Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File:                     121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier:          AKeJKFOg01gV/9qXbVwDHlxZYJT1Bx7YAVBeghI96lo=
Subject key identifier:   89:D3:3B:08:13:7A:16:D4:1D:84:FA:8E:97:08:62:FE:EB:C5:ED:23
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer:       /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial:       01A0A897017E885221BC50947FF5B7F15EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number:          1A60
Signing time:             Wed 16 Sep 2026 05:01:03 +0000
Manifest this update:     Wed 16 Sep 2026 05:01:03 +0000
Manifest next update:     Thu 17 Sep 2026 05:01:03 +0000
Files and hashes:         1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: vAOSNge7SdJy+qzFJSE/g7hyN1wfZV1VNSE726hjnu4=)
                          2: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (hash: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA=)
                          3: ucYb6qB_KaTWYUSU6LAo8719FDs.roa (hash: +ASle/PB3Ogg8HVIw0p9waPXwti0vvLog6UAfw5L79w=)
                          4: x04dCWjItyDGXFoquqgz5jnrMRg.roa (hash: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a8:97:01:7e:88:52:21:bc:50:94:7f:f5:b7:f1:5e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
        Validity
            Not Before: Sep 16 05:01:03 2026 GMT
            Not After : Sep 17 05:01:03 2026 GMT
        Subject: CN=89d33b08137a16d41d84fa8e970862feebc5ed23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:91:99:73:ad:98:9d:93:9e:db:f2:ee:73:
                    39:44:03:7f:f4:76:60:a0:52:f8:fe:db:36:34:19:
                    d5:fc:f5:95:94:0d:14:c3:de:02:49:b4:a2:2e:95:
                    0b:87:b0:a1:40:47:76:1f:86:96:9f:a3:70:53:aa:
                    d9:47:69:a1:74:84:b6:6b:8d:21:6e:8d:2f:8e:bf:
                    ed:38:26:77:4d:db:43:a6:65:b3:81:db:e4:5e:50:
                    46:39:bc:82:85:d4:a0:d4:60:f8:10:b4:b1:83:d9:
                    48:ad:dc:03:22:9b:89:14:0b:e0:72:6b:dc:19:b5:
                    f1:29:63:ce:6d:1d:04:38:3c:65:bd:4e:0a:da:52:
                    af:66:75:8b:0f:97:f0:e5:c7:02:7e:86:54:22:d7:
                    44:a9:75:6a:3f:92:da:35:01:39:35:5b:9f:93:e0:
                    54:74:a3:b6:00:ed:d3:31:95:45:85:00:95:c1:cb:
                    6b:7a:5d:57:9e:b2:8a:e9:84:f9:c7:e7:94:3a:bd:
                    1a:42:02:a9:51:4e:c2:92:32:98:65:c2:8e:a8:dc:
                    8c:00:2e:77:11:50:6b:02:50:8b:23:b8:09:6e:14:
                    6e:40:7c:be:7b:81:8c:e1:07:35:ba:9f:97:3a:42:
                    3c:cc:7d:7a:5c:f4:ff:8a:55:ed:37:89:81:f0:df:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:3B:08:13:7A:16:D4:1D:84:FA:8E:97:08:62:FE:EB:C5:ED:23
            X509v3 Authority Key Identifier:
                keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ed:ba:93:c5:a0:18:ff:01:3f:0b:4a:18:5d:21:be:26:78:
         98:9d:a4:c4:03:bb:01:2e:14:a7:34:a4:d3:5f:9a:01:84:5c:
         a1:10:07:31:a5:ee:9f:46:53:30:e7:ce:1e:26:25:18:17:82:
         9d:ae:2f:d9:7d:d9:cc:e2:2b:5f:a6:b5:d2:cd:e8:a7:3d:28:
         bf:ef:3f:89:59:09:96:88:35:36:a3:a9:79:7c:5b:95:14:09:
         cd:a1:8f:0d:0b:f8:0d:c3:65:95:07:2f:82:1f:fd:64:bf:86:
         65:74:b2:2c:11:03:30:f8:ac:3b:a3:d3:4a:66:ae:78:e7:25:
         51:1c:73:d1:30:ce:f3:ff:2e:48:88:96:23:bd:0c:a7:d5:ca:
         fe:07:b0:59:7a:c8:6a:2c:d3:65:fb:80:df:5c:09:c4:6e:e3:
         e3:20:c9:80:ba:08:8f:d5:04:80:c3:6a:ae:eb:b2:25:0c:a9:
         e2:9a:f2:e4:06:f2:9f:96:7b:98:70:27:df:7b:a8:7c:96:c1:
         f3:81:89:a8:34:e1:9b:89:d4:61:f7:7b:58:69:d1:bb:ab:1d:
         ee:8e:0f:00:2e:8e:a2:ad:7b:71:d0:05:e9:9b:0e:cd:6f:7a:
         72:53:75:7d:78:e5:ba:fc:c5:1d:67:51:cc:5b:c6:27:9f:e7:
         7e:5f:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----