Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
File:                     7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft (raw, json)
Hash identifier:          S9rSfzf2/kt1D4xIpWOQZUoVgNZ1u0VZDTNDWguShrc=
Subject key identifier:   F2:DA:A3:97:C1:26:E4:8E:E9:34:B5:CA:D5:83:21:6C:5D:E7:30:9C
Authority key identifier: EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81
Certificate issuer:       /CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
Certificate serial:       019D7632F7C97B6F480C427B51A18DC5B609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft
Manifest number:          07AE
Signing time:             Fri 10 Apr 2026 07:02:24 +0000
Manifest this update:     Fri 10 Apr 2026 07:02:24 +0000
Manifest next update:     Sat 11 Apr 2026 07:02:24 +0000
Files and hashes:         1: 7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl (hash: o5wpEQcTIkxhaIkH6rtuMwPYhfHF0Esr3ZT4NgnG5dg=)
                          2: QPj7fUSgBwDGuqI3uOke_219sUg.roa (hash: xwpTnDBnhQJQT2QP9/pCYeUK0xXfracIKnGvu54bOIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:32:f7:c9:7b:6f:48:0c:42:7b:51:a1:8d:c5:b6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65f246bfc1ea8fc386c86dd49fbaa8d88c4881
        Validity
            Not Before: Apr 10 07:02:24 2026 GMT
            Not After : Apr 11 07:02:24 2026 GMT
        Subject: CN=f2daa397c126e48ee934b5cad583216c5de7309c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:39:cc:ea:9f:fd:c6:75:d0:33:9c:51:1f:
                    86:d4:b9:27:f1:36:d9:8b:48:78:0d:4b:f6:93:99:
                    9d:84:3e:91:c7:06:47:f0:f0:25:65:45:ab:f8:90:
                    ff:db:2c:c6:61:1f:da:79:4b:27:9a:8e:4f:3d:a2:
                    cf:0d:4d:52:36:ab:0c:db:0d:82:5e:58:22:3e:00:
                    d9:4c:2d:87:00:13:0d:29:e3:8c:4c:b2:e7:ca:33:
                    0b:b7:bf:88:8e:12:30:ff:93:9c:a4:f6:75:c7:74:
                    cd:68:17:65:d4:8f:08:03:ec:99:58:d9:2a:04:c3:
                    d4:94:8c:e7:6b:d0:37:55:fa:b8:a8:6e:dd:68:e8:
                    24:82:29:7b:f0:60:d3:78:08:3a:28:93:20:53:7c:
                    54:67:07:92:8e:e0:96:77:bc:2a:c7:d7:12:95:10:
                    b1:47:65:cd:4f:12:6c:a9:72:4b:6c:8c:fe:8e:83:
                    55:b1:79:e7:da:44:5d:6c:2e:34:c6:52:0a:8c:53:
                    0c:bd:fe:78:2e:46:ab:68:f9:2b:ff:61:47:ce:78:
                    70:98:17:6d:6a:74:39:20:5e:b4:5c:b1:fd:80:a1:
                    74:ae:03:4c:32:5d:d0:7b:5a:62:3c:d8:0c:28:d5:
                    bf:fa:f7:bb:60:a4:48:5c:b6:d5:c8:fe:cb:fb:c8:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:A3:97:C1:26:E4:8E:E9:34:B5:CA:D5:83:21:6C:5D:E7:30:9C
            X509v3 Authority Key Identifier:
                keyid:EC:65:F2:46:BF:C1:EA:8F:C3:86:C8:6D:D4:9F:BA:A8:D8:8C:48:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXyRr_B6o_Dhsht1J-6qNiMSIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/7GXyRr_B6o_Dhsht1J-6qNiMSIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4c:24:ae:ba:1c:a7:71:b5:c2:a4:01:02:93:4a:92:89:93:
         b0:7d:88:c3:e5:34:05:4c:8e:59:6c:2a:23:f6:7e:74:ba:b9:
         d3:73:1e:ef:57:c4:7f:ad:a4:f2:4f:b8:19:04:b1:5d:e2:a6:
         e7:1b:01:c8:6f:a4:27:a1:8b:df:c5:f6:06:d5:90:05:b7:17:
         58:b1:f0:07:96:7a:d1:99:fb:ad:2d:38:a7:b9:97:ac:8d:b9:
         45:84:29:1e:5d:c4:dc:26:2c:af:fc:02:69:ed:56:5e:0c:f7:
         70:12:41:68:4a:38:21:2e:0d:52:3e:9f:6b:9e:60:4e:92:a2:
         42:6f:5e:03:2f:d1:90:3a:1a:16:22:ff:e8:57:8e:9a:2b:44:
         8f:33:7a:4f:58:4b:f1:4a:07:b8:16:37:91:21:93:0e:77:24:
         19:d3:47:8c:77:33:ef:d6:0e:b8:99:fa:4c:11:f4:26:77:7f:
         e7:51:0c:15:2a:b8:fd:da:13:fe:80:87:cf:ef:5e:23:79:9d:
         6a:f7:6c:f9:a3:15:65:3f:78:a7:9a:30:92:11:42:75:07:58:
         e1:2e:15:97:e5:a8:6c:1e:44:13:c8:01:67:a0:f3:c0:73:21:
         28:19:47:c0:e6:07:08:15:23:e4:db:04:88:f6:0b:15:29:58:
         56:d4:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----