Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File:                     8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier:          A7+O9+lOpDuD9z30UBSAlxQQg8JWHRpZrQ3mz4WW4SI=
Subject key identifier:   93:AA:07:BA:23:0C:5A:C7:A8:7C:4C:8E:1F:70:20:91:EA:5C:B4:4C
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer:       /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial:       01A0AED0A0382FA09C036C0D963175B5C385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number:          196C
Signing time:             Thu 17 Sep 2026 10:01:43 +0000
Manifest this update:     Thu 17 Sep 2026 10:01:43 +0000
Manifest next update:     Fri 18 Sep 2026 10:01:43 +0000
Files and hashes:         1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: YfFQiEq04SyWlkE6FxPjDH9kDDc8DH2cw9ZKBoTYiuw=)
                          2: lWqEQF0aFyTLgW-NFz8-Hzv0C6U.roa (hash: ht7qKNgmNwlg0mr9NDGMiwl5H8f2BO9IP2v8m07eRCc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ae:d0:a0:38:2f:a0:9c:03:6c:0d:96:31:75:b5:c3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
        Validity
            Not Before: Sep 17 10:01:43 2026 GMT
            Not After : Sep 18 10:01:43 2026 GMT
        Subject: CN=93aa07ba230c5ac7a87c4c8e1f702091ea5cb44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:17:bb:ae:03:dc:5f:ee:63:a6:a3:e7:e1:
                    c1:11:96:b0:3a:03:fe:bc:b8:81:8e:d1:d6:ea:05:
                    17:b6:62:ce:92:71:2e:b0:68:e0:be:3e:92:69:7c:
                    ca:41:4b:92:05:fc:37:8e:f7:cb:55:64:8e:4c:ad:
                    7a:56:ac:96:50:9d:f5:b7:d2:e6:9b:83:cf:c8:40:
                    fa:ad:fc:9f:18:10:07:7b:6b:15:0c:88:0e:fb:e1:
                    c5:80:a9:0f:76:83:a4:43:b4:88:0c:c7:4a:ba:da:
                    1d:d4:18:e7:a6:48:c0:5d:84:f9:4a:b0:01:52:62:
                    a8:48:a0:ce:39:98:9c:c8:aa:81:bc:70:69:91:8b:
                    d1:39:ed:b7:86:bf:22:3f:62:5f:6e:2f:d0:8e:3a:
                    ce:6e:70:1d:41:f2:50:76:12:88:f1:c5:cc:4c:f0:
                    b5:1e:f3:7c:c9:72:db:e1:7a:8f:1b:20:d8:fa:cf:
                    44:98:6f:31:6d:ac:62:a9:74:b0:4e:14:f9:64:31:
                    34:5a:5f:ed:cc:03:ac:13:8d:38:f7:ad:2c:7c:2a:
                    c3:5d:b0:da:92:4a:ff:33:32:ae:83:95:aa:e2:9d:
                    09:91:6c:19:c1:e2:e6:25:81:2b:d0:cc:b2:b3:02:
                    af:37:e8:b1:52:91:46:5c:df:7c:6f:62:a0:28:97:
                    11:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:07:BA:23:0C:5A:C7:A8:7C:4C:8E:1F:70:20:91:EA:5C:B4:4C
            X509v3 Authority Key Identifier:
                keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:53:a9:c6:b2:a8:3f:9a:3e:7a:0c:e1:f0:92:d7:ef:fe:
         82:57:a5:3e:2a:f9:9a:a4:c6:28:9e:35:01:51:59:6d:70:aa:
         29:73:2a:5b:ae:bd:32:a5:5f:18:49:ff:2e:06:30:15:25:a1:
         9d:61:9c:a8:e8:a2:18:fa:a0:92:c9:fb:ef:99:00:fe:76:eb:
         69:a4:71:e3:bf:61:3d:5d:d1:18:37:cd:a7:fa:30:7b:4e:5f:
         e2:ef:08:a1:5a:5b:b6:12:a8:90:ca:fd:28:2b:56:03:a0:f0:
         eb:c6:e1:6b:dc:76:a2:41:44:de:c6:e6:67:ea:07:d0:d0:e1:
         69:ec:85:3a:33:f2:4b:8b:3e:ed:4f:e7:b2:c2:33:1e:9d:18:
         e1:d7:fb:08:88:f8:2d:02:81:47:2d:bf:ad:92:0e:60:e3:53:
         35:d6:3b:b3:98:9b:dd:c4:78:af:4d:2f:67:d6:80:9b:ae:a7:
         34:29:b7:bb:57:a8:31:b3:89:a6:a4:83:ca:fa:e8:2e:50:be:
         86:08:12:1d:97:ac:24:7f:45:e1:3c:68:6c:24:bb:49:2b:78:
         64:4d:19:96:c9:8d:b9:11:e9:aa:66:46:6b:05:82:7a:ef:37:
         82:2d:7c:92:77:cf:79:a8:f2:bc:da:3b:0f:73:99:17:6f:bf:
         3f:d6:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----