Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File:                     t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier:          ndw+iTXffEelnoMFrTjppaGihw4+w9nJCTuyuABklbo=
Subject key identifier:   0E:8F:74:F8:2B:8C:0F:CE:3D:5A:B6:FD:66:03:61:D8:ED:44:D9:DD
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer:       /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial:       019B9B8CF0AA5A1936BE1C9A8463540CA413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number:          0E4E
Signing time:             Thu 08 Jan 2026 03:01:03 +0000
Manifest this update:     Thu 08 Jan 2026 03:01:03 +0000
Manifest next update:     Fri 09 Jan 2026 03:01:03 +0000
Files and hashes:         1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: h1UdR1EusILnK7/eWUYz85XsuvgssfxC8+BZdUCSup4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9b:8c:f0:aa:5a:19:36:be:1c:9a:84:63:54:0c:a4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
        Validity
            Not Before: Jan  8 03:01:03 2026 GMT
            Not After : Jan  9 03:01:03 2026 GMT
        Subject: CN=0e8f74f82b8c0fce3d5ab6fd660361d8ed44d9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:58:5f:2c:2e:88:ac:e8:0b:bf:09:8a:78:
                    29:f6:ed:e6:3e:2f:df:a7:35:98:9b:db:76:8e:e9:
                    c3:55:06:32:1a:c9:9d:95:28:80:f2:3e:23:72:8b:
                    eb:bd:b8:e2:67:fd:6c:26:5d:cd:19:1e:0b:f7:bf:
                    4b:19:99:0d:f3:ff:7d:e9:e4:e7:82:01:29:a0:c5:
                    7c:73:09:c8:94:09:92:31:7b:4f:2d:87:be:58:fb:
                    eb:aa:a5:e6:39:c1:5f:f5:4d:23:93:41:2a:83:cd:
                    ce:19:75:2b:63:b4:5b:9c:94:79:ff:2a:80:fd:7f:
                    e6:e1:c7:d5:f3:a5:e6:28:d8:eb:c9:e6:b4:23:2a:
                    fb:4a:cc:75:f4:58:f0:f2:7e:e1:f6:0f:1c:e5:0a:
                    ed:15:50:e8:03:78:e9:38:d2:9c:c1:be:81:37:a8:
                    ad:dc:bd:7e:95:84:f6:c7:47:b9:ca:3c:c5:58:43:
                    7b:03:7f:9a:a0:66:3b:1d:41:9e:fb:da:ae:d9:d6:
                    70:98:49:ee:f5:7c:44:4b:29:b8:65:d7:40:07:9f:
                    19:43:5d:74:c7:7c:57:f0:3a:27:f0:bd:61:b0:29:
                    13:4f:9c:4f:02:93:01:6c:49:3d:83:52:23:61:76:
                    cc:1b:bc:bf:1e:29:1d:d9:eb:f9:a0:bc:8e:61:f5:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:74:F8:2B:8C:0F:CE:3D:5A:B6:FD:66:03:61:D8:ED:44:D9:DD
            X509v3 Authority Key Identifier:
                keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5d:03:25:a4:a8:bc:3f:f3:d7:2f:bf:ec:fe:26:82:d4:3e:
         f9:84:e7:70:83:d6:7f:08:c8:e6:78:3b:56:84:74:11:ff:b3:
         81:8b:ad:01:0d:5b:e0:a4:e0:f9:c7:7d:34:b5:23:31:3b:88:
         c9:ef:1c:9a:3a:53:63:72:48:d4:fb:0e:5b:cd:4b:20:db:83:
         34:e8:0b:0c:6a:ba:7c:62:2c:63:86:96:67:87:4f:f7:08:57:
         79:a2:f9:f1:00:05:e8:fe:3a:1d:b2:c9:77:85:34:b0:56:39:
         82:97:dd:bc:53:1d:24:63:38:5d:09:2d:01:aa:03:6c:c4:c0:
         fa:9b:89:f2:94:3f:3f:6b:08:cf:df:69:10:41:78:a8:31:0a:
         d5:e8:d2:69:e5:55:37:b2:c5:79:0e:87:bf:3b:cb:28:99:c6:
         c1:f4:15:43:a0:3b:b2:95:4f:29:f0:4a:ed:ed:41:57:34:fb:
         ec:4f:96:dc:ba:61:1d:87:2b:1a:b0:2e:d4:89:38:64:30:96:
         1e:91:86:21:f1:2c:fe:eb:cb:26:d7:31:7a:ad:d4:e6:af:24:
         0f:63:e9:63:59:ef:1b:ec:1f:79:c9:65:15:f8:15:65:62:7a:
         ae:a1:68:77:06:0b:14:a8:fa:fd:2e:9d:9d:99:8b:99:18:97:
         7d:39:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:39 2026 by rpki-client