Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File:                     DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier:          maCtanejna/ytJE1KJxVfKE9m5Qe/8zpLJfzsvjtzDI=
Subject key identifier:   DE:84:55:0A:B1:A6:D2:06:60:80:E4:97:2C:57:9B:0A:2A:B2:EF:08
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer:       /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial:       019F2369E5776E3B3474A5066C6D50877CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number:          07A9
Signing time:             Thu 02 Jul 2026 15:19:30 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:30 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:30 +0000
Files and hashes:         1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: FjRFSlzUWNBoFqKXEoi8hXriIM4/ElG5jgkG7efwMlo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:e5:77:6e:3b:34:74:a5:06:6c:6d:50:87:7c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
        Validity
            Not Before: Jul  2 15:19:30 2026 GMT
            Not After : Jul  3 15:19:30 2026 GMT
        Subject: CN=de84550ab1a6d2066080e4972c579b0a2ab2ef08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:c1:61:dd:53:9a:f8:37:fe:5c:c4:3e:ab:
                    62:fa:e1:58:6f:13:48:58:ea:69:35:0f:74:dd:b9:
                    22:11:13:66:6a:b1:e4:49:d7:1d:79:d4:08:d8:59:
                    76:fa:58:aa:5b:e0:7d:23:0a:d1:98:e5:29:e0:63:
                    06:01:39:1e:90:0f:dc:95:47:b5:23:0c:5c:41:91:
                    94:68:ed:30:41:7d:36:27:93:66:fa:11:2e:da:e2:
                    c3:95:fe:59:08:fa:ab:4b:b4:4f:ec:fd:e6:e3:1b:
                    af:4a:20:4d:b4:1b:89:9f:a8:16:e7:02:c7:6d:9d:
                    ec:43:10:8c:54:60:14:db:78:1e:ba:a0:7a:04:c9:
                    c1:a9:95:e6:4b:41:88:35:07:4c:d9:f3:8f:1c:d8:
                    83:ef:49:de:b6:fc:46:23:6f:b2:e8:65:16:a4:12:
                    67:9e:49:74:f7:b7:90:92:94:67:3c:36:58:5a:31:
                    e8:6e:b7:66:ad:2b:75:b3:40:ec:2e:a9:c6:df:5e:
                    50:97:8a:7f:f7:46:6f:14:99:87:c4:61:c0:50:68:
                    6f:c6:6e:68:c0:4e:87:c5:98:1f:84:10:e0:71:9c:
                    62:ec:8a:25:03:21:8b:66:8b:d7:28:dc:c7:8e:d6:
                    d3:d7:ac:1e:ad:39:00:91:49:c7:ec:04:cd:59:3b:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:84:55:0A:B1:A6:D2:06:60:80:E4:97:2C:57:9B:0A:2A:B2:EF:08
            X509v3 Authority Key Identifier:
                keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:30:07:4c:02:cb:e4:eb:83:67:4a:77:41:a6:28:f4:0a:
         98:fa:ca:33:74:12:19:57:cf:65:f2:48:34:0b:03:9c:f3:55:
         38:13:e9:f8:31:4e:73:d9:59:d1:2a:ec:aa:5c:87:8e:c9:10:
         a2:23:3a:31:15:48:ac:57:2d:fd:12:18:dd:97:88:10:a4:25:
         38:01:8e:bd:83:d7:61:08:e0:99:89:33:32:7b:a0:1e:42:af:
         54:a9:b7:b8:d5:ea:7f:b5:e2:9c:01:f9:06:b2:27:3a:85:ce:
         04:a1:b4:30:43:a3:8e:2f:77:7e:c0:6c:50:4f:ca:cb:72:36:
         cd:51:0b:46:9e:f4:ba:c0:f6:d0:6f:5c:01:6b:ab:8d:f2:b4:
         1f:15:aa:30:65:46:73:1a:81:1f:ff:8b:f6:4f:6d:b7:a9:96:
         f3:51:2f:c2:b4:30:66:da:5a:61:1a:0f:08:c7:66:8b:4c:a5:
         2a:d7:72:9c:2f:39:50:30:3a:f4:63:bd:c0:eb:5b:4d:5d:8b:
         d8:fd:3f:71:2d:59:ac:9c:d2:ed:43:85:dd:cc:ef:b8:86:5e:
         34:ee:00:66:f5:1f:1a:6e:8c:e1:60:1c:80:f6:ba:73:6e:01:
         ef:59:62:d9:e9:48:37:26:98:56:bc:73:83:d0:0c:a9:36:84:
         20:db:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:44 2026 by rpki-client