Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          23SmURsana9N0ZOSZeXFv1bUfR/Gc0v/qcTI7RpdFDM=
Subject key identifier:   CA:26:71:1A:B0:46:03:13:FF:82:83:24:F2:11:4A:EF:97:ED:D1:40
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       019FA14E21A505CFE963A7DE22FF1FD4A28D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0B41
Signing time:             Mon 27 Jul 2026 02:01:19 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:19 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:19 +0000
Files and hashes:         1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: XcfRO43v37HFViNb7BYm6vGpxOQb/KeTit/CbHMQ5F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:21:a5:05:cf:e9:63:a7:de:22:ff:1f:d4:a2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Jul 27 02:01:19 2026 GMT
            Not After : Jul 28 02:01:19 2026 GMT
        Subject: CN=ca26711ab0460313ff828324f2114aef97edd140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:9b:48:bd:95:3f:24:d2:7f:20:21:04:49:
                    c1:59:bd:59:0d:b9:8b:da:02:68:a6:79:4c:ed:e4:
                    1d:27:73:fc:a7:86:bb:b6:93:a6:e7:14:7d:b9:70:
                    92:f9:dd:06:bb:23:9d:03:78:44:01:c4:d7:af:f7:
                    ea:0e:4c:43:fc:40:1b:db:2c:bb:8d:91:5e:52:63:
                    b8:98:1c:9b:e6:c2:3f:82:c1:6d:2b:09:07:1c:b2:
                    55:c2:04:ba:19:cf:91:da:d3:e3:24:8c:15:be:ff:
                    e2:6b:ec:43:c8:bc:c9:bc:9c:1f:11:e2:7f:4d:f2:
                    80:da:ec:37:56:bd:cb:8f:ae:0a:de:4d:63:c1:b0:
                    f7:10:79:b2:cf:ab:ac:0b:12:99:84:6e:3f:90:c6:
                    3f:6c:3a:69:8f:7c:18:87:19:8c:ee:61:fa:44:50:
                    f9:29:64:0d:5d:ec:8e:de:d8:b3:22:11:1d:38:23:
                    30:09:f9:0d:32:b0:24:a7:7b:ee:6c:cf:ea:19:26:
                    2b:0f:bb:26:e4:43:94:68:47:c2:76:41:51:62:01:
                    73:54:73:83:60:c7:d3:d8:0e:09:d0:2c:27:9d:3c:
                    c7:45:87:c9:1b:e9:a8:18:e4:0c:f7:98:5a:08:64:
                    b6:4a:71:69:8f:89:07:7f:d7:17:44:1e:ce:50:e0:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:26:71:1A:B0:46:03:13:FF:82:83:24:F2:11:4A:EF:97:ED:D1:40
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:20:e0:d0:a1:63:5d:81:15:6f:b6:51:6f:c6:61:ba:b1:3c:
         79:52:c5:f5:7e:af:4a:02:ac:42:15:8a:c9:f1:8f:38:14:5f:
         09:da:f8:a8:e6:fe:37:19:5d:54:a3:b9:9f:c7:b4:f6:7b:9a:
         0b:57:79:54:c0:3c:3b:bb:4a:b4:ad:d3:87:09:51:4b:7f:36:
         28:8f:5c:9d:40:aa:8d:0c:7a:49:47:21:db:94:0b:e2:80:bb:
         f3:31:70:4c:05:97:57:72:9c:5f:96:ba:c5:68:12:aa:61:59:
         9e:68:75:99:9b:61:ef:5b:00:7f:88:6c:8b:7c:41:ad:79:ab:
         d0:e5:b5:cf:ce:a8:48:c3:5d:e2:ba:56:aa:b4:7f:83:94:f0:
         78:3d:43:86:25:3d:aa:26:ac:18:69:a1:60:74:fc:71:c3:eb:
         72:65:89:ad:77:34:4f:50:61:b5:83:07:fb:e0:1c:1b:3c:2d:
         c1:22:db:3e:ec:bd:5a:77:44:88:0b:97:cf:26:b8:a5:46:5f:
         1e:cf:1e:5a:59:bf:92:92:ec:29:cf:31:b1:d8:2b:46:1c:53:
         f8:9e:78:49:4b:3e:b2:26:48:38:e7:51:b2:b9:9e:1c:c2:c0:
         dc:4b:68:ba:8f:d4:e8:7d:90:dc:7f:4d:0b:c2:44:22:99:a3:
         93:06:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:15 2026 by rpki-client