Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
File:                     9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json)
Hash identifier:          80bQYRAhanL9IAaUTsXgsrGrlVuW+pdjtEf0EejkcAg=
Subject key identifier:   38:FF:FD:EE:C0:8E:F2:48:9A:9B:55:92:72:F4:BC:F2:97:2B:19:CC
Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED
Certificate issuer:       /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
Certificate serial:       01A07B50D22BF36B1F12DA1FD284B235EA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft
Manifest number:          0B04
Signing time:             Mon 07 Sep 2026 10:01:29 +0000
Manifest this update:     Mon 07 Sep 2026 10:01:29 +0000
Manifest next update:     Tue 08 Sep 2026 10:01:29 +0000
Files and hashes:         1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: JdELn9gA3YXR8MZaLtTf/BD1XJONN3koWqNkzGHkGyA=)
                          2: RXJtHW17ga48zDFcubRcsM8yvss.asa (hash: WyEDuaDUlsx2HrDyBKB8PUVqNo4aRQ6m9UiOaGV4R+0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7b:50:d2:2b:f3:6b:1f:12:da:1f:d2:84:b2:35:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed
        Validity
            Not Before: Sep  7 10:01:29 2026 GMT
            Not After : Sep  8 10:01:29 2026 GMT
        Subject: CN=38fffdeec08ef2489a9b559272f4bcf2972b19cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:f2:60:82:8e:36:24:ac:05:5e:aa:33:1a:
                    9f:7f:3a:88:2f:12:55:cb:bc:e6:57:ea:31:4f:2e:
                    c4:6c:3d:16:4c:00:74:8d:10:ab:f5:15:2a:53:14:
                    3c:7d:76:4c:cd:e8:3a:60:81:f4:40:f7:db:ee:1b:
                    39:20:fc:57:9b:f9:c2:5b:11:7f:0b:3e:cf:f9:34:
                    f1:87:54:94:b5:1c:a7:77:18:68:52:b5:6d:22:c3:
                    e8:cf:29:cd:cb:2f:7d:4e:50:ed:66:9a:52:40:54:
                    7b:8f:4c:76:10:02:42:87:91:d0:d4:40:eb:70:6b:
                    26:04:21:91:23:ac:18:cf:12:9a:8f:75:25:62:23:
                    fe:de:ab:d1:c7:91:a1:ce:a5:d6:32:71:3a:45:06:
                    9f:19:28:e1:a1:09:82:c0:2b:42:96:33:2d:7a:d4:
                    27:6b:6b:f6:c3:f2:84:86:94:96:de:ce:35:cf:52:
                    d9:ac:45:d9:aa:ab:8a:15:04:0a:bf:74:79:c8:da:
                    05:94:c4:55:dc:a9:20:6c:10:bf:6a:44:f1:df:fb:
                    5f:05:54:ba:d5:3f:34:b9:27:13:64:9a:df:82:e3:
                    86:3c:ab:0a:ba:e5:db:03:dd:f1:28:26:58:4c:f5:
                    57:be:64:25:b2:9f:bf:fa:cb:b9:fb:03:03:67:21:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FF:FD:EE:C0:8E:F2:48:9A:9B:55:92:72:F4:BC:F2:97:2B:19:CC
            X509v3 Authority Key Identifier:
                keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:0e:94:23:f1:b5:25:9c:5c:a8:2d:bb:55:c3:36:01:8d:
         32:e2:25:1d:4f:a0:91:36:53:9d:a6:3a:e6:27:53:2d:af:45:
         d4:10:96:49:20:39:70:fc:83:05:0f:93:87:fe:8c:1b:72:e5:
         21:64:31:8c:5d:c8:da:82:10:7f:cb:5a:d6:f8:bf:54:b4:30:
         81:2e:4d:1d:d4:90:73:b8:46:27:b3:ae:49:86:53:0c:41:fd:
         b8:22:33:dc:59:7b:ac:db:42:4f:1f:d7:a8:47:54:f9:62:50:
         b4:b0:c8:ad:a9:31:18:6c:71:d7:61:72:f5:82:bd:91:8b:1d:
         38:f7:73:49:d8:de:93:ff:03:c1:6f:e2:b5:f7:36:9e:09:f5:
         e2:e1:97:51:c6:90:6a:b3:1a:01:53:ea:ef:ca:ff:c8:21:39:
         67:bc:4d:b9:90:57:b1:c4:5b:ea:13:eb:57:40:59:f5:22:70:
         38:b4:85:3b:36:6e:48:5e:cb:5c:a8:39:a9:8e:62:11:28:7d:
         f2:30:0c:46:62:2a:8e:54:76:72:a5:e5:87:38:5c:5f:8d:b1:
         90:bf:e1:a7:c7:11:7f:25:3d:a2:a1:67:98:42:40:e2:51:38:
         b3:07:7a:c0:53:ba:79:75:93:f0:5a:a7:40:1f:9b:51:f8:22:
         3b:40:bb:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaB7UNIr82sfEtof0oSyNeoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzg3ZTkwYzRmZTU2ZWUxYjYzOTQ2ZmU0ZDQ2MzFjNjA4
N2U3ZWQwHhcNMjYwOTA3MTAwMTI5WhcNMjYwOTA4MTAwMTI5WjAzMTEwLwYDVQQD
EygzOGZmZmRlZWMwOGVmMjQ4OWE5YjU1OTI3MmY0YmNmMjk3MmIxOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1TyYIKONiSsBV6qMxqffzqILxJV
y7zmV+oxTy7EbD0WTAB0jRCr9RUqUxQ8fXZMzeg6YIH0QPfb7hs5IPxXm/nCWxF/
Cz7P+TTxh1SUtRyndxhoUrVtIsPozynNyy99TlDtZppSQFR7j0x2EAJCh5HQ1EDr
cGsmBCGRI6wYzxKaj3UlYiP+3qvRx5GhzqXWMnE6RQafGSjhoQmCwCtCljMtetQn
a2v2w/KEhpSW3s41z1LZrEXZqquKFQQKv3R5yNoFlMRV3KkgbBC/akTx3/tfBVS6
1T80uScTZJrfguOGPKsKuuXbA93xKCZYTPVXvmQlsp+/+su5+wMDZyHlSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj//e7AjvJImptVknL0vPKXKxnMMB8GA1UdIwQY
MBaAFPY4fpDE/lbuG2OUb+TUYxxgh+ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2Ut
OGViYWEwOTBjZjZlLzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2UtOGViYWEwOTBjZjZl
LzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGAOlCPx
tSWcXKgtu1XDNgGNMuIlHU+gkTZTnaY65idTLa9F1BCWSSA5cPyDBQ+Th/6MG3Ll
IWQxjF3I2oIQf8ta1vi/VLQwgS5NHdSQc7hGJ7OuSYZTDEH9uCIz3Fl7rNtCTx/X
qEdU+WJQtLDIrakxGGxx12Fy9YK9kYsdOPdzSdjek/8DwW/itfc2ngn14uGXUcaQ
arMaAVPq78r/yCE5Z7xNuZBXscRb6hPrV0BZ9SJwOLSFOzZuSF7LXKg5qY5iESh9
8jAMRmIqjlR2cqXlhzhcX42xkL/hp8cRfyU9oqFnmEJA4lE4swd6wFO6eXWT8Fqn
QB+bUfgiO0C78A==
-----END CERTIFICATE-----