU1l/Sv3uBC+0u8kZx7Lf063a3dbwlYc8GQwJFzWs=
Subject key identifier:   EF:10:CE:6F:32:0C:B7:71:1F:3B:B7:9D:84:E4:D8:48:A6:9F:0A:E0
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer:       /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial:       01A0AE2AE7FABC209D1D4A0264E119AC74F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number:          1748
Signing time:             Thu 17 Sep 2026 07:00:42 +0000
Manifest this update:     Thu 17 Sep 2026 07:00:42 +0000
Manifest next update:     Fri 18 Sep 2026 07:00:42 +0000
Files and hashes:         1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: rQ2vx4NvZ4f0Bh58Y1G2C1JIGMxGLDsHpvVQMdPvxQo=)
                          2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
                          3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ae:2a:e7:fa:bc:20:9d:1d:4a:02:64:e1:19:ac:74:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
        Validity
            Not Before: Sep 17 07:00:42 2026 GMT
            Not After : Sep 18 07:00:42 2026 GMT
        Subject: CN=ef10ce6f320cb7711f3bb79d84e4d848a69f0ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:ed:bc:1c:95:1e:fe:35:8e:15:97:12:60:
                    13:b9:8c:47:2b:1a:0e:8b:d4:6a:dd:f9:8f:43:fc:
                    fe:87:3e:5c:02:68:ff:aa:c6:13:18:23:db:e4:6e:
                    02:f0:b8:c7:d5:0a:31:74:b9:02:91:82:b6:3d:7c:
                    5c:76:a1:b4:20:0d:8d:3a:bf:1e:5e:b6:74:23:2a:
                    05:ee:b2:c3:58:a1:09:0f:90:d8:6a:b1:c2:58:0f:
                    0d:af:65:64:9b:6e:f3:0b:59:8e:0d:28:dd:82:1f:
                    96:ab:7a:61:e3:ea:67:5a:9a:a3:51:41:13:53:af:
                    30:7e:92:07:3b:16:8b:6b:de:fa:08:a5:03:e2:2e:
                    ef:75:43:1a:9d:29:df:e0:fb:ec:17:67:33:f2:72:
                    0e:f7:2d:b9:a4:0a:1f:af:d2:ac:7a:e4:b0:4b:0c:
                    fc:32:9e:55:57:53:38:70:96:4e:49:50:4a:4b:34:
                    38:b1:bf:a1:b3:f6:36:8b:8f:00:c2:c1:b1:33:e2:
                    80:75:8f:0f:c1:a4:cd:05:87:aa:d8:7f:c6:dd:49:
                    5e:3b:6a:45:95:a0:61:81:11:de:10:33:90:a2:f0:
                    af:45:d2:f4:38:10:5a:65:94:19:09:12:d8:be:74:
                    4a:bd:23:24:14:99:f7:fc:23:84:b5:cc:c8:a1:4c:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:10:CE:6F:32:0C:B7:71:1F:3B:B7:9D:84:E4:D8:48:A6:9F:0A:E0
            X509v3 Authority Key Identifier:
                keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d6:36:f3:eb:a1:20:4a:c7:3a:04:71:6d:0a:34:44:11:7e:
         01:a7:f8:ec:4b:bd:57:59:41:be:36:e1:06:0f:17:11:ff:9b:
         4f:cf:e7:da:9d:fb:c0:2e:fe:5d:71:40:ae:45:28:bd:eb:7e:
         e8:24:f9:a6:a9:cb:0d:63:71:e4:25:2a:67:b8:26:be:46:71:
         fe:18:03:e8:74:0c:08:98:3f:db:40:17:e8:e7:b0:84:2b:4e:
         b5:1b:c8:f7:3e:ba:c1:35:0a:0c:c2:31:9c:ff:43:8e:81:a0:
         0b:c3:8d:eb:e7:75:36:6f:3f:c6:b7:15:f8:3d:4c:79:bd:71:
         c5:02:57:39:ed:a6:f5:ae:b1:95:bc:aa:2f:32:68:70:b0:37:
         33:20:45:ac:5b:43:bd:78:87:82:a9:33:5e:f6:16:e0:59:4b:
         27:d9:ca:f5:6a:c7:a2:fe:c0:25:5c:63:83:60:8f:08:7c:af:
         9b:0c:ef:50:62:5e:df:a6:62:1c:5a:a0:2e:7c:16:b3:52:be:
         29:a5:1a:b0:ea:da:48:d5:d3:f5:05:8e:cc:84:0f:7a:09:46:
         6e:dc:a8:09:25:91:d6:89:ab:b6:fc:b5:70:d7:2e:02:f0:4e:
         71:f7:79:8d:fa:17:84:77:c7:b1:99:fa:d5:77:83:5f:fb:f3:
         05:fd:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----