Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
File:                     JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json)
Hash identifier:          knLbsrby6fL/e+1OrDQ+iNpn3/U5it6xjxv4jzIQcQE=
Subject key identifier:   C7:5E:DC:1A:49:6E:06:A5:72:66:19:71:E1:99:1C:1F:A5:DE:C7:18
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Certificate issuer:       /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial:       019B4F2923C8BF8AA5C6D185BEBE4983DDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
Manifest number:          1108
Signing time:             Wed 24 Dec 2025 07:00:54 +0000
Manifest this update:     Wed 24 Dec 2025 07:00:54 +0000
Manifest next update:     Thu 25 Dec 2025 07:00:54 +0000
Files and hashes:         1: BW4BmUKCyDozy984WvALErmmyWk.roa (hash: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=)
                          2: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: SNnam9YnUK9V4U8rFpcmgcUBznJ5mjYyZB34wgSYEIc=)
                          3: kRjRCT1hQD1ho57w--1uU8Vfnmw.roa (hash: hC2/HbU7Mf5QSInHXiOZZl8RFNv/DCEQb2nhsuAiYAk=)
                          4: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=)
                          5: mDIQfv7lheWlkNzFn-WZkIXBSMc.roa (hash: v+ukO0uJ0pKEoYLwa+X3bJdigzbF9dbIADjWYWJJUdY=)
                          6: wqeaVxmTKX-JD4H8O0LxYj5BDcA.roa (hash: z61rvdq/pxjCh7Rc2Im5uqBwppcKVRcSlRupK0edjoU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:29:23:c8:bf:8a:a5:c6:d1:85:be:be:49:83:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
        Validity
            Not Before: Dec 24 07:00:54 2025 GMT
            Not After : Dec 25 07:00:54 2025 GMT
        Subject: CN=c75edc1a496e06a572661971e1991c1fa5dec718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c0:32:b6:cd:64:5a:7d:09:95:5f:22:61:bf:
                    29:fc:f3:fa:76:d2:cd:c2:51:e2:4c:5f:cb:75:92:
                    a9:16:a7:df:61:2b:6c:fb:8f:02:62:89:cc:1a:9d:
                    7b:67:1d:46:a1:e5:c5:70:e5:49:86:3d:5c:9d:ee:
                    84:a8:c7:8a:04:60:8d:67:a9:2a:75:2e:a4:8c:68:
                    cf:15:80:a6:57:3a:d4:2e:0f:37:1f:b7:a4:5a:f3:
                    e1:56:90:b7:91:fb:32:1c:3d:29:a0:72:61:c4:a9:
                    8e:2b:a0:b1:52:53:a4:1c:99:95:5a:ab:4c:57:02:
                    4a:11:83:c6:7e:db:ee:c1:63:e2:3c:74:4a:60:c9:
                    1e:c1:f9:63:23:f8:f2:c0:62:8a:3f:97:78:64:af:
                    6e:b5:d5:5d:51:42:53:c2:7c:10:5f:ce:25:96:48:
                    31:ef:62:b8:25:84:62:60:73:6f:a4:c1:54:ee:73:
                    ee:d7:d2:16:ec:b3:4d:95:94:38:41:c5:cd:09:49:
                    5d:06:7a:b8:ad:a4:a8:63:3b:40:01:bb:2e:8b:ab:
