Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          /HggIod3ofZgHIxcItpQHYra5dt7pMjJa/IyvrWxnV8=
Subject key identifier:   6F:89:95:30:CB:3A:FC:A0:8B:0C:E5:6C:2A:48:2C:6C:6A:C1:CE:91
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       019DD79D614BD04D567618AB07AEDA5A08B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0A54
Signing time:             Wed 29 Apr 2026 05:01:48 +0000
Manifest this update:     Wed 29 Apr 2026 05:01:48 +0000
Manifest next update:     Thu 30 Apr 2026 05:01:48 +0000
Files and hashes:         1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: YdXSPjyoUscCuW0IjdpoubN9X7ko7PP0KRfNKo2LNxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 05:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d7:9d:61:4b:d0:4d:56:76:18:ab:07:ae:da:5a:08:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Apr 29 05:01:48 2026 GMT
            Not After : Apr 30 05:01:48 2026 GMT
        Subject: CN=6f899530cb3afca08b0ce56c2a482c6c6ac1ce91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:df:78:6e:85:01:5b:71:8f:0c:6b:97:72:
                    c9:2c:5a:01:70:d6:44:63:c7:ae:8a:55:6c:b1:13:
                    1e:0c:e0:70:fb:6b:09:a2:99:fd:9d:33:11:53:ba:
                    7f:ea:ef:5f:b5:4d:69:1a:1a:dd:98:a2:84:9f:cf:
                    54:7c:a6:3a:e3:4d:7b:bd:e0:90:9d:ca:39:e1:8c:
                    52:db:d1:3e:42:5e:a3:2c:67:5c:4b:3b:d9:63:4b:
                    c0:8a:49:2b:74:ed:ed:69:d0:84:81:a8:ab:50:9c:
                    c4:72:0a:34:98:15:1f:1f:38:bb:6f:99:99:4a:4b:
                    82:9b:b3:74:56:1c:e6:34:87:51:22:05:b8:5e:b7:
                    1e:4a:76:c3:d3:84:7a:7f:83:6b:dc:29:a5:1c:f9:
                    7c:42:c7:ef:33:f6:48:b1:82:c5:cb:ed:f2:82:4f:
                    ae:ca:26:2e:af:60:fb:c6:ab:87:96:e1:cf:19:27:
                    5c:9f:35:f7:20:b7:95:e9:ac:c1:ac:0e:76:20:97:
                    51:61:0d:c2:1c:f2:ef:3a:6c:67:18:28:0d:02:14:
                    29:bb:b5:09:7a:88:a8:bf:87:27:66:d4:3b:67:4e:
                    19:56:ea:f6:e9:f3:8b:bd:4f:09:ca:b4:55:fb:80:
                    24:fa:c8:65:0d:3f:be:4e:9f:2f:fd:d8:4c:06:0d:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:89:95:30:CB:3A:FC:A0:8B:0C:E5:6C:2A:48:2C:6C:6A:C1:CE:91
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:82:e0:28:3e:8d:ef:0b:83:d8:66:9c:ff:a6:cb:5f:2b:
         f9:33:0b:02:15:48:16:ab:ad:9c:73:02:64:6b:9c:09:06:39:
         6f:6b:6a:0b:5c:32:86:3a:5c:b8:8d:46:b6:25:5e:ea:25:9c:
         d7:f2:6c:86:f3:5d:8a:4b:bb:1b:a7:ac:64:b8:e4:75:05:b6:
         d6:d7:20:5f:17:ca:ec:68:50:a8:19:53:7f:0e:eb:78:1b:ea:
         2a:ba:df:17:93:ef:8e:29:2b:d8:1b:04:f4:52:7f:76:ae:b7:
         dd:f7:4c:1b:b3:10:d5:ec:c3:93:3c:a6:a2:bc:07:e1:ec:53:
         4a:a1:b5:09:b4:60:bd:93:13:1d:ca:4b:e2:34:4d:b4:ce:d6:
         2d:b9:6d:a4:9e:4d:69:36:47:85:cc:43:3d:b6:38:93:1b:6c:
         0d:65:40:e9:aa:62:79:37:b1:22:99:13:b9:f0:86:ac:1a:2b:
         e7:b1:6c:79:c6:73:2c:82:c0:9a:f5:21:51:33:5d:30:15:ec:
         63:3d:74:96:fb:28:85:51:a3:df:c4:72:8d:ee:50:30:a3:5c:
         44:51:1c:16:7e:a5:a7:5b:27:49:de:26:ae:fe:3b:62:b3:84:
         8f:a5:21:a1:fb:60:0b:4c:11:d4:50:e8:d5:b9:bb:61:89:fd:
         61:4e:31:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3XnWFL0E1WdhirB67aWgi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk
NmM1YTUwHhcNMjYwNDI5MDUwMTQ4WhcNMjYwNDMwMDUwMTQ4WjAzMTEwLwYDVQQD
Eyg2Zjg5OTUzMGNiM2FmY2EwOGIwY2U1NmMyYTQ4MmM2YzZhYzFjZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2zfeG6FAVtxjwxrl3LJLFoBcNZE
Y8euilVssRMeDOBw+2sJopn9nTMRU7p/6u9ftU1pGhrdmKKEn89UfKY64017veCQ
nco54YxS29E+Ql6jLGdcSzvZY0vAikkrdO3tadCEgairUJzEcgo0mBUfHzi7b5mZ
SkuCm7N0VhzmNIdRIgW4XrceSnbD04R6f4Nr3CmlHPl8QsfvM/ZIsYLFy+3ygk+u
yiYur2D7xquHluHPGSdcnzX3ILeV6azBrA52IJdRYQ3CHPLvOmxnGCgNAhQpu7UJ
eoiov4cnZtQ7Z04ZVur26fOLvU8JyrRV+4Ak+shlDT++Tp8v/dhMBg0LZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+JlTDLOvygiwzlbCpILGxqwc6RMB8GA1UdIwQY
MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt
ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm
LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO6C4Cg+
je8Lg9hmnP+my18r+TMLAhVIFqutnHMCZGucCQY5b2tqC1wyhjpcuI1GtiVe6iWc
1/JshvNdiku7G6esZLjkdQW21tcgXxfK7GhQqBlTfw7reBvqKrrfF5Pvjikr2BsE
9FJ/dq633fdMG7MQ1ezDkzymorwH4exTSqG1CbRgvZMTHcpL4jRNtM7WLbltpJ5N
aTZHhcxDPbY4kxtsDWVA6apieTexIpkTufCGrBor57FsecZzLILAmvUhUTNdMBXs
Yz10lvsohVGj38Ryje5QMKNcRFEcFn6lp1snSd4mrv47YrOEj6UhoftgC0wR1FDo
1bm7YYn9YU4x5Q==
-----END CERTIFICATE-----
Generated at Wed Apr 29 08:44:26 2026 by rpki-client