Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          gqOXovfdZ/BvV3rrGaXoDCNOJx5pm9GuO1bDc7mr7vo=
Subject key identifier:   E4:7B:E0:8C:CA:26:5C:FF:13:BE:D4:2E:8C:08:AD:40:05:0E:64:6D
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       019F8832D94BF392205CA8CE244CEAB8E6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          0996
Signing time:             Wed 22 Jul 2026 05:01:01 +0000
Manifest this update:     Wed 22 Jul 2026 05:01:01 +0000
Manifest next update:     Thu 23 Jul 2026 05:01:01 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: 0jfm/Ct2DFoM9jpVjKBNPpUCZTWl/pzZOj84F84Ggk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:88:32:d9:4b:f3:92:20:5c:a8:ce:24:4c:ea:b8:e6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: Jul 22 05:01:01 2026 GMT
            Not After : Jul 23 05:01:01 2026 GMT
        Subject: CN=e47be08cca265cff13bed42e8c08ad40050e646d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:f3:d9:57:2f:77:a6:d1:a8:0d:e8:2b:d6:
                    a2:b0:60:f0:3a:89:53:4b:4f:99:a3:60:35:86:ba:
                    0a:02:b9:19:52:ae:38:df:45:ce:3c:f9:2b:eb:03:
                    49:67:21:19:da:f7:37:9e:e3:e1:2d:56:74:4d:8d:
                    f5:94:1c:d1:c2:04:88:d6:ae:6a:8a:9e:c9:7d:cb:
                    fc:e6:e3:b3:4e:dc:4d:a0:31:5a:27:de:85:9f:43:
                    3c:76:b3:42:73:c6:09:db:c7:7f:c0:53:18:df:7b:
                    53:2b:72:58:1e:a7:fc:e5:56:9c:34:87:51:a7:8d:
                    3b:31:a3:3e:5e:75:81:38:3c:a6:60:8a:9d:8b:12:
                    79:24:20:a0:cb:a5:36:b6:40:36:92:13:40:9f:8b:
                    68:e0:8c:ec:09:7e:5e:bd:39:b5:af:dd:c0:69:4b:
                    4f:65:98:4e:7a:ac:a0:1f:3b:05:d0:3f:36:e1:1b:
                    f6:84:de:05:5f:37:ff:53:74:8f:3d:38:c0:72:66:
                    21:83:c4:c4:c4:e4:42:9e:c4:99:bd:c8:c6:79:94:
                    19:58:b5:36:77:a6:a5:02:3e:0e:5f:35:25:41:8e:
                    93:40:eb:b3:64:c6:01:dd:da:a6:2d:59:05:06:45:
                    8a:af:a3:c4:78:0c:c8:12:d5:5e:83:b7:af:86:ed:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:E0:8C:CA:26:5C:FF:13:BE:D4:2E:8C:08:AD:40:05:0E:64:6D
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:61:e0:c7:48:58:51:8f:a2:e2:2c:b2:74:ee:1d:d1:fd:
         6b:82:54:a6:df:d0:66:08:d9:d3:bc:cc:7b:f5:98:b3:54:6d:
         07:1d:59:0f:70:41:e1:54:3a:fe:ba:34:27:9b:93:13:a9:af:
         ef:92:26:93:13:06:57:9b:c3:df:af:f4:d5:d5:16:53:a2:58:
         d8:7a:52:15:eb:b5:34:b8:22:f6:ec:38:d9:aa:03:57:fe:87:
         35:29:a1:6c:df:e7:cd:fb:92:4a:96:97:c8:fc:d9:54:e2:c8:
         0a:48:59:f3:ca:6d:fb:27:43:a7:2c:1d:1d:bc:aa:77:74:33:
         03:fe:44:0c:24:93:b2:c2:9a:42:a6:d0:53:0a:ca:f1:71:00:
         4b:e6:4a:5e:47:b3:56:96:c0:ab:bf:7b:a6:07:f2:0e:59:a9:
         26:91:ab:a9:88:d8:fd:dc:0b:e6:85:72:d1:34:00:92:71:9c:
         46:33:cc:a3:a7:22:54:c8:14:ad:e6:5d:cf:fc:3e:60:fb:31:
         a1:d1:4c:21:15:bd:6e:5e:ca:e1:22:89:67:fa:5f:14:0c:0e:
         41:8f:e4:f2:b8:11:1b:54:3c:4c:eb:6b:81:39:14:5b:72:12:
         c0:7f:19:43:6e:0f:2e:eb:46:03:4d:b3:25:30:60:29:cd:e2:
         c7:77:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:42 2026 by rpki-client