Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
File:                     V5Sv215qGIV4CSClT_qCQI6oW6E.mft (raw, json)
Hash identifier:          A3tcGHc0VqAXHqsR7f98nKiJEujq0JHQd0s4wNc7SqE=
Subject key identifier:   7B:30:E3:8C:AA:BD:21:E6:31:52:D1:74:55:2F:3F:5D:5E:72:5C:52
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       019D6C1C4B08B28DB6DE98D48AB130AB78F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
Manifest number:          18D3
Signing time:             Wed 08 Apr 2026 08:01:26 +0000
Manifest this update:     Wed 08 Apr 2026 08:01:26 +0000
Manifest next update:     Thu 09 Apr 2026 08:01:26 +0000
Files and hashes:         1: 2nST-WJVV3wnt2Ywo-h_QbVYVc8.roa (hash: BuSb1j+4OFxPz/aKcDFoWL6I9jIRxHVEzdI/3BhNSpc=)
                          2: 2swZefhIVPR3XL7oX-tRbngk5GY.roa (hash: Ns+iNjjhlWLfQInvmtWCHXcMGpn4FdP2B+Xiv5UYy6o=)
                          3: GLrMDn_b0I1MejoPRWfg9LMBjjI.roa (hash: as4V3NC8zYiNgBHptnpjtVduVkflidyYfc83EQtz0Z8=)
                          4: HvHtExS1BTflnRg2KdY95GWbMjU.roa (hash: 46JezNl3lJPdt532LIoL/aAhrojdiUiR3TTl/K2yKN4=)
                          5: V5Sv215qGIV4CSClT_qCQI6oW6E.crl (hash: RXITVMEujCE8chTROZaXzBV6PWRG/+PkEDl2VUG+S0c=)
                          6: lQbx2GFG3GJlYjI818tRZTvWCqU.roa (hash: hYFJgU1AzbjoQcSMuHA0vL1GNjSzMHcYgTXKGRPWjps=)
                          7: uDo1JMrF3KNScD7ByahXY9Q0hOM.roa (hash: 2A9Xtk9walDaSopHVstfJToBQgQNhRzATAnAC7xPnSI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6c:1c:4b:08:b2:8d:b6:de:98:d4:8a:b1:30:ab:78:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Apr  8 08:01:26 2026 GMT
            Not After : Apr  9 08:01:26 2026 GMT
        Subject: CN=7b30e38caabd21e63152d174552f3f5d5e725c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:aa:53:ad:a6:55:d5:59:9a:a3:4e:a1:f2:
                    ff:84:77:28:3d:4b:5b:84:4f:8f:f3:df:57:d1:54:
                    04:8a:81:a1:e2:44:78:a7:fe:88:b6:d6:f5:0c:3d:
                    0e:77:60:69:73:76:d1:07:b7:d8:93:89:0c:db:b3:
                    42:4e:5c:ea:89:55:b6:76:4e:e7:9a:fa:24:a0:e9:
                    83:1b:29:2b:67:23:8b:82:98:47:f1:bb:d8:79:94:
                    74:c0:39:03:54:c4:f7:f0:f1:df:9f:0b:c2:48:cd:
                    6e:5f:99:55:d4:32:59:5d:74:ef:69:4e:84:c7:a0:
                    0f:f2:fd:d9:05:47:49:48:f6:42:27:61:f7:7a:03:
                    cf:b2:83:2f:64:82:0a:b0:4e:74:f5:0d:66:41:51:
                    a8:f6:df:14:de:a6:7b:13:d4:99:7b:a0:4c:e1:74:
                    2d:04:61:61:5b:02:84:f1:03:5f:9f:56:00:97:b6:
                    e3:89:5e:cd:5d:89:6a:dd:82:f1:fd:d3:68:6a:91:
                    f4:45:63:bb:6f:d7:66:30:26:27:b3:83:02:7f:b3:
                    54:48:94:fc:68:19:6e:4c:e3:76:0d:7c:fc:fa:b8:
                    ef:43:1e:f5:9a:e4:b0:df:4a:98:1c:b4:29:62:b1:
                    9e:0f:d0:49:f0:25:f9:e9:2a:89:12:66:2a:64:bf:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:E3:8C:AA:BD:21:E6:31:52:D1:74:55:2F:3F:5D:5E:72:5C:52
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:f0:81:8b:01:13:35:6d:ef:db:14:0c:b3:47:0c:a4:6a:
         ae:72:7e:5c:6c:d7:e8:7e:b2:80:dc:b8:e5:69:94:93:d2:64:
         a7:7a:a1:1e:ab:0d:80:64:07:c1:25:55:a3:5d:0f:5f:a3:fb:
         0b:57:85:97:b5:6d:df:88:0f:0d:fe:ff:a2:b4:99:d3:71:e0:
         92:26:3b:7b:32:2f:91:63:66:2a:19:57:32:41:11:44:5c:b3:
         3c:0a:4e:01:54:09:2f:f0:4b:39:49:ff:2c:d1:ca:db:0f:0c:
         3c:42:ef:dc:a2:38:33:f1:cc:77:4c:1b:f4:2a:d9:cf:ac:bb:
         f8:6d:62:76:0e:1a:d7:59:a2:ac:59:b3:1a:d9:94:d0:f6:ca:
         6d:83:50:17:eb:4d:bb:cf:b9:33:5a:30:42:ef:2f:25:42:4a:
         7d:58:08:46:f6:54:5e:4a:67:65:74:14:31:fe:34:74:39:1b:
         55:54:66:74:bd:bb:cb:b7:e0:29:8c:8f:bc:8c:ed:81:ab:58:
         51:51:fd:49:f1:25:76:29:f6:01:b1:08:94:07:b4:08:70:ca:
         5f:3b:c2:bd:57:34:e4:e2:f9:d5:1f:3c:6f:53:e2:18:d3:bc:
         c2:6e:33:19:14:6d:bf:ce:d1:b7:92:04:7a:df:a7:af:c3:50:
         3a:da:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----