Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
File:                     0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json)
Hash identifier:          oPE6Qo3vbLQEcBtR3OqasreMMJixgb7f4tN7SX6uA2c=
Subject key identifier:   2C:AB:2B:06:42:46:0A:84:30:A3:BF:C3:BE:D5:B6:56:4D:4B:BB:66
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Certificate issuer:       /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial:       01A01D8AD7F3225460D8947EC83EC252F8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
Manifest number:          0824
Signing time:             Thu 20 Aug 2026 05:00:33 +0000
Manifest this update:     Thu 20 Aug 2026 05:00:33 +0000
Manifest next update:     Fri 21 Aug 2026 05:00:33 +0000
Files and hashes:         1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: CyPJo8DMux4pTlKlU2hrrsga64s/dtEwFAKiWcGOO1s=)
                          2: HrnyfGcv9Sfocm0wEGAfceFq9V8.asa (hash: SGcSiNA09hzLvNRrjOccbxyQktZ5lS+27BWdLxQPqhM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1d:8a:d7:f3:22:54:60:d8:94:7e:c8:3e:c2:52:f8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
        Validity
            Not Before: Aug 20 05:00:33 2026 GMT
            Not After : Aug 21 05:00:33 2026 GMT
        Subject: CN=2cab2b0642460a8430a3bfc3bed5b6564d4bbb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:e4:9d:1f:16:58:6b:7e:d0:0d:a3:10:11:
                    e3:fc:03:4c:a1:fb:67:ce:dc:3e:6e:6b:3e:38:d8:
                    56:f4:63:6b:ae:67:35:a0:8d:90:22:3a:2b:6a:54:
                    5e:51:b0:03:d1:50:ab:a1:3c:90:20:2c:bb:c3:5a:
                    79:7f:4c:59:d7:21:cc:c7:d0:f5:ce:fb:d6:0e:8f:
                    2d:7d:05:36:4b:90:1f:2e:33:50:27:3d:5b:57:ac:
                    2b:2c:38:61:2d:13:0e:61:e6:33:c7:a6:a5:dc:55:
                    f3:af:24:66:72:ea:72:52:c1:9b:c4:d9:92:ed:6a:
                    73:11:e1:4c:e2:42:1b:87:8f:58:9e:b9:1d:c1:bd:
                    15:4e:13:33:1d:c3:91:ed:48:1f:15:17:ce:e3:4b:
                    7a:b2:71:f5:c1:e7:05:fd:8f:61:f0:da:03:3c:3d:
                    06:13:97:2f:55:a6:cc:5e:f4:ee:bc:09:36:76:eb:
                    b5:25:b4:e9:63:ef:38:91:2d:da:e8:45:d8:2c:5b:
                    9d:10:30:e7:2d:e6:2d:20:2c:c5:55:75:0f:95:31:
                    cc:62:21:4f:0c:21:25:33:af:f3:ef:57:9f:a7:73:
                    46:1e:7b:39:5d:d6:22:6d:31:70:5c:7e:cd:56:49:
                    4d:8d:23:73:5b:b7:d3:fc:fb:da:32:9d:af:98:e2:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:2B:06:42:46:0A:84:30:A3:BF:C3:BE:D5:B6:56:4D:4B:BB:66
            X509v3 Authority Key Identifier:
                keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:53:1e:7d:83:dd:cc:08:84:83:73:cc:6f:c0:f3:4b:c9:
         94:7f:ac:bf:54:17:99:3b:69:68:e1:f3:7f:d4:94:79:73:06:
         d8:d5:59:f7:d2:49:92:f4:fc:ff:3b:5a:fc:0d:64:9a:ad:9c:
         2d:d5:07:2b:fc:db:f5:91:e0:00:a1:df:df:4f:94:8f:52:40:
         b0:e1:a6:51:6d:f0:0f:46:5f:ea:af:85:17:87:ed:8c:ad:95:
         2c:22:28:5a:73:5e:9f:ec:df:7a:46:d3:36:43:45:58:52:17:
         a7:f9:65:87:fb:03:da:1b:8f:29:0e:58:85:4b:7a:49:10:79:
         a3:d0:1b:f2:56:06:4f:67:dd:d5:19:5b:29:8b:0f:e1:08:1e:
         10:26:1c:fa:0d:f0:ec:e1:1f:b8:50:27:1b:4b:a9:b2:e7:67:
         42:c5:e3:81:aa:f5:79:ee:8e:d7:b6:3b:9b:aa:fa:99:db:ba:
         57:c5:67:bc:53:e7:0a:62:77:1e:87:37:d2:e6:b7:31:1f:21:
         b1:52:63:0b:8e:9a:06:f7:c5:9d:9d:97:e5:89:d2:30:c9:39:
         e1:d2:93:45:92:05:10:d0:f0:ec:70:fc:1a:99:6c:a2:af:92:
         2d:e5:0e:06:16:6f:15:cd:32:53:27:49:f9:96:9f:f4:7b:d3:
         27:79:f3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAditfzIlRg2JR+yD7CUvi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm
ODQxNzIwHhcNMjYwODIwMDUwMDMzWhcNMjYwODIxMDUwMDMzWjAzMTEwLwYDVQQD
EygyY2FiMmIwNjQyNDYwYTg0MzBhM2JmYzNiZWQ1YjY1NjRkNGJiYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooHknR8WWGt+0A2jEBHj/ANMoftn
ztw+bms+ONhW9GNrrmc1oI2QIjoralReUbAD0VCroTyQICy7w1p5f0xZ1yHMx9D1
zvvWDo8tfQU2S5AfLjNQJz1bV6wrLDhhLRMOYeYzx6al3FXzryRmcupyUsGbxNmS
7WpzEeFM4kIbh49Ynrkdwb0VThMzHcOR7UgfFRfO40t6snH1wecF/Y9h8NoDPD0G
E5cvVabMXvTuvAk2duu1JbTpY+84kS3a6EXYLFudEDDnLeYtICzFVXUPlTHMYiFP
DCElM6/z71efp3NGHns5XdYibTFwXH7NVklNjSNzW7fT/PvaMp2vmOLZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyrKwZCRgqEMKO/w77VtlZNS7tmMB8GA1UdIwQY
MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt
ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3
LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfBTHn2D
3cwIhINzzG/A80vJlH+sv1QXmTtpaOHzf9SUeXMG2NVZ99JJkvT8/zta/A1kmq2c
LdUHK/zb9ZHgAKHf30+Uj1JAsOGmUW3wD0Zf6q+FF4ftjK2VLCIoWnNen+zfekbT
NkNFWFIXp/llh/sD2huPKQ5YhUt6SRB5o9Ab8lYGT2fd1RlbKYsP4QgeECYc+g3w
7OEfuFAnG0upsudnQsXjgar1ee6O17Y7m6r6mdu6V8VnvFPnCmJ3Hoc30ua3MR8h
sVJjC46aBvfFnZ2X5YnSMMk54dKTRZIFENDw7HD8Gplsoq+SLeUOBhZvFc0yUydJ
+Zaf9HvTJ3nzrA==
-----END CERTIFICATE-----