Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File:                     D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier:          9XYfBBfgJQJy95DoZdNN6HOlsYff5DkMUwxUDS6Zmxg=
Subject key identifier:   5E:38:68:99:E7:33:E2:F6:BD:47:15:20:5E:8F:9B:E1:F0:D3:05:14
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer:       /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial:       01A013E3B5857471865F1A445C1F7F316D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number:          1607
Signing time:             Tue 18 Aug 2026 08:01:25 +0000
Manifest this update:     Tue 18 Aug 2026 08:01:25 +0000
Manifest next update:     Wed 19 Aug 2026 08:01:25 +0000
Files and hashes:         1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: 6O3bed56vsK7BgK3/1acZIy/gxJLMll3kmcLG7maFk0=)
                          2: QwkbPhXCYpS8QdG4aux1NndNvVU.roa (hash: lPZVn1QVeW2aCEI35oLMwurmWxshCLVoZsSdXVqBOzU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:13:e3:b5:85:74:71:86:5f:1a:44:5c:1f:7f:31:6d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
        Validity
            Not Before: Aug 18 08:01:25 2026 GMT
            Not After : Aug 19 08:01:25 2026 GMT
        Subject: CN=5e386899e733e2f6bd4715205e8f9be1f0d30514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:76:26:63:82:3e:f9:08:c7:ea:99:df:04:
                    ba:a5:46:b7:0d:c9:0e:22:20:45:46:fb:ec:d7:19:
                    20:50:a2:3a:9b:2f:93:8f:44:af:4f:e5:6e:ea:61:
                    c5:5b:3d:6c:a8:7b:4f:cf:e2:3a:80:95:c8:da:6f:
                    15:6c:fc:0f:a0:bb:ad:db:ad:b8:96:b4:b3:67:c0:
                    41:26:7f:be:9b:5c:ba:a9:b8:31:a0:3f:e8:bc:93:
                    7b:d0:a6:bc:b9:ff:5f:ab:e5:69:ba:4b:5e:ee:19:
                    46:73:47:aa:67:c8:b3:1c:0a:69:f6:c1:77:9d:fd:
                    46:4f:2f:ac:61:f3:76:62:e3:5b:ae:0c:31:37:ec:
                    ab:26:50:6f:2b:78:6e:80:e1:90:c1:49:51:84:ea:
                    2d:6f:59:4f:4d:80:ce:ec:a6:41:fb:2b:65:fc:1c:
                    c2:1a:a1:6a:f3:1a:39:06:6a:6d:a8:09:9b:a0:2a:
                    ff:77:52:26:0e:9b:bb:5b:33:c0:53:95:86:59:08:
                    3a:68:cf:79:a0:d6:a5:78:05:5d:42:24:aa:73:fe:
                    ef:b3:4f:c1:b1:49:d0:f0:26:9e:cb:42:5c:ef:f6:
                    20:30:c6:45:a0:ca:dc:65:c9:e4:93:7c:bb:84:98:
                    29:49:07:6e:43:6e:6b:66:26:de:a3:df:12:31:41:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:68:99:E7:33:E2:F6:BD:47:15:20:5E:8F:9B:E1:F0:D3:05:14
            X509v3 Authority Key Identifier:
                keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:73:82:3c:1d:d0:02:f7:93:bd:4c:9e:54:27:c4:1b:5a:98:
         5f:ff:59:0e:b0:55:2d:96:c2:86:2e:79:14:5f:ee:8e:d4:9a:
         28:08:7a:64:9e:71:e4:80:f5:b5:3c:a3:5c:e4:db:6e:f5:11:
         3f:28:97:9b:5f:c6:77:05:2b:c0:f8:3d:fe:2d:8f:1b:cd:be:
         2e:55:48:bd:80:6f:74:e5:2e:29:bb:ba:36:e7:16:8b:97:25:
         33:db:8f:e6:8f:86:56:85:78:00:b4:d5:da:79:42:69:31:ba:
         25:e8:0f:45:01:9e:2d:01:7b:e6:68:a5:de:e8:19:b4:77:2b:
         78:f9:e7:f5:24:25:0a:0d:52:bc:72:50:5b:fe:10:4e:27:fb:
         62:ec:c5:3f:93:c4:be:bd:73:f4:a3:4c:c4:c3:13:f0:d7:d7:
         da:55:36:5a:49:e3:7a:84:f1:72:5d:16:87:47:3e:f2:f9:c5:
         1d:d4:18:5c:2a:93:4d:a8:a9:8b:4a:66:cc:9f:6c:8b:db:71:
         28:f9:55:98:3b:f1:cc:36:fe:34:2f:0a:4c:25:e1:66:44:8a:
         7e:23:13:e1:76:95:36:32:1b:da:dd:5c:97:c3:d1:18:d7:24:
         42:da:6b:84:73:71:6e:97:ea:68:c5:97:d3:fb:b1:52:8f:fb:
         dd:a3:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----