Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          Kg+ZZw177K5Q7KxaLEpa9IDYz6u+pBWG3kzlFAYcZSU=
Subject key identifier:   16:2D:2D:80:86:D1:25:6C:E3:40:60:CE:6E:41:0A:67:76:7E:4D:63
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       01A0C6D791C1F29135A0164887F9B3A22D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0BD9
Signing time:             Tue 22 Sep 2026 02:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:11 +0000
Files and hashes:         1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: p4Zqq5qtYw4Ztq7zjd7ra/Ya0tuELrZBzNd8fLFH4lY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:91:c1:f2:91:35:a0:16:48:87:f9:b3:a2:2d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Sep 22 02:00:11 2026 GMT
            Not After : Sep 23 02:00:11 2026 GMT
        Subject: CN=162d2d8086d1256ce34060ce6e410a67767e4d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:4e:59:bf:21:ab:b3:4e:9e:fc:f0:80:fd:
                    9c:b8:b2:c2:41:22:d5:aa:21:17:84:bb:e0:48:04:
                    a1:ad:29:5a:a0:5b:f9:9b:b0:59:bc:0e:c6:dc:72:
                    a2:97:5e:e5:f3:74:70:11:17:f3:e9:5e:b2:87:b5:
                    22:da:bc:8b:83:fb:c0:37:2e:a0:be:dc:09:ae:14:
                    e7:8c:c5:a9:16:af:e9:5f:e9:b7:8f:00:e4:ab:c0:
                    c2:b8:81:e3:8f:51:85:91:98:9d:a8:19:ee:e2:40:
                    e4:1b:8c:bc:96:18:a2:76:0a:99:3a:8c:65:78:b6:
                    5b:69:0b:5f:f1:68:f3:97:7c:16:c0:b7:5e:74:2c:
                    1a:2e:b5:53:27:d0:ff:96:f8:03:85:e8:a8:a8:36:
                    20:c9:73:8c:b3:0f:51:07:27:d0:db:3f:2f:76:62:
                    14:2a:6e:d2:13:a8:92:43:d4:1c:75:9b:a0:8c:fd:
                    b6:1f:f0:4d:95:a2:26:5f:af:f7:ad:dd:1c:53:45:
                    97:aa:3d:89:0e:75:57:e7:70:0e:cd:07:58:85:c9:
                    b5:11:3f:6c:44:e9:6d:99:08:37:9b:b7:01:73:24:
                    30:2b:29:37:e8:77:3e:56:c2:36:2c:4a:f4:ec:36:
                    ab:22:bd:36:2d:6e:ad:5c:68:a4:fe:c8:fe:9d:1d:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2D:2D:80:86:D1:25:6C:E3:40:60:CE:6E:41:0A:67:76:7E:4D:63
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f8:41:2d:f6:e0:ee:37:ee:6f:28:94:a6:1e:98:95:fd:eb:
         65:af:9c:f6:51:b7:7d:b7:97:4c:9e:ef:c4:ac:21:bf:5c:8a:
         c6:a3:47:25:73:6a:c5:57:50:e5:17:42:fd:b6:e3:66:1c:cd:
         d0:5b:cf:3b:c5:52:e0:40:a8:97:55:fa:07:93:00:c3:87:75:
         b9:d8:58:5e:f6:bd:76:0b:66:46:18:7e:4f:a6:f7:38:62:1a:
         7a:7b:45:b1:d7:13:41:26:2a:75:a8:2c:aa:3e:c4:ba:81:2b:
         d5:5b:db:db:03:b0:2c:2a:73:ba:3a:16:e8:71:cc:c4:3b:2b:
         3c:27:84:37:c4:67:b3:12:c8:c4:85:63:c7:40:97:cc:05:02:
         67:e6:50:6d:28:76:99:1a:ff:68:4d:60:51:4d:e7:e7:a5:82:
         bb:98:ca:64:19:7d:ac:4f:cb:69:5b:41:44:e7:d4:e6:1a:f8:
         75:d0:53:92:18:2a:3d:3d:a1:e8:83:ad:b8:da:2f:2c:bd:d4:
         a0:48:86:7a:d3:06:90:a8:4f:af:d6:d2:a5:28:f8:d3:6c:2a:
         cb:55:13:1a:f9:89:69:f9:94:cb:20:fa:0e:6e:61:03:1b:0e:
         46:b5:cc:22:dd:e0:2a:69:6f:80:76:6d:58:11:ba:75:75:1c:
         c3:9b:c7:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG15HB8pE1oBZIh/mzoi0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk
NmM1YTUwHhcNMjYwOTIyMDIwMDExWhcNMjYwOTIzMDIwMDExWjAzMTEwLwYDVQQD
EygxNjJkMmQ4MDg2ZDEyNTZjZTM0MDYwY2U2ZTQxMGE2Nzc2N2U0ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkNOWb8hq7NOnvzwgP2cuLLCQSLV
qiEXhLvgSAShrSlaoFv5m7BZvA7G3HKil17l83RwERfz6V6yh7Ui2ryLg/vANy6g
vtwJrhTnjMWpFq/pX+m3jwDkq8DCuIHjj1GFkZidqBnu4kDkG4y8lhiidgqZOoxl
eLZbaQtf8Wjzl3wWwLdedCwaLrVTJ9D/lvgDheioqDYgyXOMsw9RByfQ2z8vdmIU
Km7SE6iSQ9QcdZugjP22H/BNlaImX6/3rd0cU0WXqj2JDnVX53AOzQdYhcm1ET9s
ROltmQg3m7cBcyQwKyk36Hc+VsI2LEr07DarIr02LW6tXGik/sj+nR24QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYtLYCG0SVs40Bgzm5BCmd2fk1jMB8GA1UdIwQY
MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt
ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm
LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/hBLfbg
7jfubyiUph6Ylf3rZa+c9lG3fbeXTJ7vxKwhv1yKxqNHJXNqxVdQ5RdC/bbjZhzN
0FvPO8VS4ECol1X6B5MAw4d1udhYXva9dgtmRhh+T6b3OGIaentFsdcTQSYqdags
qj7EuoEr1Vvb2wOwLCpzujoW6HHMxDsrPCeEN8RnsxLIxIVjx0CXzAUCZ+ZQbSh2
mRr/aE1gUU3n56WCu5jKZBl9rE/LaVtBROfU5hr4ddBTkhgqPT2h6IOtuNovLL3U
oEiGetMGkKhPr9bSpSj402wqy1UTGvmJafmUyyD6Dm5hAxsORrXMIt3gKmlvgHZt
WBG6dXUcw5vHaA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:26:26 2026 by rpki-client