Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File:                     8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier:          8Si8XVjLx2Avbe8fIoEU4qetmX23l7QshjxkS+77Mmc=
Subject key identifier:   D3:5F:02:B5:D5:FA:4E:3B:39:89:31:31:98:C5:B6:B8:2F:50:3A:4D
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer:       /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial:       01A0419866031A51CEBA1C2FDCDC9D61D6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number:          09CD
Signing time:             Thu 27 Aug 2026 05:01:41 +0000
Manifest this update:     Thu 27 Aug 2026 05:01:41 +0000
Manifest next update:     Fri 28 Aug 2026 05:01:41 +0000
Files and hashes:         1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: Rf3m9uLny7hEx93PHMP1tNVU9y0zDBY58SCa8s6eitk=)
                          2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:98:66:03:1a:51:ce:ba:1c:2f:dc:dc:9d:61:d6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
        Validity
            Not Before: Aug 27 05:01:41 2026 GMT
            Not After : Aug 28 05:01:41 2026 GMT
        Subject: CN=d35f02b5d5fa4e3b3989313198c5b6b82f503a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:06:01:54:03:bb:73:ec:57:21:0d:d5:8a:60:
                    22:e6:1e:83:a2:c3:1d:36:4c:e1:b5:65:78:6a:9a:
                    bd:58:b7:70:33:11:8d:5a:7e:71:41:bb:bb:36:a6:
                    9a:c1:8a:31:97:66:a2:51:38:fe:36:05:c5:43:81:
                    d6:63:51:ba:6c:5e:40:f0:4f:27:ec:1e:4a:81:de:
                    61:d9:ff:50:27:5b:ee:58:58:f3:e0:03:4f:50:25:
                    ed:64:ad:35:57:58:a7:32:24:fc:5b:39:21:78:c0:
                    0f:bd:d6:6a:5d:1e:03:10:09:f7:77:6a:b9:2f:b2:
                    99:1c:98:49:2f:d1:5c:eb:1e:68:59:6f:9d:aa:b6:
                    98:e6:a8:f3:32:09:18:2b:db:22:b6:af:4d:b3:d3:
                    b4:31:ce:36:78:43:55:7a:02:c0:f0:d0:51:98:8e:
                    cf:ad:2e:79:ef:97:c9:ca:5f:73:e3:7f:b5:c6:e6:
                    3f:b2:7e:79:82:17:36:16:53:26:38:38:10:b7:2c:
                    f5:94:5f:03:91:e0:00:bc:0f:39:96:b7:e2:59:fb:
                    73:c7:2c:74:c6:c1:2a:15:7b:dd:18:ef:30:1d:47:
                    c1:b6:bf:db:71:0c:c0:5b:0e:8b:a9:c8:56:12:7d:
                    73:54:48:51:aa:f0:63:55:6a:e5:e5:d1:a1:28:0f:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5F:02:B5:D5:FA:4E:3B:39:89:31:31:98:C5:B6:B8:2F:50:3A:4D
            X509v3 Authority Key Identifier:
                keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:9e:bf:a4:0e:3a:6a:4d:3e:4f:4d:32:ab:d9:7d:98:b6:
         d5:f4:78:9e:50:64:a0:c5:a8:a9:b9:e6:c0:3b:aa:43:54:28:
         e3:bf:2b:10:8d:9c:29:92:72:bc:18:2b:24:38:ae:d1:a3:77:
         31:14:b2:d5:b9:a1:0a:16:68:f0:64:f6:9f:c1:be:c9:d3:a4:
         41:33:c1:bd:66:42:cc:98:f5:53:42:5c:b0:b2:10:ab:84:ce:
         c9:06:13:6a:e2:4a:e5:c4:dc:a7:f0:75:38:96:92:ea:6f:73:
         68:4f:30:5e:10:39:8f:58:97:73:91:2a:2f:a9:6a:32:8a:fd:
         d7:e5:4c:be:12:b5:4c:dc:ba:28:38:81:81:44:d1:b4:7a:a1:
         dd:25:fc:70:81:1b:7f:27:b0:bc:f3:0a:9c:a3:83:f2:3b:de:
         7f:12:04:4a:b5:5f:66:71:7d:d9:a9:5e:f0:4e:65:00:84:0f:
         77:ba:b1:47:9a:b8:bc:cc:84:d8:d4:30:49:dc:73:3a:ee:f0:
         81:6e:3e:0f:bf:69:d0:33:d7:42:3b:4d:aa:b4:44:5b:8d:47:
         81:4d:84:88:cb:aa:ce:9e:3e:89:dd:70:6b:1b:c5:d8:a9:59:
         1e:49:2c:01:e2:ae:53:0d:44:c3:ac:2b:d9:24:d5:18:b9:c4:
         f7:9a:9b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBmGYDGlHOuhwv3NydYda7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjYwODI3MDUwMTQxWhcNMjYwODI4MDUwMTQxWjAzMTEwLwYDVQQD
EyhkMzVmMDJiNWQ1ZmE0ZTNiMzk4OTMxMzE5OGM1YjZiODJmNTAzYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QYBVAO7c+xXIQ3VimAi5h6DosMd
NkzhtWV4apq9WLdwMxGNWn5xQbu7NqaawYoxl2aiUTj+NgXFQ4HWY1G6bF5A8E8n
7B5Kgd5h2f9QJ1vuWFjz4ANPUCXtZK01V1inMiT8WzkheMAPvdZqXR4DEAn3d2q5
L7KZHJhJL9Fc6x5oWW+dqraY5qjzMgkYK9sitq9Ns9O0Mc42eENVegLA8NBRmI7P
rS5575fJyl9z43+1xuY/sn55ghc2FlMmODgQtyz1lF8DkeAAvA85lrfiWftzxyx0
xsEqFXvdGO8wHUfBtr/bcQzAWw6LqchWEn1zVEhRqvBjVWrl5dGhKA8MVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNfArXV+k47OYkxMZjFtrgvUDpNMB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScuev6QO
OmpNPk9NMqvZfZi21fR4nlBkoMWoqbnmwDuqQ1Qo478rEI2cKZJyvBgrJDiu0aN3
MRSy1bmhChZo8GT2n8G+ydOkQTPBvWZCzJj1U0JcsLIQq4TOyQYTauJK5cTcp/B1
OJaS6m9zaE8wXhA5j1iXc5EqL6lqMor91+VMvhK1TNy6KDiBgUTRtHqh3SX8cIEb
fyewvPMKnKOD8jvefxIESrVfZnF92ale8E5lAIQPd7qxR5q4vMyE2NQwSdxzOu7w
gW4+D79p0DPXQjtNqrREW41HgU2EiMuqzp4+id1waxvF2KlZHkksAeKuUw1Ew6wr
2STVGLnE95qbXg==
-----END CERTIFICATE-----