Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File:                     A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier:          bYBkcO0YZMmHnwX0y2z00p0cTRm/WJP46P/aef+K2QQ=
Subject key identifier:   EE:17:43:AF:98:02:CD:24:03:86:6D:E2:37:0E:D2:84:18:C4:44:ED
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer:       /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial:       019C4C25333E212B7790086AF9417D14821A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number:          17A2
Signing time:             Wed 11 Feb 2026 10:00:32 +0000
Manifest this update:     Wed 11 Feb 2026 10:00:32 +0000
Manifest next update:     Thu 12 Feb 2026 10:00:32 +0000
Files and hashes:         1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: kAeEtyAUuR+hiycmL5tB7v0ugJAvju4j6oRGlF0UHOY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:25:33:3e:21:2b:77:90:08:6a:f9:41:7d:14:82:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
        Validity
            Not Before: Feb 11 10:00:32 2026 GMT
            Not After : Feb 12 10:00:32 2026 GMT
        Subject: CN=ee1743af9802cd2403866de2370ed28418c444ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:e2:61:19:9e:33:27:b5:e9:48:72:1d:a9:
                    44:fe:ee:c9:f4:13:c6:17:14:4c:98:f0:9a:7f:7b:
                    59:5b:ff:2d:19:08:cb:19:5f:08:2b:7f:98:ce:5b:
                    2e:bc:8d:21:3a:7d:b2:28:0d:1c:4d:50:8b:f7:d8:
                    48:1f:77:b8:bd:fb:81:b2:17:dd:1e:06:6c:cf:be:
                    76:af:66:1b:c0:d9:a6:87:d8:d3:be:24:42:b8:5d:
                    55:51:4a:1f:57:ba:73:cd:7d:21:22:60:c4:4f:49:
                    b9:c7:a5:4b:80:b7:d9:d0:8f:c3:2a:b6:a4:64:68:
                    b9:73:9b:43:98:80:99:dc:7e:da:cd:25:d9:e3:c0:
                    e6:1d:45:5c:e4:ab:e9:68:f0:e8:3f:6d:d9:16:bf:
                    73:6d:31:21:33:76:1e:a1:3d:58:78:53:7a:14:0b:
                    9f:f5:90:6f:94:04:d6:66:c9:fc:41:5c:67:59:30:
                    32:03:e0:c6:a2:ef:2c:d6:ff:77:f1:eb:7f:f0:b3:
                    0e:8f:33:5d:2a:84:32:53:91:e2:94:8b:a0:87:33:
                    9e:31:1d:9d:93:8b:da:5e:1b:8f:f0:63:4b:80:a9:
                    dd:82:82:1e:a4:87:57:84:00:80:fb:8a:e0:07:df:
                    60:d0:4d:a4:5e:c0:4b:e1:c7:99:70:7c:3f:e0:0b:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:17:43:AF:98:02:CD:24:03:86:6D:E2:37:0E:D2:84:18:C4:44:ED
            X509v3 Authority Key Identifier:
                keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:a1:eb:62:f4:76:5a:12:62:a8:32:c6:fa:f1:0e:73:4e:
         9e:17:b7:b6:00:c0:b0:35:70:40:0a:e6:80:82:29:30:73:a2:
         c4:2e:68:c2:3f:5a:31:25:61:e1:b6:a4:ca:c5:6d:71:00:2e:
         40:73:a5:86:7c:65:44:0d:e8:9b:3e:58:f9:94:17:58:a8:64:
         36:43:df:7a:6b:2c:bc:cc:c9:c7:5b:9f:1b:ff:46:19:62:70:
         e3:58:31:4a:62:d2:79:0e:f3:1b:f2:80:30:30:16:6e:c4:da:
         8f:2c:73:1f:82:5b:ab:13:87:d2:a2:29:bd:79:93:85:44:8f:
         df:20:6d:44:92:31:17:4f:31:b4:ad:99:c5:64:37:a7:44:52:
         6e:4a:65:91:10:cf:f2:3a:15:84:d7:61:e9:4c:9a:d6:2b:96:
         84:34:60:92:da:bc:c2:07:97:3b:04:20:9b:b6:f9:8b:3b:30:
         36:f9:3b:58:83:2c:7b:b6:9d:91:46:e4:b6:a9:2a:5b:51:b3:
         a0:30:a6:c9:85:87:fd:1f:89:6f:5a:e9:50:0d:f8:30:75:8b:
         e3:19:cd:3c:a8:04:3a:45:43:f7:d0:fd:8b:87:eb:e0:a2:51:
         89:1e:a5:1a:95:0d:66:29:00:47:6c:b9:e8:f9:11:86:17:57:
         1c:91:f3:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxMJTM+ISt3kAhq+UF9FIIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTBmNDYxYjhjNTFiMjAyYjIxMDBkZjJjYzQzMzBmNjky
MjE4YzEwHhcNMjYwMjExMTAwMDMyWhcNMjYwMjEyMTAwMDMyWjAzMTEwLwYDVQQD
EyhlZTE3NDNhZjk4MDJjZDI0MDM4NjZkZTIzNzBlZDI4NDE4YzQ0NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcjiYRmeMye16UhyHalE/u7J9BPG
FxRMmPCaf3tZW/8tGQjLGV8IK3+YzlsuvI0hOn2yKA0cTVCL99hIH3e4vfuBshfd
HgZsz752r2YbwNmmh9jTviRCuF1VUUofV7pzzX0hImDET0m5x6VLgLfZ0I/DKrak
ZGi5c5tDmICZ3H7azSXZ48DmHUVc5KvpaPDoP23ZFr9zbTEhM3YeoT1YeFN6FAuf
9ZBvlATWZsn8QVxnWTAyA+DGou8s1v938et/8LMOjzNdKoQyU5HilIughzOeMR2d
k4vaXhuP8GNLgKndgoIepIdXhACA+4rgB99g0E2kXsBL4ceZcHw/4AuEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4XQ6+YAs0kA4Zt4jcO0oQYxETtMB8GA1UdIwQY
MBaAFAOQ9GG4xRsgKyEA3yzEMw9pIhjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMt
ZDAwMTdmY2Q0MmYxLzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMtZDAwMTdmY2Q0MmYx
LzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisuh62L0
dloSYqgyxvrxDnNOnhe3tgDAsDVwQArmgIIpMHOixC5owj9aMSVh4bakysVtcQAu
QHOlhnxlRA3omz5Y+ZQXWKhkNkPfemssvMzJx1ufG/9GGWJw41gxSmLSeQ7zG/KA
MDAWbsTajyxzH4JbqxOH0qIpvXmThUSP3yBtRJIxF08xtK2ZxWQ3p0RSbkplkRDP
8joVhNdh6Uya1iuWhDRgktq8wgeXOwQgm7b5izswNvk7WIMse7adkUbktqkqW1Gz
oDCmyYWH/R+Jb1rpUA34MHWL4xnNPKgEOkVD99D9i4fr4KJRiR6lGpUNZikAR2y5
6PkRhhdXHJHzpg==
-----END CERTIFICATE-----