Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          xwb4aobpFiQZIL4ipr5aS1LDLmyiVFla1+FqqLcxG0E=
Subject key identifier:   39:30:75:9B:5C:05:D5:4E:4C:B7:97:42:70:E6:54:5A:06:E9:F4:1B
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       019F236A4629CAE7E3D000447B81CF3789FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 15:19:54 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:54 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:54 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: dvk79pwyNiC+cs9AIVuM3u0bdPOsNP76atTTJy11HRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:46:29:ca:e7:e3:d0:00:44:7b:81:cf:37:89:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: Jul  2 15:19:54 2026 GMT
            Not After : Jul  3 15:19:54 2026 GMT
        Subject: CN=3930759b5c05d54e4cb7974270e6545a06e9f41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:61:e7:fd:24:ae:e1:1d:c3:f4:b5:eb:e8:
                    1f:c9:85:13:56:54:6c:af:7b:f5:45:41:04:ae:c5:
                    ab:de:38:bf:91:96:a0:df:8d:56:c9:75:3c:19:1f:
                    b7:d7:a9:02:c0:33:24:e2:d8:71:d0:82:f3:40:b8:
                    c2:31:32:59:f9:20:bd:2a:7c:ad:0d:08:9c:d3:cc:
                    48:8d:21:75:08:a3:df:d6:c2:be:93:1e:f6:6b:aa:
                    56:1f:57:55:8a:6d:99:90:2b:2f:13:a9:48:99:f1:
                    f2:6f:5b:7a:d4:23:c5:e3:9d:61:18:bf:5d:fa:94:
                    a1:91:89:9d:05:91:b0:80:ac:79:29:3a:d3:14:77:
                    4f:e9:b2:9a:d3:44:76:ec:dc:2a:a7:51:06:b7:04:
                    8e:d4:30:2f:f0:05:0b:d4:0a:52:7c:ef:e0:bc:60:
                    a7:d8:b5:98:ab:f3:34:f1:c7:86:3a:5b:df:c1:4d:
                    ab:eb:99:b2:39:5c:51:4c:a6:dc:20:ff:95:05:e2:
                    3f:cc:f8:86:10:4b:f3:9a:a9:b1:4e:2a:23:cb:69:
                    7a:19:60:59:87:b5:da:e9:03:94:23:16:73:6e:fa:
                    7a:9f:6a:83:7d:e9:90:1a:98:aa:e8:bd:09:9f:bf:
                    45:a2:b6:a1:c8:6b:53:ea:3c:85:6a:3b:7b:2e:4b:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:75:9B:5C:05:D5:4E:4C:B7:97:42:70:E6:54:5A:06:E9:F4:1B
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:23:0c:97:a5:17:eb:ce:63:6b:25:88:36:bb:40:ef:c7:
         15:49:b6:51:f0:e7:d6:7f:60:de:bc:8f:99:80:01:01:72:7b:
         9a:77:b4:d4:81:f5:4f:d2:43:b5:3f:6b:ce:0f:2e:f9:46:87:
         4a:3d:3c:6c:17:f4:1f:2d:e0:b2:db:91:e0:c4:f5:84:3a:7d:
         22:88:bc:92:7a:a7:92:8a:3d:6d:51:5b:5f:f2:15:6e:ec:d6:
         7a:9b:14:1c:fc:ee:f3:bd:3f:bd:ef:30:f8:fd:42:5a:75:03:
         b0:01:e8:a8:63:5c:ba:fd:16:0d:a7:6d:97:19:16:79:fd:a2:
         dc:9b:3f:cb:e6:59:a7:18:b4:a8:d2:7f:bc:1e:68:a7:43:b0:
         f2:9d:78:39:c8:e4:6b:6b:c8:f0:2a:e0:c9:e9:9e:55:f8:09:
         4e:32:05:fc:e8:03:bb:40:eb:4b:71:a4:1d:7f:9f:55:d9:05:
         f2:32:54:aa:5a:5b:bc:ae:0b:bb:2a:ea:8d:bf:9e:59:9b:c4:
         c3:23:e7:8e:53:f2:39:d2:70:ca:05:c5:fe:6b:c8:4c:ef:31:
         8d:25:fc:f0:01:af:58:ff:1c:e5:dd:c8:63:bc:5b:c0:36:49:
         d9:10:97:a3:bc:c7:0b:fe:91:28:83:d9:35:38:c7:f3:25:cd:
         c2:46:3b:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jakYpyufj0ABEe4HPN4n6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3
NjM5MWIwHhcNMjYwNzAyMTUxOTU0WhcNMjYwNzAzMTUxOTU0WjAzMTEwLwYDVQQD
EygzOTMwNzU5YjVjMDVkNTRlNGNiNzk3NDI3MGU2NTQ1YTA2ZTlmNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Elh5/0kruEdw/S16+gfyYUTVlRs
r3v1RUEErsWr3ji/kZag341WyXU8GR+316kCwDMk4thx0ILzQLjCMTJZ+SC9Knyt
DQic08xIjSF1CKPf1sK+kx72a6pWH1dVim2ZkCsvE6lImfHyb1t61CPF451hGL9d
+pShkYmdBZGwgKx5KTrTFHdP6bKa00R27Nwqp1EGtwSO1DAv8AUL1ApSfO/gvGCn
2LWYq/M08ceGOlvfwU2r65myOVxRTKbcIP+VBeI/zPiGEEvzmqmxTiojy2l6GWBZ
h7Xa6QOUIxZzbvp6n2qDfemQGpiq6L0Jn79ForahyGtT6jyFajt7LkvPyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkwdZtcBdVOTLeXQnDmVFoG6fQbMB8GA1UdIwQY
MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt
NjE5NDkzNTZhOWEwLzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw
LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXO4jDJel
F+vOY2sliDa7QO/HFUm2UfDn1n9g3ryPmYABAXJ7mne01IH1T9JDtT9rzg8u+UaH
Sj08bBf0Hy3gstuR4MT1hDp9Ioi8knqnkoo9bVFbX/IVbuzWepsUHPzu870/ve8w
+P1CWnUDsAHoqGNcuv0WDadtlxkWef2i3Js/y+ZZpxi0qNJ/vB5op0Ow8p14Ocjk
a2vI8CrgyemeVfgJTjIF/OgDu0DrS3GkHX+fVdkF8jJUqlpbvK4Luyrqjb+eWZvE
wyPnjlPyOdJwygXF/mvITO8xjSX88AGvWP8c5d3IY7xbwDZJ2RCXo7zHC/6RKIPZ
NTjH8yXNwkY7Lg==
-----END CERTIFICATE-----