Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
File:                     258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json)
Hash identifier:          zxN/8dKwe0SFEfQ2rYJOUhxhaztDoQ17Ow9MZDRkSIM=
Subject key identifier:   4D:BE:3E:9E:9A:28:93:7B:99:64:48:F4:D3:85:5B:61:C9:42:48:DD
Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A
Certificate issuer:       /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
Certificate serial:       328C79940A7DDFA16C38E81588DE2299270E9A14
Authority info access:    rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
Manifest number:          E6
Signing time:             Sat 11 Apr 2026 21:20:32 +0000
Manifest this update:     Sat 11 Apr 2026 21:15:32 +0000
Manifest next update:     Sun 12 Apr 2026 23:43:32 +0000
Files and hashes:         1: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: Njcy7RT0m6OPTWY1Ns+Qc0Iw4Z2z8jxDATfNmVwSq4g=)
                          2: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=)
                          3: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=)
                          4: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=)
                          5: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=)
                          6: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8c:79:94:0a:7d:df:a1:6c:38:e8:15:88:de:22:99:27:0e:9a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
        Validity
            Not Before: Apr 11 21:15:32 2026 GMT
            Not After : Apr 12 23:43:32 2026 GMT
        Subject: CN=4DBE3E9E9A28937B996448F4D3855B61C94248DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:d4:46:49:91:00:76:a3:60:82:40:97:b4:
                    ec:cd:48:10:9b:bb:42:f4:4b:f1:6e:4c:90:cc:c0:
                    1f:bf:ce:10:55:27:de:6d:21:c2:d2:17:be:aa:03:
                    c8:2b:10:9a:28:d1:d8:a9:57:aa:16:d0:b8:c2:9b:
                    77:44:04:d2:d2:87:71:32:d6:3f:90:bb:e7:ce:a8:
                    f3:b6:07:b2:44:e3:43:c5:31:64:b7:b5:87:cb:4a:
                    23:fb:6a:11:12:03:a3:6f:fb:bb:66:53:c3:69:c5:
                    33:12:eb:6c:a3:17:1e:00:21:a2:2e:7d:01:ef:e1:
                    f2:8f:f6:81:55:b6:eb:e0:81:6f:84:07:57:d2:45:
                    e3:9a:b8:97:2c:a0:84:6e:b1:e1:6a:ab:1f:48:ed:
                    da:b3:2f:0b:c8:3c:0d:35:fb:2e:40:79:f8:8b:0e:
                    46:f0:c6:0a:e8:32:27:93:0a:eb:e4:2c:74:bd:0c:
                    21:b0:c0:16:56:95:0e:7b:81:6e:af:1d:2c:bd:f7:
                    53:0b:74:53:02:19:42:0a:55:3c:f1:3f:6a:5f:49:
                    8d:e3:39:d2:57:b5:72:d9:10:11:8f:cb:40:ce:89:
                    ad:c8:f3:53:65:4b:90:45:77:7c:2b:bc:71:94:bb:
                    04:e7:05:c7:d2:13:9a:9d:c1:aa:57:4f:97:74:6b:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BE:3E:9E:9A:28:93:7B:99:64:48:F4:D3:85:5B:61:C9:42:48:DD
            X509v3 Authority Key Identifier:
                keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:35:bd:0f:78:5d:e4:f6:0b:48:72:e9:ad:b5:03:36:7e:
         49:c2:72:6c:f3:34:cd:cd:4a:ff:a6:0e:7d:1d:ad:7b:00:5d:
         39:12:5f:86:6a:84:9b:81:dc:aa:b6:46:a8:a0:50:af:07:d5:
         54:4b:34:d4:10:17:b3:e9:be:7b:4d:b2:c6:7e:32:3d:bb:f5:
         42:4b:63:5e:a5:27:f2:a6:a2:c1:af:68:2e:e5:c2:3c:77:46:
         98:e2:e6:37:bf:c9:d4:da:77:fa:95:07:c7:85:d7:23:ef:11:
         94:93:78:4d:c6:45:d4:32:19:54:86:92:95:b3:80:35:a3:96:
         7a:70:7a:18:03:6c:e5:95:fa:d9:69:e4:68:d7:ec:15:d2:5a:
         ec:bc:b4:e2:6a:2b:ad:2c:49:71:70:62:50:4f:5a:59:78:34:
         48:7d:0d:b5:fc:6d:e3:26:12:5e:d7:f7:eb:d4:c8:46:41:d1:
         45:3e:c5:04:d8:a9:70:cb:04:30:fc:96:7e:fc:e2:3d:a0:ba:
         77:83:fd:7c:fe:78:ac:e0:1a:9a:98:de:32:7b:dd:58:00:5f:
         e9:30:32:26:55:87:d3:ba:be:8f:fa:f0:20:61:e3:08:0a:95:
         8b:aa:76:31:79:ae:5d:d6:a5:23:09:a7:a3:77:f4:6e:98:71:
         53:ba:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:04:46 2026 by rpki-client