Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          FvdBXHWDKEkrMmwUtGhrU0eIyjEir2yv6tT1TRXJBHw=
Subject key identifier:   2F:DE:40:A1:66:8F:0B:F7:21:A4:15:2B:62:E5:DE:7E:38:D7:7D:2B
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019F236974C7921C428FC84F0EA3FC45EACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          19A8
Signing time:             Thu 02 Jul 2026 15:19:01 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:01 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:01 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: /5DbIU2CB9lSW3RuOT5Y7sADKSTWa6acCFw0qlSTr68=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:74:c7:92:1c:42:8f:c8:4f:0e:a3:fc:45:ea:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jul  2 15:19:01 2026 GMT
            Not After : Jul  3 15:19:01 2026 GMT
        Subject: CN=2fde40a1668f0bf721a4152b62e5de7e38d77d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:50:7e:1c:44:23:08:9b:a0:f0:cc:ed:22:
                    0f:9e:ff:4a:e1:8b:c5:c6:f3:86:7c:a0:aa:e1:71:
                    82:d2:a2:d2:0e:a0:55:a4:95:13:38:8e:94:b7:27:
                    e6:09:2e:96:48:1c:18:dd:28:34:ff:40:7f:47:0b:
                    33:d5:16:d0:d6:bf:c0:6c:77:2f:bb:f7:11:f2:01:
                    b5:18:25:5f:7c:10:73:55:75:8d:0b:73:c1:47:ba:
                    85:d4:f9:c4:ad:a1:47:a7:a6:99:4f:3c:b5:e3:54:
                    4d:6e:52:1d:15:15:25:c9:93:6d:a1:c3:0b:2f:88:
                    ef:8b:76:1d:05:eb:2f:60:c1:47:32:dd:f6:35:5a:
                    06:1d:27:5f:e0:bd:51:6d:0d:d2:78:ec:03:07:70:
                    88:25:63:76:95:61:5b:d1:68:d2:02:b8:1a:13:f0:
                    6a:3f:80:7f:02:c2:f2:08:5e:53:e9:dd:c3:ef:88:
                    8d:cf:ed:2b:be:bf:8b:73:5c:40:0d:b1:76:76:a3:
                    a7:7a:e1:ae:de:f9:fd:e2:6f:f8:99:d8:fa:b7:a9:
                    eb:1d:dd:59:40:f6:18:43:dc:b7:ec:f5:df:88:00:
                    f3:fa:3a:77:17:30:a5:60:e7:65:52:9b:d4:b1:b4:
                    78:a7:7d:05:dd:88:f8:b2:0c:2b:93:90:4d:b8:a4:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:40:A1:66:8F:0B:F7:21:A4:15:2B:62:E5:DE:7E:38:D7:7D:2B
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:25:a6:12:c9:eb:b9:bf:11:04:a1:a3:46:22:c4:16:e5:7e:
         2d:f9:80:3e:01:0d:3b:5d:dc:21:ec:8d:77:2c:a8:47:ad:08:
         dd:57:ef:09:9a:a5:57:82:2d:f6:4a:56:08:1d:ac:24:4c:28:
         4a:b6:48:c7:ca:44:d8:da:2b:20:81:c0:c7:43:f4:d7:2a:88:
         4f:30:3c:c3:d8:66:00:3c:4e:6a:42:38:cb:d8:ed:be:dd:fe:
         ab:1e:4c:01:94:72:33:72:c6:81:43:03:64:d9:f1:f9:4d:09:
         e2:a4:aa:60:38:0b:1a:a5:c3:93:85:fc:f4:a9:d9:74:2a:23:
         4d:fc:c9:bc:61:cc:1c:9e:1f:d3:d9:b8:41:cf:58:ce:2f:6b:
         92:f9:05:cf:ae:ea:20:06:32:d6:c5:97:1c:02:79:10:74:4e:
         3f:15:8c:7e:7a:a9:19:ca:40:68:b9:4b:71:7c:d3:9e:c5:2c:
         cb:ca:01:7b:ce:9a:c4:03:1f:57:70:56:f0:dd:53:c6:56:91:
         b1:a2:ee:9f:1b:a0:56:c8:ad:e7:c6:cb:fd:e2:05:21:0f:13:
         18:fc:ed:14:07:54:f1:28:89:3d:3c:d2:7b:0d:ff:07:46:bc:
         6b:89:79:17:e4:61:a6:15:a0:ad:ae:5f:61:88:34:3d:46:ff:
         6c:7e:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:18 2026 by rpki-client