Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft
File:                     61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft (raw, json)
Hash identifier:          hNdInJ3dBk841+X5gEzp/AXQgQSa0+fnpNoKOaKMPNg=
Subject key identifier:   BF:80:44:68:C7:49:2F:AE:64:6B:2C:81:CF:3F:75:0D:C1:3B:8E:B9
Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB
Certificate issuer:       /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB
Certificate serial:       13D1C0FF7045D9F04E3469CFD784F9C34AADB88C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft
Manifest number:          34
Signing time:             Sat 17 Jan 2026 20:02:14 +0000
Manifest this update:     Sat 17 Jan 2026 19:57:14 +0000
Manifest next update:     Sun 18 Jan 2026 23:49:14 +0000
Files and hashes:         1: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: Q5Z/wqUBwWhM8mRyojjN6NpV/xV/IzhUzgKoHX5P1HU=)
                          2: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: mUKzjFEmFF1ij8QbpLMbpWWOoy5ByjLtax5R3U4hZ9o=)
                          3: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: ATZc214+3GX48p6REnIm7Qjen5IkiQYJugGYiQlSRpg=)
                          4: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl (hash: cSf/+DWAtcfUTp5ojCjpo+tR+iBN+ZXWouIClTHl9GM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d1:c0:ff:70:45:d9:f0:4e:34:69:cf:d7:84:f9:c3:4a:ad:b8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB
        Validity
            Not Before: Jan 17 19:57:14 2026 GMT
            Not After : Jan 18 23:49:14 2026 GMT
        Subject: CN=BF804468C7492FAE646B2C81CF3F750DC13B8EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:50:2f:32:0c:b8:14:55:e9:d9:dc:8c:08:
                    fe:61:96:31:b9:60:ab:43:e1:31:c5:a5:08:b4:25:
                    58:44:49:58:cf:be:2b:bb:be:18:d4:3a:cd:1f:ca:
                    02:cb:0f:4a:91:cf:2d:e9:e0:ef:ce:a0:b6:c5:62:
                    e6:64:3d:28:23:25:52:95:13:19:e0:2a:9f:53:2b:
                    39:a3:2e:b7:92:d9:5e:a2:5c:3c:a0:3a:ee:0e:d3:
                    46:45:90:02:52:f8:2f:f1:fa:bc:20:63:9f:1b:0f:
                    a7:39:a7:46:5c:57:87:66:7c:92:7f:ea:c1:0e:c2:
                    a0:bd:2e:84:17:4a:44:9b:ca:8c:f7:02:7c:be:91:
                    f8:7e:a1:74:a6:b4:47:cc:72:bc:a1:a9:c8:36:c4:
                    70:35:e8:dd:bc:80:d8:5c:b0:a6:31:4d:2d:16:cb:
                    69:72:e3:0c:68:ba:76:a9:81:a1:68:c8:9d:8a:1f:
                    c7:db:61:0c:96:ef:0f:52:22:ca:62:55:9d:27:bf:
                    d8:54:df:d1:c0:ca:01:13:54:91:b0:dd:b1:5e:f8:
                    c0:43:bd:53:8c:f2:69:82:90:8e:ee:26:47:df:7c:
                    2f:f0:1f:21:5c:ef:a2:27:83:3c:6e:4c:6b:00:38:
                    e8:c5:22:fc:01:c1:d3:49:c4:34:73:78:d0:74:ee:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:80:44:68:C7:49:2F:AE:64:6B:2C:81:CF:3F:75:0D:C1:3B:8E:B9
            X509v3 Authority Key Identifier:
                keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f5:91:46:3e:48:c7:cf:df:ef:09:90:5e:89:b8:36:77:bf:
         c3:bb:33:52:16:9a:69:bf:9e:a4:46:3d:fe:1e:22:5f:fa:e4:
         00:8c:ab:10:1c:dd:2b:23:23:ec:5e:31:0b:dc:22:df:14:18:
         31:16:53:37:03:65:99:ab:26:fd:75:29:8a:cb:b0:16:e4:34:
         51:5f:db:79:ad:4b:66:a9:12:84:b7:c7:2f:dd:ca:2a:0a:cc:
         89:c4:0d:ba:08:30:46:19:0c:21:a5:1f:a8:e8:38:5f:9a:be:
         ae:dd:7f:2c:05:91:c8:ef:f7:8b:38:5d:92:d0:62:2b:99:2a:
         fb:90:6c:37:df:2a:ab:95:46:59:ee:27:8c:74:80:3d:48:1c:
         6b:72:8f:be:83:eb:03:6f:62:a3:6e:81:16:41:ce:1b:77:03:
         1a:ee:2f:aa:62:f7:85:a8:a6:d3:23:23:8a:96:53:91:a1:f1:
         8d:25:e2:1d:c0:2b:21:8c:59:9e:d9:9a:12:34:c7:d8:cb:41:
         40:4f:a4:dc:b5:43:76:a9:ad:69:c9:37:6c:af:16:16:ec:a8:
         08:ea:9a:fb:2a:85:2f:be:7f:ce:5a:5b:38:ff:a5:b7:e4:f3:
         da:94:20:1f:05:c7:9d:55:a8:b0:25:bb:30:20:3d:5e:ff:be:
         0b:a3:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----