Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File:                     BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier:          Cw99v0xkDuN8EPHoO+5oQ/C7GdjNvMDTEDeYmLziPHA=
Subject key identifier:   F6:A0:6F:68:D1:ED:13:B4:C8:45:23:C3:05:AD:82:90:CC:58:8F:D6
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer:       /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial:       01A109948D0529C9E5176241F3AB63EED604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number:          108A
Signing time:             Mon 05 Oct 2026 01:01:32 +0000
Manifest this update:     Mon 05 Oct 2026 01:01:32 +0000
Manifest next update:     Tue 06 Oct 2026 01:01:32 +0000
Files and hashes:         1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: k1chRw6byuitYqiaH4jRDEKjbHReC595ZMed3a6jfRg=)
                          2: J81oMbI3n3irPc7JUh-8xR1Zl8c.roa (hash: Lmix+nX3EUmXFYcqG5fSjYGyvT/kI25gYarAEO2goQE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:94:8d:05:29:c9:e5:17:62:41:f3:ab:63:ee:d6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
        Validity
            Not Before: Oct  5 01:01:32 2026 GMT
            Not After : Oct  6 01:01:32 2026 GMT
        Subject: CN=f6a06f68d1ed13b4c84523c305ad8290cc588fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:6f:bb:2d:41:3b:be:cc:c5:41:77:e0:f5:
                    16:41:69:1a:fa:a1:b9:84:85:31:0d:f7:97:47:e2:
                    01:c2:c7:1f:95:4d:e3:b9:f9:eb:9d:6c:80:6e:7b:
                    d6:70:58:f3:d6:a4:a5:20:4a:6d:bd:2f:14:9d:b0:
                    f7:b3:52:3a:77:c0:8a:35:e0:5f:5f:20:9b:25:e8:
                    85:5b:38:cc:17:57:66:85:21:9c:15:7e:b6:95:c7:
                    6f:57:dd:8f:c8:d0:e3:85:79:7a:c8:98:c3:77:95:
                    a0:ba:a6:7b:56:ff:3b:7f:9a:78:ef:84:00:69:c0:
                    83:86:64:48:b7:c3:96:87:6d:5a:4a:24:9a:2f:86:
                    ea:2d:9d:f3:f1:49:54:60:19:d4:4b:52:92:26:2d:
                    c9:14:2c:21:a3:0d:90:ce:6b:99:11:0a:c6:ea:95:
                    1e:7d:cb:4c:f7:7e:58:38:a8:1b:2f:81:96:c2:aa:
                    ee:9a:ad:eb:89:74:ab:a8:0b:19:0d:ce:b3:2e:16:
                    d9:e7:4f:91:86:cb:94:2f:3d:74:0c:41:91:43:0b:
                    78:6d:04:66:ad:f6:65:3b:17:bd:cf:12:a3:49:49:
                    6a:41:e6:3c:67:51:29:aa:61:5e:fb:17:df:55:51:
                    85:46:6b:21:e4:85:e3:7d:f3:d1:05:07:e7:ef:1c:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:6F:68:D1:ED:13:B4:C8:45:23:C3:05:AD:82:90:CC:58:8F:D6
            X509v3 Authority Key Identifier:
                keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:dc:4e:b9:a0:c1:3c:b7:5b:eb:52:80:b3:89:ad:2c:b7:36:
         f6:fd:ae:88:45:45:a5:44:c4:e7:01:4a:85:c0:2e:c6:85:bf:
         3c:62:02:33:cc:31:22:b5:b4:96:ba:b9:c8:a1:55:ef:09:15:
         8d:55:e5:8a:05:01:e3:db:53:75:83:11:a1:d8:82:97:ea:d0:
         a6:f7:f1:a2:f8:2d:70:6a:bc:8b:5a:16:c5:dc:51:3e:a1:a4:
         a5:a5:83:35:09:a7:11:79:ca:0b:d7:3c:eb:83:15:78:a3:1e:
         6f:06:66:90:2b:74:ec:be:e3:1c:de:4c:38:eb:c7:4c:6c:c7:
         5a:c9:7b:e7:f1:b8:58:9e:e1:bd:4c:1d:66:90:28:f1:81:e6:
         62:10:43:d8:0a:ae:84:26:fc:aa:f6:e3:af:b0:63:b0:90:db:
         44:fa:74:1a:10:0a:20:1d:2b:10:17:be:e6:7f:49:08:31:90:
         08:16:ce:f7:8c:22:35:3f:07:b9:2e:34:ce:ba:cb:2d:ff:69:
         95:a3:5d:3e:26:71:2e:4b:fc:8c:16:c1:9e:d3:42:af:a6:06:
         08:e3:1f:7b:ef:40:a1:5d:d6:6e:1f:e3:4f:c3:9f:d8:72:43:
         cb:4e:93:66:9d:0e:ab:3c:4b:dd:89:1a:6c:bb:ac:02:8d:59:
         11:a4:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----