Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File:                     4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier:          mIlKbVRPVw8pZ8CoLM0VTA4BOx05x54jWs+aAtCRimU=
Subject key identifier:   F9:73:2E:E3:36:40:AD:77:EA:B0:FA:6B:AF:10:9C:1D:B9:09:0A:F5
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer:       /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial:       019F23698FF2864D22EDC15EF0D7A1D00AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number:          07D3
Signing time:             Thu 02 Jul 2026 15:19:08 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:08 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:08 +0000
Files and hashes:         1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: 6yNc79FiTkYB0nV0EEcEZ21qNBvcUqFbhLRlYOVCWY8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:8f:f2:86:4d:22:ed:c1:5e:f0:d7:a1:d0:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
        Validity
            Not Before: Jul  2 15:19:08 2026 GMT
            Not After : Jul  3 15:19:08 2026 GMT
        Subject: CN=f9732ee33640ad77eab0fa6baf109c1db9090af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:08:33:76:a5:9c:76:31:49:5e:8d:1c:2f:
                    bf:66:07:ff:54:2b:ef:96:82:34:de:2c:2a:28:b8:
                    49:e8:db:39:3e:fe:ac:69:0e:24:99:40:ba:e5:07:
                    cb:86:48:45:47:28:e4:9a:0d:c1:87:5e:fb:ab:33:
                    23:3e:d6:37:00:02:df:50:13:4f:93:c7:44:5f:7c:
                    5d:4f:b9:5f:e4:b0:4c:1d:79:0a:d2:5e:8e:51:ae:
                    bd:67:c8:18:c8:b4:4b:76:53:17:88:fa:4e:78:6d:
                    2f:70:c5:ba:e1:6c:74:7a:91:d3:4f:90:3b:b7:e7:
                    ea:8f:f7:30:25:ff:6b:6f:1d:88:de:80:6b:a7:00:
                    0a:f4:b0:bc:69:77:93:d3:9f:8e:ca:9a:e7:71:3c:
                    f4:be:12:39:dc:3d:5c:46:ed:79:9a:e9:09:f3:f6:
                    b8:5c:8c:36:47:fd:88:fc:08:f6:ad:5c:dd:db:69:
                    68:61:c0:a3:16:2a:57:6c:6b:10:8a:a1:81:22:ca:
                    21:1b:a1:72:e6:cd:7e:09:6a:07:13:d0:66:88:23:
                    15:b0:6c:f9:44:a7:97:9f:f8:be:29:2f:c8:67:19:
                    61:79:07:fa:59:42:1d:88:7d:04:61:1e:a1:15:96:
                    20:18:2e:9e:3e:b5:1d:6d:47:1f:83:52:40:6a:4c:
                    c9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:73:2E:E3:36:40:AD:77:EA:B0:FA:6B:AF:10:9C:1D:B9:09:0A:F5
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:e4:46:65:76:a7:f4:b2:ec:75:75:91:6c:b7:39:72:70:
         36:66:e5:e3:53:24:ca:27:01:ea:ea:7b:5e:eb:24:d7:35:01:
         73:aa:c3:01:4c:ac:1e:77:e7:d2:77:a3:d4:1a:e7:cc:66:10:
         68:b7:79:42:f9:3f:d2:7d:f5:5a:26:36:10:e6:78:fd:e4:c3:
         9f:7f:ad:26:b1:f7:03:1f:55:30:2a:7e:4e:b4:8d:a2:b5:a1:
         38:16:71:6f:a4:cd:3e:77:e3:6f:15:98:d4:55:54:a9:63:4e:
         44:36:99:7b:10:20:54:80:81:ad:b3:fd:0b:5c:ed:9e:b4:bd:
         b4:c6:17:3b:6d:67:3e:8d:39:1c:12:ea:f7:14:b1:1c:c8:c1:
         43:34:0d:3a:87:e4:dd:bf:93:64:bc:ac:e6:d5:47:7e:9b:82:
         c3:f7:bd:2a:27:44:bc:8b:83:6c:7a:ac:13:6a:e3:51:1e:21:
         c2:b8:d5:bb:15:a2:5b:c1:a4:09:8a:aa:4e:fb:d8:13:50:c6:
         4f:2c:70:60:bd:03:cc:6f:5e:be:93:51:13:89:33:40:a6:36:
         06:94:1a:29:82:67:a2:9f:d3:2d:ac:11:70:24:59:79:c4:51:
         84:5f:d1:ca:3a:82:a8:3c:90:ca:c0:ac:c8:1c:75:7c:2e:ae:
         92:80:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:00 2026 by rpki-client