Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File:                     48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier:          a4Sx5KGG2MOPhLhR+aCkEWLx/Kf5RU5Sh06p3qfSwck=
Subject key identifier:   81:44:B7:29:4A:0F:AE:37:6D:FB:05:2B:69:DD:B7:ED:49:25:C8:40
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer:       /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial:       019F236A3B7B0CEA2721C6415927A3E49D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number:          198D
Signing time:             Thu 02 Jul 2026 15:19:52 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:52 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:52 +0000
Files and hashes:         1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: 7/0npLkZ8+rfRDj4w/2cf7HNHhX9qG4cYwEiweHosjc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:3b:7b:0c:ea:27:21:c6:41:59:27:a3:e4:9d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
        Validity
            Not Before: Jul  2 15:19:52 2026 GMT
            Not After : Jul  3 15:19:52 2026 GMT
        Subject: CN=8144b7294a0fae376dfb052b69ddb7ed4925c840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:a2:ea:69:7d:e7:74:43:59:c1:b1:a3:1c:
                    65:fd:26:96:90:8d:be:08:eb:29:43:0c:2d:8f:97:
                    f4:46:fc:8e:38:b2:41:01:28:82:2a:56:28:72:9c:
                    25:c1:e7:29:5b:a1:df:af:8a:82:50:d1:e3:65:16:
                    72:6b:ce:cb:d8:fd:ba:99:4f:40:93:5a:02:86:cc:
                    c5:92:7d:37:36:22:b6:a3:28:3e:3d:06:74:78:c5:
                    e3:11:20:96:90:2a:62:d1:9e:3c:a9:f0:c1:26:68:
                    27:6d:90:81:0d:cd:db:82:14:1f:f5:1f:49:bd:d7:
                    ed:da:b4:19:e0:4d:96:2b:94:7c:20:e2:07:94:59:
                    25:ed:13:85:5c:4b:d3:4d:0c:3e:82:0e:cf:19:f0:
                    3d:43:d7:2b:6b:84:fb:94:a0:04:9b:37:66:88:d1:
                    ab:c1:f8:28:e2:a0:8c:86:29:f8:ab:42:7c:39:48:
                    51:60:e8:06:0f:2a:db:20:65:ab:57:65:a4:f3:30:
                    bc:92:d0:8b:b7:37:cf:54:a1:b7:b4:68:d5:67:79:
                    d2:b6:38:46:b8:31:cc:b5:61:a8:7d:b5:06:30:b8:
                    db:06:6e:a1:98:6d:7f:a5:e7:16:67:ca:ca:3a:46:
                    9f:90:ab:f9:04:74:4b:70:61:d7:dd:a4:27:85:63:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:44:B7:29:4A:0F:AE:37:6D:FB:05:2B:69:DD:B7:ED:49:25:C8:40
            X509v3 Authority Key Identifier:
                keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:8a:8d:9e:e0:b9:81:4c:77:8c:72:cd:a2:24:ee:1e:99:
         b2:fc:d8:c3:b2:ae:15:ef:49:c8:2f:90:ab:fa:a2:27:0b:4b:
         51:e5:5b:5f:59:2d:c0:0a:68:4a:30:1f:ab:d7:35:6b:31:96:
         1d:a7:e5:07:31:db:cc:36:f9:29:f5:23:8b:04:93:ff:48:78:
         5b:40:58:65:2f:0e:ca:b6:2b:51:86:f9:78:d5:e0:50:99:38:
         02:a5:50:c9:83:7b:66:d8:71:00:f1:95:d6:f4:75:2a:84:6a:
         46:6c:fd:a8:4e:08:44:a7:9c:66:0a:42:6d:08:1c:1e:ff:6a:
         35:85:41:76:3f:50:51:84:06:07:95:b2:42:01:20:78:77:b6:
         96:46:bb:61:c7:bd:d9:4e:22:cd:b4:f2:60:4a:20:e3:85:83:
         b8:40:6d:42:6f:fb:ca:ad:84:01:d3:af:4f:a6:ac:01:46:f6:
         4a:1b:d0:58:48:ce:90:6d:f3:be:50:32:36:e4:bb:24:16:5d:
         78:30:e9:7f:46:da:d6:ab:1d:a3:31:24:19:b0:dd:3a:11:ca:
         c2:0a:8a:50:2a:f5:81:b8:7b:df:97:d3:19:7f:9d:ed:d3:fb:
         a5:22:a5:73:16:28:d3:03:a6:65:12:7c:b2:c7:38:f1:25:64:
         7b:f4:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----