Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
File:                     pns_SmTNjc4m56QK9ue24E7tLWw.mft (raw, json)
Hash identifier:          5eqUyXGwaVwc5A+5FfBZ4gqUMWL6odqzen+IPADC3lY=
Subject key identifier:   71:F0:08:F2:52:F5:8F:47:8A:3D:D3:26:9F:42:1A:89:91:32:16:20
Authority key identifier: A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
Certificate issuer:       /CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Certificate serial:       01A17D73C55464C6DED3637EB2FCD4953226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
Manifest number:          017A
Signing time:             Tue 27 Oct 2026 13:01:41 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:41 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:41 +0000
Files and hashes:         1: iQdg1bQOlXLuKluffHT5-2l3QwM.roa (hash: VLHupAT/bCStlfIUhgEMjaFGylgBgR6vs2sLtbZvHGM=)
                          2: pns_SmTNjc4m56QK9ue24E7tLWw.crl (hash: 4amcghk3ZUj6hKzir+QjTCy2mVVurq+q1wAd0/QDdOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:c5:54:64:c6:de:d3:63:7e:b2:fc:d4:95:32:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
        Validity
            Not Before: Oct 27 13:01:41 2026 GMT
            Not After : Oct 28 13:01:41 2026 GMT
        Subject: CN=71f008f252f58f478a3dd3269f421a8991321620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:3f:d9:5b:c6:86:85:fd:1d:5b:d9:43:22:
                    dd:63:0f:6c:79:27:97:76:8a:93:73:0c:6f:10:74:
                    c2:eb:34:e7:0f:76:0d:98:14:b7:98:ba:7a:71:26:
                    ca:d9:5d:35:09:48:0f:fc:5a:59:2e:84:f6:98:98:
                    8f:78:8f:d5:5b:10:1a:79:9c:16:4d:d9:be:9a:9e:
                    e5:c2:5e:2d:61:3f:73:30:61:69:71:e1:0f:ed:e2:
                    f9:5f:fe:f3:45:64:01:e6:44:1b:3d:36:b5:8f:cc:
                    07:a1:ab:e4:c2:b9:ee:8c:84:cd:dc:ec:1a:55:07:
                    f3:93:6e:5b:5f:cc:fb:00:9e:08:8f:d2:ed:1b:f0:
                    8e:c9:5a:47:48:64:f3:46:ff:c7:f2:be:81:42:8d:
                    67:ac:dc:c1:ba:8b:c9:63:5e:1d:f6:25:8e:87:28:
                    03:e8:04:87:38:43:47:7b:a8:35:e8:a5:35:d9:ba:
                    41:13:eb:54:7b:99:79:ba:b8:b5:76:ec:b1:2c:01:
                    5b:21:6a:4b:c8:13:b1:59:de:34:d5:d9:d3:ae:9d:
                    c3:22:4e:4a:b0:90:9f:a7:83:ff:b6:66:0c:77:ac:
                    6c:3c:8e:e3:4a:6e:fa:3c:36:7a:06:85:bc:ef:2d:
                    73:fe:7f:d5:1c:d1:67:9d:f9:2c:2e:7b:2a:dc:6e:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F0:08:F2:52:F5:8F:47:8A:3D:D3:26:9F:42:1A:89:91:32:16:20
            X509v3 Authority Key Identifier:
                keyid:A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:24:e6:0c:15:b5:5f:d6:f4:8b:d3:e8:a4:fc:fc:c8:b1:
         55:bb:5f:68:84:22:e6:3c:06:fb:37:e6:60:d6:e1:54:a0:1f:
         f2:d4:b0:ac:38:d2:42:57:49:42:81:61:a4:8b:c0:9d:58:17:
         bf:aa:58:a7:6c:50:53:9e:9d:a7:d0:23:a7:26:05:36:14:c7:
         57:42:4c:2d:b6:e0:cb:c3:c5:c7:1f:65:a9:97:d6:aa:69:27:
         c4:84:ea:6f:4a:eb:46:50:bc:1a:d6:8c:e3:f1:70:d9:a5:da:
         99:d4:cc:e1:45:26:8a:6a:ce:6a:a1:6d:28:d9:7c:b3:da:39:
         51:dd:fa:0a:a0:bb:1b:af:d1:67:0a:6f:57:51:7f:75:e8:fd:
         76:66:94:20:6b:54:d7:75:2e:91:4f:e8:46:a6:24:c8:64:a1:
         e2:95:8b:c7:dc:08:dd:6e:0e:30:e4:c1:c9:c7:41:bf:d7:1a:
         fb:7a:d6:d7:59:5f:ba:b3:b0:1e:45:7d:e9:b0:5a:da:99:fa:
         0b:36:10:75:44:09:af:02:45:78:e2:10:44:f2:60:ac:04:61:
         d5:a7:6d:4a:69:9a:a5:ac:44:e9:dd:24:e9:e8:46:df:f1:ed:
         ee:59:e4:5d:44:e7:cd:04:10:2c:02:ba:01:f0:c5:24:2a:f3:
         55:1f:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:51:08 2026 by rpki-client