                    31:03:ab:ad:1d:16:91:2c:33:80:34:cc:c1:cc:97:
                    82:39:8e:50:19:57:a4:5c:ae:6c:81:6a:25:80:2e:
                    d9:ed:b1:5f:d2:10:96:c3:f0:9f:4f:c7:e6:fe:47:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5E:DC:1A:49:6E:06:A5:72:66:19:71:E1:99:1C:1F:A5:DE:C7:18
            X509v3 Authority Key Identifier:
                keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:57:6f:e4:38:13:b3:5e:6a:ef:ca:67:a9:46:2e:d2:93:cf:
         67:2e:6f:3e:80:24:65:82:26:72:21:39:19:97:c6:d5:ca:78:
         ae:7a:61:5b:62:cf:b3:de:07:65:89:6d:49:01:77:72:4e:92:
         49:9f:e9:04:95:93:be:ca:65:33:74:cc:f4:84:c0:f9:36:0d:
         b8:97:48:6b:e5:7c:80:bc:f9:78:8c:55:fe:9c:b9:c8:b5:34:
         d1:25:2e:73:16:62:87:5c:d7:db:2d:c4:58:3a:87:6f:07:ab:
         cc:89:2a:6c:2d:df:17:c3:a4:c3:46:74:4d:08:bd:2c:b7:cb:
         28:51:f6:2f:7b:2c:d5:ae:6d:69:70:f9:30:37:a1:0d:f0:66:
         93:f4:a7:fd:47:c5:38:3d:bc:5a:d4:6d:30:93:d8:3e:25:56:
         b2:5a:ee:97:17:3a:8d:4a:c5:15:57:12:e3:87:cf:5f:4b:c4:
         19:82:73:46:c7:db:92:8e:8e:8a:9d:43:1c:0d:b5:70:fe:93:
         61:1d:d5:f7:91:9f:5c:02:3f:fe:1c:ae:32:c1:8c:7f:86:e6:
         1a:de:c8:70:f1:77:d5:c1:f0:9e:9e:51:89:af:57:44:e1:33:
         56:9c:8f:a0:0f:89:fc:4f:91:e4:73:07:1b:0e:ae:b3:3e:6b:
         40:c8:47:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtPKSPIv4qlxtGFvr5Jg92nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MTQ0MTE4OTlkNzIxZjM0M2VkMmEzOTYyOTk2OTQxN2I1
YjY1NWQwHhcNMjUxMjI0MDcwMDU0WhcNMjUxMjI1MDcwMDU0WjAzMTEwLwYDVQQD
EyhjNzVlZGMxYTQ5NmUwNmE1NzI2NjE5NzFlMTk5MWMxZmE1ZGVjNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78Ayts1kWn0JlV8iYb8p/PP6dtLN
wlHiTF/LdZKpFqffYSts+48CYonMGp17Zx1GoeXFcOVJhj1cne6EqMeKBGCNZ6kq
dS6kjGjPFYCmVzrULg83H7ekWvPhVpC3kfsyHD0poHJhxKmOK6CxUlOkHJmVWqtM
VwJKEYPGftvuwWPiPHRKYMkewfljI/jywGKKP5d4ZK9utdVdUUJTwnwQX84llkgx
72K4JYRiYHNvpMFU7nPu19IW7LNNlZQ4QcXNCUldBnq4raSoYztAAbsui6sxA6ut
HRaRLDOANMzBzJeCOY5QGVekXK5sgWolgC7Z7bFf0hCWw/CfT8fm/keulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMde3BpJbgalcmYZceGZHB+l3scYMB8GA1UdIwQY
MBaAFCYUQRiZ1yHzQ+0qOWKZaUF7W2VdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQt
MDIxNDQ1NTEyOTlmLzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQtMDIxNDQ1NTEyOTlm
LzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFdv5DgT
s15q78pnqUYu0pPPZy5vPoAkZYImciE5GZfG1cp4rnphW2LPs94HZYltSQF3ck6S
SZ/pBJWTvsplM3TM9ITA+TYNuJdIa+V8gLz5eIxV/py5yLU00SUucxZih1zX2y3E
WDqHbwerzIkqbC3fF8Okw0Z0TQi9LLfLKFH2L3ss1a5taXD5MDehDfBmk/Sn/UfF
OD28WtRtMJPYPiVWslrulxc6jUrFFVcS44fPX0vEGYJzRsfbko6Oip1DHA21cP6T
YR3V95GfXAI//hyuMsGMf4bmGt7IcPF31cHwnp5Ria9XROEzVpyPoA+J/E+R5HMH
Gw6usz5rQMhHmg==
-----END CERTIFICATE-----