Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
File:                     6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft (raw, json)
Hash identifier:          U6IGHj7d5e2ae6g/mOihwEDReBkavfi6GKCYaBQpzlc=
Subject key identifier:   7D:E5:04:80:6D:77:C8:59:57:DB:90:3B:45:13:E3:23:D7:68:8C:E5
Authority key identifier: E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3
Certificate issuer:       /CN=e87cc680c85983e7bf74498d0e6be800f86451c3
Certificate serial:       019B6D33CF243B5D93E87D7E2F2C6CD5DEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft
Manifest number:          12CF
Signing time:             Tue 30 Dec 2025 03:01:10 +0000
Manifest this update:     Tue 30 Dec 2025 03:01:10 +0000
Manifest next update:     Wed 31 Dec 2025 03:01:10 +0000
Files and hashes:         1: 5czwI2vRZo_4RHYYIBLuZDnwkFw.roa (hash: Y+z4NR6rDFuIHUPPqp6joY0nBRmymT8v6DqXJhnQC6I=)
                          2: 6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl (hash: ijFKmZCq3hNBlPbVOxzXPtbnK8DHwn97dXC0oQvP3o0=)
                          3: RV1OCO6rVYRRtTkZ3woaRdBKO6E.roa (hash: SuF4hxdu7ICIMIbu+gsmbKlo3zzUrtsEXjzwrCv9yIk=)
                          4: fbyo7xw7OVQjt-Z_risAcNBtcH8.roa (hash: QFqUQxFJMJ/HRIgpyInlcTMTKwfoUJaISjB36SzyexU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:33:cf:24:3b:5d:93:e8:7d:7e:2f:2c:6c:d5:de:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87cc680c85983e7bf74498d0e6be800f86451c3
        Validity
            Not Before: Dec 30 03:01:10 2025 GMT
            Not After : Dec 31 03:01:10 2025 GMT
        Subject: CN=7de504806d77c85957db903b4513e323d7688ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:01:e9:dd:31:e3:a4:02:71:4d:42:ec:46:
                    da:5e:68:4b:9a:6e:a5:f4:a9:11:f6:fa:dd:b2:b7:
                    33:3b:bb:71:30:c6:31:d5:85:cc:66:7c:34:f0:7e:
                    48:86:ac:62:bc:25:d5:b0:7b:1a:b8:1c:04:4d:13:
                    41:e7:45:2d:d3:28:d0:14:c3:5a:39:f3:0c:b3:51:
                    7e:90:16:a9:78:c8:d6:9c:7f:99:cf:5a:81:6b:e0:
                    c0:47:1a:f6:49:46:82:6d:6f:86:cd:52:8e:87:43:
                    f1:0c:1a:e4:d6:c4:ec:68:0e:a5:35:cc:fb:73:60:
                    ee:53:09:83:e4:53:27:cb:bf:9b:26:ea:0f:44:6c:
                    db:01:c6:b2:88:a8:43:fa:57:af:0c:52:d4:e5:33:
                    74:56:11:29:77:f5:9c:d4:ce:b8:9f:16:0b:f2:f1:
                    e7:e7:0f:4a:9e:9a:7f:a4:8e:07:5b:15:e1:6a:a5:
                    93:c0:5f:8c:25:2d:7c:88:9d:e6:61:3b:d3:56:bd:
                    3e:60:7f:a2:f1:44:b7:20:29:c9:11:ca:ac:20:b5:
                    b0:51:74:b5:09:ba:20:69:4b:49:19:54:ea:89:3c:
                    13:aa:aa:53:aa:3a:33:51:a8:3d:38:f3:06:f9:b6:
                    38:72:7b:20:48:77:d8:e0:44:57:22:e3:3a:aa:6e:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:04:80:6D:77:C8:59:57:DB:90:3B:45:13:E3:23:D7:68:8C:E5
            X509v3 Authority Key Identifier:
                keyid:E8:7C:C6:80:C8:59:83:E7:BF:74:49:8D:0E:6B:E8:00:F8:64:51:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HzGgMhZg-e_dEmNDmvoAPhkUcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/29af59-0b7b-4d80-8f9f-14d02e30d227/1/6HzGgMhZg-e_dEmNDmvoAPhkUcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1b:32:f7:e3:ce:7f:a1:8c:8f:60:7c:a5:bb:ae:f2:74:7c:
         22:ce:6f:f2:f8:37:7f:ce:bb:9d:32:5e:b6:44:6e:4f:b4:42:
         8f:42:a1:ba:8e:b7:e1:ec:7b:d6:c7:1d:63:29:d9:6b:2b:a6:
         db:dc:ae:eb:b1:f2:db:6a:f9:4c:f2:a7:ce:3d:29:10:f6:29:
         f1:2c:6f:92:11:aa:ed:4e:fa:a1:b1:3b:4d:47:42:16:5e:d7:
         60:74:00:9e:87:5a:1d:a3:92:5e:dc:2b:24:d2:78:1a:73:9b:
         4a:8f:5a:61:5d:f1:e5:17:91:77:3b:07:39:92:0e:d7:50:31:
         80:18:5f:24:e3:1b:13:e4:4c:3c:48:00:6e:13:f2:c5:32:45:
         84:5b:11:fa:a3:43:06:05:6e:3b:58:9a:c6:53:92:4e:92:c1:
         21:1f:05:f7:50:91:2c:a7:27:7f:0f:e3:07:39:28:fc:4d:dd:
         d8:dc:52:ff:0c:bd:9a:8f:13:51:ce:08:ab:fe:32:41:2e:bd:
         33:20:47:32:67:89:96:b9:cf:25:c5:30:f1:91:3a:36:e4:62:
         0c:07:86:c2:3b:2d:c2:8e:e8:6f:98:85:67:60:9d:c1:c8:40:
         d8:db:b6:cb:f4:1f:cc:a1:ce:e9:b6:29:c8:b9:0e:a7:84:f2:
         d2:bb:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----