Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          KG1gVyc/mfNJmw/otZqC2rQkj23zk8Mnisu5Ow6nSJs=
Subject key identifier:   DA:C6:11:6B:F9:21:6E:97:A6:66:C5:30:75:2D:68:59:3F:B2:C7:D2
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       019A51F58A15FB6B475F9C1935F5874AB967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0881
Signing time:             Wed 05 Nov 2025 03:00:37 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:37 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:37 +0000
Files and hashes:         1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: lfT5KcD9hcfj14JQS7JWfopUvuD7XrRTDl6owHd+K8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:8a:15:fb:6b:47:5f:9c:19:35:f5:87:4a:b9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Nov  5 03:00:37 2025 GMT
            Not After : Nov  6 03:00:37 2025 GMT
        Subject: CN=dac6116bf9216e97a666c530752d68593fb2c7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:93:98:0c:c3:d6:11:fc:ba:a2:f1:e0:da:
                    45:cf:41:23:92:29:d0:3d:d9:4f:0c:7b:ca:65:32:
                    7b:ba:cd:1a:dd:60:d4:fe:4f:a5:6a:1f:20:7e:1d:
                    3c:fe:81:e3:66:ba:5b:92:2f:9f:1d:56:27:22:e0:
                    bf:a3:ea:2e:e8:6e:63:0a:82:cf:2b:dd:60:13:7a:
                    3b:f6:9c:49:89:84:ab:21:b8:9d:15:d8:1b:0a:0f:
                    e3:fa:9f:9d:19:01:3e:1a:ce:d9:d2:15:7d:85:12:
                    85:04:40:02:e4:eb:e3:c6:69:b6:61:50:88:b3:9e:
                    1d:ca:23:1e:f6:81:27:35:02:f4:2a:8c:65:d4:fe:
                    7f:b3:b1:be:00:fb:b2:58:6f:d0:fa:71:f9:cb:81:
                    9e:8a:7c:89:17:dd:3e:65:d1:d7:42:35:26:5d:02:
                    d7:1a:18:71:95:f8:d7:48:60:b7:14:b2:e6:70:d1:
                    52:8f:67:c7:b5:80:2a:67:a8:b6:c5:0b:fd:48:42:
                    f1:10:8e:61:97:a7:5c:4e:07:c1:c6:a8:d4:b8:35:
                    12:3f:c1:78:c8:be:d3:8c:bc:39:9a:de:f5:f3:22:
                    cb:b1:42:7e:14:f0:af:37:06:42:34:0f:6f:24:fa:
                    76:42:f4:46:c6:fb:f6:50:48:45:ae:cf:0f:42:3c:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:11:6B:F9:21:6E:97:A6:66:C5:30:75:2D:68:59:3F:B2:C7:D2
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:3b:9c:66:5c:6a:c3:79:bf:2e:64:fc:d9:72:c5:ec:d8:
         15:76:8d:b0:89:03:e5:cb:b0:38:9f:b8:aa:4e:ae:b7:9d:22:
         56:71:f2:15:4d:78:46:aa:ae:0c:f1:0f:49:38:11:d8:9b:90:
         e8:00:9e:d5:d7:f6:b7:a5:23:95:29:da:46:6a:de:19:eb:7d:
         07:36:f1:e2:6d:da:cc:78:57:34:ba:5d:3c:bf:4a:c2:8d:30:
         7a:c3:16:c5:b4:a2:72:cd:ee:b2:fd:f3:41:81:09:07:ea:4a:
         45:c7:d7:47:70:00:09:01:37:8d:b7:b4:f0:ee:da:26:94:d0:
         b0:04:9d:d8:c7:56:17:e4:2f:1a:26:96:5e:93:d2:06:1b:b2:
         de:a4:bb:c3:bc:e0:4d:16:c7:89:73:86:89:9c:d1:ae:c3:47:
         7c:e1:59:1a:eb:68:22:f3:23:53:fb:9b:ae:07:94:71:b7:ff:
         0e:9f:57:a7:41:12:a7:20:23:c4:85:00:e4:78:f3:49:99:49:
         9c:4e:e2:36:d1:4c:56:73:ea:64:f1:a1:bf:29:6d:8b:f3:4e:
         5e:42:a4:c3:c6:92:e2:79:92:1f:20:ad:f9:67:fe:48:b3:63:
         38:07:95:8d:ee:a4:ff:87:da:ae:8f:e9:16:c8:5d:de:72:d2:
         d1:4c:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:42 2025 by rpki-client