Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
File:                     F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft (raw, json)
Hash identifier:          njpTaO7FcsIUMoAICjZiVnX06bfQNybVHd5X+f0GVZE=
Subject key identifier:   93:22:27:E7:AA:47:3C:F9:E8:4A:84:59:CA:8E:58:41:1A:DE:5E:D5
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Certificate issuer:       /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial:       3DC0D4CCC3D1FEAA2E01CB35B5F3349E78911FBB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
Manifest number:          0145
Signing time:             Sat 11 Apr 2026 16:51:42 +0000
Manifest this update:     Sat 11 Apr 2026 16:46:41 +0000
Manifest next update:     Sun 12 Apr 2026 18:13:41 +0000
Files and hashes:         1: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl (hash: AAUAFTnG1HINYnHs5rh9NKqVempoVEuyCw8x0yU4wfE=)
                          2: 326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (hash: eIcNuMQVK00NVTttAcCUkEiDTJRni4+mtCPYV/BBYmk=)
                          3: 326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (hash: RRkb0bnNKnbeFbaERnfQOBi5pO2OGjCSeplsy38bpxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:d4:cc:c3:d1:fe:aa:2e:01:cb:35:b5:f3:34:9e:78:91:1f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
        Validity
            Not Before: Apr 11 16:46:41 2026 GMT
            Not After : Apr 12 18:13:41 2026 GMT
        Subject: CN=932227E7AA473CF9E84A8459CA8E58411ADE5ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:2f:36:4d:6c:50:0a:e0:93:89:6b:37:eb:
                    b1:14:e5:03:d6:03:33:e5:0d:79:70:52:e2:62:58:
                    dc:08:ae:9d:7e:be:34:3e:c1:5a:8c:6a:91:87:8d:
                    9f:a3:ad:a5:e5:87:75:21:42:07:01:3f:c2:60:ed:
                    07:c1:29:a9:a4:17:93:d5:4e:1f:51:e0:c7:f1:04:
                    83:87:98:a7:79:11:14:12:71:12:aa:69:25:1d:d5:
                    6b:5a:af:9c:ef:f4:19:5e:26:c5:c2:1f:87:7a:51:
                    74:dd:7b:3d:22:69:5b:66:93:a3:d5:fb:9e:47:ea:
                    c3:5a:bc:7e:3e:b6:d4:c2:d6:6d:00:78:9e:fb:b9:
                    97:8c:94:fc:b5:10:c9:d3:57:1e:97:53:cb:ca:3f:
                    9a:40:d6:64:73:35:7c:42:97:33:50:59:4e:10:35:
                    2f:5d:99:a1:d6:61:06:7d:fd:3a:d5:d8:47:18:f0:
                    da:20:e0:8b:45:9b:4f:c4:9d:52:ca:e6:ea:5b:05:
                    f7:fa:66:35:c8:7c:06:18:b4:69:35:e5:4f:af:d3:
                    a7:24:f1:cb:35:d7:18:9a:eb:83:bd:91:51:2b:15:
                    af:01:23:bf:52:8e:da:ef:3a:12:57:a4:36:47:4f:
                    fe:d5:bd:4b:d9:dd:db:b6:ff:88:bd:f4:2a:1d:4c:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:27:E7:AA:47:3C:F9:E8:4A:84:59:CA:8E:58:41:1A:DE:5E:D5
            X509v3 Authority Key Identifier:
                keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:fd:29:99:28:e8:8e:11:19:48:d2:0a:df:99:ea:f7:cd:
         92:ef:eb:f4:00:08:a8:9d:21:ef:9d:24:78:af:c7:75:42:d9:
         a3:46:5e:7d:5a:2a:d1:ba:3c:cf:e1:18:f3:4d:5d:3a:f8:05:
         78:db:1f:7f:b7:1f:c9:10:fd:ee:7d:09:df:3e:72:b2:aa:e2:
         78:58:ae:07:14:d5:ba:6f:3d:c6:86:f1:0b:f1:ba:c6:e2:8b:
         69:ae:7a:c0:98:28:c2:eb:ae:0d:27:37:20:92:6c:ac:bc:dd:
         a0:e0:77:92:24:19:ab:0e:3b:f1:5a:0e:b1:bf:54:56:92:ed:
         47:01:6e:e1:94:9d:13:81:ee:c1:48:b2:ee:69:d7:aa:bf:51:
         67:fd:c5:d4:ee:b5:ea:5c:38:a3:33:17:dd:f6:37:66:bd:40:
         3a:d3:76:74:71:04:38:93:ff:94:b8:33:72:36:8f:31:df:6e:
         0c:2e:55:7e:f5:e4:f0:45:8c:bb:61:ea:ab:3e:9a:78:58:1d:
         f4:22:3e:e1:f5:49:08:ce:52:54:23:27:84:59:89:a7:65:6a:
         43:03:42:cd:75:6f:1b:92:71:00:23:1c:74:b1:d1:ad:29:ed:
         8e:9f:d8:7d:ba:bf:48:59:ce:e8:6a:52:47:14:ae:83:39:4b:
         84:63:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----