Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File:                     GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier:          6AXKFaHSVdIQM0nLpdAyevgo9ZvML/30EmFR4uthqDA=
Subject key identifier:   D3:E2:6A:AA:56:EE:F5:CF:51:81:A7:88:34:36:99:1A:A0:05:3A:FE
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer:       /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial:       01A10A3970DEC7A5298E69CB1D3129DECE7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number:          1A8D
Signing time:             Mon 05 Oct 2026 04:01:38 +0000
Manifest this update:     Mon 05 Oct 2026 04:01:38 +0000
Manifest next update:     Tue 06 Oct 2026 04:01:38 +0000
Files and hashes:         1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: Sjs6NaN9twztt7WM1VMC+zwaCWhUcaHvr4o8RCJyR7w=)
                          2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
                          3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:39:70:de:c7:a5:29:8e:69:cb:1d:31:29:de:ce:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
        Validity
            Not Before: Oct  5 04:01:38 2026 GMT
            Not After : Oct  6 04:01:38 2026 GMT
        Subject: CN=d3e26aaa56eef5cf5181a7883436991aa0053afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:00:ac:cd:df:a0:3c:69:14:0c:7e:e0:ef:
                    c9:ee:bf:71:ea:2c:92:70:3e:d3:93:bd:81:fd:4f:
                    24:c0:64:a1:2e:df:9e:d8:3d:bd:b6:c8:93:f3:de:
                    e6:52:06:fa:9a:3b:c9:89:27:ec:33:f0:17:e2:fe:
                    b2:83:c6:14:8b:6e:97:70:77:dc:84:81:c6:ad:55:
                    2f:2a:c1:21:9e:6f:b6:7d:a2:fe:b2:fe:6e:56:4c:
                    8a:cc:4c:dd:ae:26:59:48:e3:a7:77:58:1a:b0:aa:
                    d7:92:0a:47:ce:ad:40:d1:ea:2e:89:ac:6e:f8:22:
                    e7:fc:d6:7e:ad:98:d8:92:6f:0c:c8:f4:5d:f6:d6:
                    d2:3c:c1:70:d8:f2:f9:11:db:ec:af:a0:41:11:8f:
                    31:8c:50:de:b6:8c:2b:5e:c4:47:93:df:fd:93:7e:
                    be:a8:fc:ae:38:0a:6b:64:21:fe:07:70:47:34:a9:
                    49:05:85:fb:f7:75:e7:b8:00:7a:b8:14:97:9f:5d:
                    20:31:dc:bb:b6:6c:3b:52:5e:a8:2b:55:79:00:95:
                    01:14:f0:92:72:1b:1b:44:53:f0:52:f4:5f:d9:30:
                    7a:ca:02:fd:ba:b9:89:a5:af:ac:f6:b2:49:21:e1:
                    f4:92:00:c9:9d:97:de:69:14:17:68:e7:05:70:5c:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E2:6A:AA:56:EE:F5:CF:51:81:A7:88:34:36:99:1A:A0:05:3A:FE
            X509v3 Authority Key Identifier:
                keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:35:cd:79:0d:96:69:c5:05:6a:7a:cd:5b:40:95:58:11:
         11:08:37:4f:86:7c:c3:86:fa:72:6b:12:bd:ec:0d:63:03:b2:
         fa:e4:a2:a4:44:4c:3f:c2:d0:f2:c0:8a:d5:63:5b:70:39:4f:
         81:19:c2:1f:7a:46:4e:77:fc:e4:ae:e5:fe:ee:05:b2:f0:81:
         dd:82:64:a6:98:2e:42:a2:56:bd:96:e4:76:75:2b:0f:f5:ba:
         63:bb:11:b1:8b:24:12:e3:02:db:3c:71:82:6c:f9:fb:fd:15:
         04:91:f2:5e:d2:d1:34:ad:04:1c:92:29:df:14:6c:d1:8b:31:
         fe:df:6e:bc:f8:9d:28:d6:08:28:3a:2f:b6:fe:21:e2:cc:bc:
         30:60:2b:c8:fa:55:df:09:55:6e:ab:97:c5:4c:12:92:ed:8c:
         f6:c0:a1:ee:fa:a1:e6:49:3c:ac:b1:6a:52:6a:26:cd:6a:0a:
         30:3a:08:2b:55:78:3c:54:7d:fa:45:e1:6d:dc:5d:69:cb:16:
         d3:6b:83:3f:09:74:e1:26:a6:4f:a4:03:af:a1:c7:cf:74:82:
         c7:7b:4c:50:f6:2f:f9:3f:a4:12:70:0c:d0:6e:b6:17:3d:e1:
         b8:fb:05:d1:3e:c3:9d:03:8e:5a:90:3b:74:33:c3:b3:34:35:
         79:90:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----