Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
File:                     RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json)
Hash identifier:          MYxFO+iy+fQ9V/Jzz35dCDKhDGFQh/OSkrdz/YZqIrw=
Subject key identifier:   7D:23:7F:06:A9:C0:CF:3B:2F:95:E8:F3:C5:BB:76:9D:DE:01:1D:EB
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       019D75C4D0B52D00BEA05D0A0B6F6BE17F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
Manifest number:          08C5
Signing time:             Fri 10 Apr 2026 05:02:05 +0000
Manifest this update:     Fri 10 Apr 2026 05:02:05 +0000
Manifest next update:     Sat 11 Apr 2026 05:02:05 +0000
Files and hashes:         1: NzMNXeLDcLYIFC344oXjWazxrR4.roa (hash: UgKP2v1WGk4SEP8/PEV1HHI9/43agiNTHs+4EhmSNfE=)
                          2: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: /U++2Ny212JFunnBgoqOcsh0fyqkgK58+NeDaOYuizU=)
                          3: STnOJRTNql21M2Kz5QY42xiaMM4.roa (hash: 5N7rcDLtfU0kN4gxROhTw9CW7XTPLN7mgLp3zMXOn6o=)
                          4: Wol6fw44OugIpyfwtURH8iAfI-E.roa (hash: gGDOi1vglKxk1aYaUA2in8OVjOdtb3M/Bet9OhLskOo=)
                          5: _MGbRQDu2ns3ZgtHHgodxQrWr6M.roa (hash: jDV5qNzh/x2GH+Pt80kizBcWmWTRDyTfwoJ6oLaNVg0=)
                          6: aoTjpbO4fEtkWaW125WuaAWooGE.roa (hash: 4CwdRnD+H97yNQLom46m3KEKJh6lz/PdeTFKvivPi90=)
                          7: lKrsqoRUlAfdPlpFj4hJ0uCp1sw.roa (hash: F3G64nEmjDg9O0NyHwg32mn/8AN+Z+kq3XvvzAvf7Gs=)
                          8: oQsNb-5VlThb2JT3EPE2LAG1bEo.roa (hash: /6zEksBWZtlmzedZ/2nP1TLSrYkNLgloUiNgSbxGNBs=)
                          9: qIBcgoxGaTpRyT1GVIURNEpjT0U.roa (hash: vzZMI2J8AcgNX06ElvLWaU+DX1AEJ/xGwsQNinRF8Xk=)
                          10: uHuUzzjJV0HUtV7aunxTY6hSyL0.roa (hash: ywDDk4Da2VFEPAZYkJbPbp7ZppYitudvQc1nou/VXXE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:75:c4:d0:b5:2d:00:be:a0:5d:0a:0b:6f:6b:e1:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Apr 10 05:02:05 2026 GMT
            Not After : Apr 11 05:02:05 2026 GMT
        Subject: CN=7d237f06a9c0cf3b2f95e8f3c5bb769dde011deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:f8:89:17:97:36:a9:33:b3:bf:52:5f:01:
                    66:7e:50:a1:2c:c6:49:ad:7e:91:a7:69:13:e7:aa:
                    de:b5:ec:f7:72:be:cb:bb:66:b8:dc:f4:3b:43:c1:
                    a4:d1:4d:41:b3:0e:06:1d:65:4e:ff:89:d8:84:25:
                    e6:95:e9:17:b1:4b:ac:23:54:a7:4c:cd:e2:94:57:
                    85:bb:74:2f:72:6e:bc:b8:2d:7d:ae:8a:bf:c5:dc:
                    71:fd:93:84:07:f4:c2:01:03:7d:64:82:c3:fc:70:
                    fa:70:40:86:43:f8:c2:77:af:b0:01:fe:66:15:e9:
                    d0:7a:85:cc:fc:35:5c:57:d5:2e:cc:0c:0b:d3:4f:
                    93:e9:86:1a:59:bb:4a:19:03:6d:43:a5:23:92:04:
                    61:06:1c:e7:29:00:e9:ed:45:3d:e9:94:55:5e:0e:
                    fc:2e:14:20:93:5a:37:86:8f:62:02:85:26:6e:e0:
                    a1:80:2a:f7:47:1c:62:c1:d4:45:8c:12:04:19:68:
                    70:f4:34:20:e7:9c:2d:67:63:88:94:ab:28:88:f8:
                    0f:e0:bd:42:24:b2:e1:18:2b:58:61:86:31:8c:22:
                    0f:1e:9b:a7:05:6b:29:f7:9d:23:30:91:a4:01:e8:
                    4e:84:65:f4:57:9f:16:3b:cc:3e:02:58:c3:c0:08:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:23:7F:06:A9:C0:CF:3B:2F:95:E8:F3:C5:BB:76:9D:DE:01:1D:EB
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:d2:34:ad:c9:0c:54:20:32:13:74:f5:45:46:19:09:6c:
         d9:7f:50:be:c4:f4:4b:77:0f:d3:3c:a6:d4:7a:40:9b:2a:d9:
         a0:7a:e7:91:f0:0a:10:81:a3:7f:c0:a0:65:b0:f2:ef:dc:b4:
         f9:c0:54:71:35:cc:8a:c3:4b:77:65:95:83:f4:90:6a:b0:a3:
         2a:7a:2f:42:9f:aa:ae:b4:3c:71:3b:d4:2c:c6:07:b5:61:67:
         12:51:8f:69:40:8a:70:62:40:b8:57:53:ed:f2:fd:30:fc:1c:
         17:55:36:a1:b7:0c:59:b5:46:d3:59:e6:48:bc:dd:2d:00:fd:
         27:85:58:99:3b:2d:61:c6:17:b0:07:8f:fa:aa:0f:ff:71:23:
         72:ac:31:89:40:03:cc:53:fc:4f:7d:75:7e:fa:6e:7a:7f:b5:
         b4:46:74:ab:87:72:6c:15:ea:16:bc:0b:e6:d4:1a:0f:1d:82:
         4f:31:a0:d0:f2:9e:94:91:4d:d2:3a:7d:98:80:94:5c:c0:1b:
         61:42:89:5b:00:22:82:94:dc:6e:91:9b:01:4c:f5:b7:22:6c:
         ff:3a:61:ab:9e:8c:42:dd:b6:da:59:e0:f4:43:ff:b4:dc:25:
         79:b7:92:28:97:35:ce:fb:b2:70:c6:72:47:15:0a:ca:b9:4f:
         5d:dc:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----