Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
File:                     8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json)
Hash identifier:          TKapOSUeCocl80rYsfYUP9e9MH7EWUb9lXYHhFOxQp8=
Subject key identifier:   3F:E0:8F:DF:3E:8E:CD:E1:CE:84:A3:EF:E3:08:56:A2:5D:0F:C3:62
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       6A1B3D6CC91180227B947F05DF61CAE2234C84B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
Manifest number:          0594
Signing time:             Fri 20 Mar 2026 00:30:38 +0000
Manifest this update:     Fri 20 Mar 2026 00:25:38 +0000
Manifest next update:     Sat 21 Mar 2026 01:45:38 +0000
Files and hashes:         1: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: 8mF+PQeUzaqKEgfJbIXSTk7hxbEJf0BXKYW39kTGsrg=)
                          2: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: 3W7ZfN0Z39meaKFOXfkiykX2Kxo1icQSKd0a4RLpWjY=)
                          3: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: vvTevjxETDa595QBqFXtPC5dkfNklcd1MuoPmql9OGw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1b:3d:6c:c9:11:80:22:7b:94:7f:05:df:61:ca:e2:23:4c:84:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: Mar 20 00:25:38 2026 GMT
            Not After : Mar 21 01:45:38 2026 GMT
        Subject: CN=3FE08FDF3E8ECDE1CE84A3EFE30856A25D0FC362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:16:29:cd:55:8c:bd:23:0e:1a:48:df:c7:
                    6b:17:49:20:ab:48:75:30:55:1e:85:46:de:0b:44:
                    06:ee:63:1d:04:27:4c:3a:32:5e:a9:bc:3b:44:00:
                    5f:5a:1a:bf:f3:7b:37:61:29:b5:7c:7e:87:0c:8d:
                    53:da:b8:8a:f6:e9:30:d8:8c:e7:c3:bf:00:53:17:
                    39:cd:02:e1:cf:f9:74:b4:60:20:47:da:ef:13:92:
                    30:54:e6:94:74:9b:86:5b:95:de:93:aa:02:bb:e1:
                    1d:69:f2:46:37:72:f3:03:10:15:d6:78:b0:c9:90:
                    1a:79:eb:20:6d:57:92:49:8e:a0:10:28:2b:54:4c:
                    a0:87:ed:be:fc:ef:64:a6:bc:6b:36:ed:d3:67:e5:
                    7b:5a:ec:49:75:6e:d8:ae:0f:8d:65:30:54:bb:b2:
                    2e:fc:97:4d:5d:c5:6c:0a:23:e4:45:44:76:aa:59:
                    cd:d3:44:76:30:43:9e:af:a1:8c:9d:be:07:2d:95:
                    5c:e5:cb:95:44:71:56:4c:33:bf:fb:04:9c:48:74:
                    72:0b:b3:cb:ef:5e:58:34:ca:6e:96:a9:c4:af:ad:
                    0a:e7:87:46:a3:5d:25:eb:fa:db:b7:2b:2b:b7:51:
                    00:eb:4d:e3:96:54:9a:0e:e8:a4:c1:b2:f1:a1:86:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:8F:DF:3E:8E:CD:E1:CE:84:A3:EF:E3:08:56:A2:5D:0F:C3:62
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:2d:5f:e9:a8:be:4f:9a:49:23:5b:0e:5d:d2:7f:97:14:
         02:50:2e:e7:98:32:d7:5a:11:75:ef:b1:11:94:94:95:f7:0d:
         fb:39:df:c3:cb:92:85:04:6c:dd:f2:69:bd:16:e4:1d:01:aa:
         9d:a6:04:a1:5f:f9:47:41:8c:a7:ad:03:b1:2f:3e:18:c2:ac:
         f1:d7:5c:26:b0:22:0b:ae:6b:3b:29:ea:ee:c2:dc:b0:8a:18:
         41:7c:9f:03:ed:0b:2f:49:b8:ba:df:6d:d6:84:e7:ed:25:90:
         ca:af:90:c2:68:e5:e3:e4:46:38:7f:77:fb:1a:44:c5:b1:ab:
         77:1f:ca:f5:f2:76:32:b1:9c:19:0f:2c:fe:42:44:1d:3f:20:
         fb:5e:0a:a6:f2:0a:5a:0e:40:52:45:da:1f:fc:48:61:47:2c:
         bd:98:03:dd:3c:d5:b4:c1:2e:82:2a:58:23:6c:1e:65:c7:a5:
         fe:57:ff:37:43:23:4f:71:38:8b:1f:a8:71:38:2a:31:9d:54:
         eb:2a:14:2f:eb:ad:6b:44:aa:06:96:5c:39:9e:4e:6d:ee:fa:
         0c:6e:76:40:8f:a9:6b:96:b0:bf:16:a5:ed:67:16:e7:61:2a:
         d1:13:c0:0b:e8:2f:b5:af:26:d1:38:fa:9d:a4:a0:88:a8:00:
         f8:b6:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----