Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File:                     ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier:          4JtH4pIz4xrEPQ+7zajQToVgHb5iAMoSK0YWlpwVDRs=
Subject key identifier:   2E:83:E8:CC:16:06:38:62:FF:49:0F:0A:37:C8:1D:36:FC:BF:15:B5
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer:       /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial:       01A0D6B9FB1D70F8BBE39593B7A95C6E263F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 04:01:47 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:47 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:47 +0000
Files and hashes:         1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: S62ELF81X7u4FLuKn8TFtLBAbLRNiopu2XgIVgbz0hs=)
                          2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
                          3: raD7wvr0TvKrEvtYxhgDhDykZL0.roa (hash: ZH0H7QhGDMc2MvPc+MJKw1tOd2Aq2f2jOpFxkwLqpAI=)
                          4: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:fb:1d:70:f8:bb:e3:95:93:b7:a9:5c:6e:26:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
        Validity
            Not Before: Sep 25 04:01:47 2026 GMT
            Not After : Sep 26 04:01:47 2026 GMT
        Subject: CN=2e83e8cc16063862ff490f0a37c81d36fcbf15b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:7f:67:18:00:96:a2:ae:f6:54:50:35:61:
                    72:44:e0:e8:d0:70:a2:3c:da:a7:b3:0f:60:29:18:
                    9b:c0:0c:75:25:88:a6:b0:b9:74:8f:83:6a:41:e1:
                    df:08:c3:cd:7c:10:ee:8d:eb:0d:c0:37:e9:9f:42:
                    2d:f3:27:fe:46:82:05:f6:ed:5b:9b:f1:c7:43:66:
                    fd:d3:c2:8f:41:39:6e:00:fa:83:7a:4f:d8:81:8e:
                    0e:41:98:04:5b:7e:df:d2:22:90:a6:1e:5f:60:a1:
                    fa:19:08:ec:2b:6e:53:e8:fc:af:02:61:91:35:02:
                    eb:64:13:be:c2:81:e4:29:fc:1f:0e:3a:a7:79:14:
                    ba:ab:8d:d5:42:fe:2c:20:2a:6a:5e:93:ed:1b:1e:
                    72:1a:21:d7:c3:a2:b2:43:41:9f:1c:44:bd:71:d4:
                    e0:77:af:9b:40:1c:be:84:41:81:fb:09:83:55:c0:
                    04:2b:d4:d6:33:fa:f0:48:db:2f:c0:f7:ba:9d:16:
                    fa:2a:5d:8d:81:47:68:75:f1:1c:48:21:9e:ce:ed:
                    d9:e8:e4:6c:6d:c4:65:d8:c5:51:32:62:75:60:5e:
                    22:9c:0b:61:80:ee:ff:ef:9e:ea:5e:60:6b:2e:65:
                    7b:f9:9d:dd:31:b0:58:6c:3c:32:be:d1:c5:75:32:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:E8:CC:16:06:38:62:FF:49:0F:0A:37:C8:1D:36:FC:BF:15:B5
            X509v3 Authority Key Identifier:
                keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:14:f5:2b:6e:54:9d:41:3f:90:54:a8:2a:77:2b:bf:43:
         70:35:8a:90:e6:71:4f:1b:d7:9b:06:68:ee:10:9d:47:f8:54:
         7b:02:df:52:f5:f0:87:c8:e1:c0:99:a4:44:47:a8:ba:1c:15:
         2c:aa:cb:38:a2:62:01:b6:a3:dd:13:80:d1:68:01:44:ea:c4:
         4e:65:42:37:9d:5b:4a:30:c3:a1:ab:16:2f:38:e6:72:6b:dd:
         6b:b4:7b:a9:3a:29:2f:56:e2:9b:93:35:01:b4:b9:89:e5:26:
         cd:7d:20:df:43:5e:08:0c:c6:8e:64:9e:29:3a:a6:2b:cf:0b:
         4d:2c:19:41:64:9b:71:83:60:e3:f9:92:7c:78:6a:36:7f:07:
         e1:42:5b:de:68:2d:bd:40:4b:62:3c:32:d8:a4:38:a8:5b:f9:
         a4:46:70:7e:46:b0:7c:19:7c:c0:c4:e5:5e:f9:26:24:05:15:
         f1:36:55:fb:25:54:77:7f:24:d4:66:ac:b4:2f:26:bd:5c:84:
         98:5b:0c:67:e3:40:27:5d:17:21:a5:39:e4:03:1d:a2:99:d1:
         65:a6:58:9a:e7:d6:da:13:05:4a:2c:04:78:58:0d:37:be:ed:
         28:35:94:58:93:2d:80:0b:0c:7c:ac:6f:2e:00:a5:07:92:38:
         33:01:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----