Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File:                     11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier:          8ZNNkMgd7WBSS2fNGYLyXkE27l+WBnaeUtwj+w99fkg=
Subject key identifier:   13:FF:27:7C:E0:B2:18:38:39:17:68:8D:6B:2C:4B:98:32:19:1A:69
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer:       /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial:       019F22104989A2016545A182777ADF65BF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number:          198A
Signing time:             Thu 02 Jul 2026 09:02:00 +0000
Manifest this update:     Thu 02 Jul 2026 09:02:00 +0000
Manifest next update:     Fri 03 Jul 2026 09:02:00 +0000
Files and hashes:         1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: nUJYKcSm/yTDrEDFPQat9axqsowyEBhuMF/PBW0UkOY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:22:10:49:89:a2:01:65:45:a1:82:77:7a:df:65:bf:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
        Validity
            Not Before: Jul  2 09:02:00 2026 GMT
            Not After : Jul  3 09:02:00 2026 GMT
        Subject: CN=13ff277ce0b218383917688d6b2c4b9832191a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:20:a1:ff:f3:57:06:23:f0:13:08:a0:c9:
                    06:79:db:07:4e:2d:28:11:b5:0e:2f:37:b7:8d:65:
                    1b:14:75:4b:47:dd:11:65:d8:5d:dd:83:c6:53:ec:
                    41:aa:ca:8f:62:7d:0e:d7:ee:dd:d0:83:1f:7e:2c:
                    0b:7a:8b:5f:f8:e9:f0:cc:35:91:b4:9d:f6:49:35:
                    4d:5f:e8:6f:74:31:bf:f2:45:bc:e3:40:42:35:cd:
                    19:5d:e2:b1:26:58:83:bc:98:de:80:81:59:8f:82:
                    a8:70:08:d3:30:bc:de:81:7b:13:26:5f:68:a6:e1:
                    6f:a8:8a:16:16:cd:5c:a2:a2:e2:ae:fd:f8:e3:86:
                    69:1c:bc:8c:89:1d:b7:27:93:1c:61:1e:28:f3:ac:
                    b9:d5:95:9f:10:39:ca:8e:69:d0:5f:66:b4:f2:45:
                    7c:f8:39:5f:61:ee:ac:36:52:ca:fd:d9:49:ce:44:
                    ae:e2:b4:65:76:50:e4:67:bd:15:ea:ba:68:4c:3a:
                    03:03:60:04:9d:21:f4:6d:75:f9:fb:bf:c0:a7:52:
                    43:df:50:43:60:0d:a5:92:44:c4:42:eb:87:e6:e0:
                    15:e2:32:0d:dd:a9:67:91:6f:6c:1c:50:46:fb:4b:
                    63:99:1a:a8:9c:e4:c1:88:11:82:38:89:01:08:69:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:27:7C:E0:B2:18:38:39:17:68:8D:6B:2C:4B:98:32:19:1A:69
            X509v3 Authority Key Identifier:
                keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:08:f8:f2:a7:36:4d:ac:14:8a:2a:bb:91:3b:9d:4c:49:
         fe:a4:b1:d7:d2:84:40:2e:62:f9:ec:49:3b:a2:e9:3e:34:06:
         ea:19:b4:4f:64:a1:82:42:e1:bd:e4:2f:2d:8f:84:32:28:6b:
         77:84:c4:e8:68:78:d8:ed:fd:97:98:60:9c:20:e7:cf:bf:b1:
         9f:23:9d:9d:3c:84:a5:7e:1e:0b:56:3a:9b:f4:cd:60:39:d1:
         76:60:48:d8:00:0b:ec:88:d9:37:64:39:bc:1f:a2:76:28:db:
         95:8d:fc:3f:e8:06:e1:90:65:49:86:95:8f:98:ba:d9:88:15:
         fa:56:aa:c1:fc:5f:ef:87:ba:06:00:5d:f3:d8:fa:7f:a2:e0:
         49:9d:42:a5:f8:50:e1:6a:3a:51:05:56:66:dc:a0:6e:5d:b9:
         eb:4c:77:7f:c5:5c:81:8b:10:a8:77:e2:80:61:9b:50:8b:98:
         de:4f:8f:65:9d:07:2c:ea:64:71:ef:67:e6:1d:73:f0:3d:44:
         cf:5b:e1:5a:5a:9a:71:97:e6:21:f6:3c:57:26:4d:b7:6c:b2:
         fc:ef:75:1c:0f:ea:b9:8e:0d:cd:71:b0:87:a3:05:6d:2a:02:
         cc:62:7c:68:12:b2:c8:af:2f:f2:37:0b:9f:6b:c7:60:2d:5e:
         4c:22:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:51 2026 by rpki-client