Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File:                     DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier:          vZIKQIk/lehbNcYjKyJi70hz3pPNx00ZNe8D8H1yyDk=
Subject key identifier:   85:D9:3A:64:34:E9:42:9D:8B:AA:82:24:6B:C5:8D:6D:C4:42:E5:8F
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer:       /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial:       019F236A3AE915A227611EE77909BB3E310C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number:          1992
Signing time:             Thu 02 Jul 2026 15:19:52 +0000
Manifest this update:     Thu 02 Jul 2026 15:19:52 +0000
Manifest next update:     Fri 03 Jul 2026 15:19:52 +0000
Files and hashes:         1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: GkGXR2FD3CPNaRfe7dh0iPX0LpQsr1H81RRsmiPCodg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:6a:3a:e9:15:a2:27:61:1e:e7:79:09:bb:3e:31:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
        Validity
            Not Before: Jul  2 15:19:52 2026 GMT
            Not After : Jul  3 15:19:52 2026 GMT
        Subject: CN=85d93a6434e9429d8baa82246bc58d6dc442e58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:5c:c2:af:12:e7:ff:46:e4:c5:71:ca:cd:
                    0f:a3:31:39:0d:c9:78:f3:72:53:c0:5f:f1:27:38:
                    b2:fc:98:33:9e:ac:cd:d0:1a:5a:a7:d0:4a:8f:ec:
                    8e:3a:da:cb:6f:eb:81:13:e7:37:e8:14:b1:4c:3b:
                    a9:5e:81:d1:4a:f6:13:a6:02:2c:70:44:7d:c2:c5:
                    db:a1:99:30:e5:9d:67:19:8e:32:fa:cf:22:e2:c2:
                    f5:ff:83:b7:21:01:08:69:b6:b7:5c:93:1c:dd:16:
                    26:b7:8d:48:2a:da:06:c6:a4:01:18:33:27:15:29:
                    17:8d:cb:7d:ab:f4:88:d8:ad:9e:07:1f:90:61:5a:
                    43:7e:c0:77:d0:47:54:fd:47:99:de:40:08:19:17:
                    80:48:db:44:89:25:7c:12:ce:fd:c0:a5:d8:01:9b:
                    74:1f:2c:12:2d:be:ea:35:8a:30:84:e3:e6:a8:38:
                    46:e7:48:7d:60:69:1a:f0:90:38:b9:ea:31:7f:14:
                    11:ad:0d:17:ee:3f:2e:dd:58:df:f2:66:ac:29:d2:
                    fe:96:53:a5:fa:c4:f6:fe:21:f2:59:26:e6:e7:5a:
                    14:a9:a3:9b:a6:0e:cb:07:f2:e7:73:8e:d1:c0:fc:
                    52:22:5a:90:00:3e:02:ad:07:84:a8:88:f8:b5:1f:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D9:3A:64:34:E9:42:9D:8B:AA:82:24:6B:C5:8D:6D:C4:42:E5:8F
            X509v3 Authority Key Identifier:
                keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:30:8d:60:2d:89:08:4f:29:00:b7:fe:4b:e9:2a:b4:8f:
         84:99:9b:dd:c9:06:6f:d2:44:c9:c1:5f:67:18:21:a3:ed:e0:
         41:7c:10:f5:e8:87:a6:26:aa:ed:a9:cf:58:2f:b6:99:f7:5c:
         38:f1:21:54:31:87:41:71:56:1b:3c:ba:b2:bb:02:e2:2f:c4:
         3b:13:f0:74:84:6f:37:15:b0:36:b9:4b:5d:ae:4a:9c:41:51:
         fa:9e:51:45:d4:33:0a:4c:b3:4b:7b:74:44:71:8a:68:ea:20:
         91:71:bd:52:1e:d3:f8:ae:ab:ec:e1:ee:23:85:da:eb:b4:af:
         3c:03:2f:a4:af:bc:1d:38:68:10:b4:0e:c4:59:25:f3:95:63:
         31:40:56:d8:e1:75:ee:70:5c:6f:cd:a3:1c:17:b9:0e:b9:e9:
         7b:e6:41:8c:48:92:ee:86:c6:cd:ba:c9:7a:2d:ab:23:54:e6:
         c7:6e:2f:e9:92:9a:38:d6:b0:fa:be:df:45:91:d4:e4:5d:d5:
         02:c7:47:43:66:2e:3b:66:61:a9:25:df:bc:b2:c7:c1:27:94:
         cb:21:7f:7e:70:88:3c:42:a7:be:04:9d:db:a1:05:2e:61:4f:
         d8:10:f1:91:eb:f9:e7:62:fb:aa:b5:d9:a8:96:f6:ab:5b:81:
         de:6a:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:21 2026 by rpki-client