Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          W3gsLE4XSq8yizA2I65dJvhNzfOj7gVXKaSq+HZJdkg=
Subject key identifier:   7B:8A:60:02:D3:85:FA:B0:01:56:53:3F:FA:F3:A5:A5:A7:C3:E9:9C
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       019D99D0A0E5A0B4D5D81CB997493608FDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0A34
Signing time:             Fri 17 Apr 2026 05:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:19 +0000
Files and hashes:         1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: kbpAKL9LawVqQYjWdzUoDhgh/9LoooI2Ga4IfrChGOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:a0:e5:a0:b4:d5:d8:1c:b9:97:49:36:08:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Apr 17 05:01:19 2026 GMT
            Not After : Apr 18 05:01:19 2026 GMT
        Subject: CN=7b8a6002d385fab00156533ffaf3a5a5a7c3e99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:cc:af:a2:fb:c9:6e:28:93:fe:b7:d8:87:
                    25:9a:d3:14:83:69:a1:65:70:7b:b8:a2:f4:ba:25:
                    b5:9c:dd:95:d0:a3:7c:05:08:dc:7e:99:59:c6:12:
                    dd:f5:0a:6c:b2:e5:b3:9d:06:b4:77:14:97:8c:2c:
                    4c:27:fc:d8:d6:49:8c:26:31:fb:64:8a:27:5e:24:
                    b8:9e:06:a8:17:2d:a3:49:9a:45:f9:bb:d6:6c:e3:
                    13:f7:3c:89:29:de:01:b1:61:5a:e7:b2:01:bf:a1:
                    22:c6:93:b1:6e:a7:c8:a8:5d:f8:da:e3:72:cb:42:
                    0d:fc:1f:29:9e:77:82:77:6c:13:9a:2f:4b:e9:c4:
                    b7:8f:75:1e:2e:19:82:52:7f:49:6c:c5:c0:b6:b4:
                    ea:1d:68:a0:28:77:17:61:c0:a0:74:17:80:1b:d4:
                    e6:70:f5:7d:58:56:81:4e:3d:94:a2:9f:28:c0:29:
                    f3:9b:b4:08:6a:76:f3:28:14:80:59:7b:70:4e:80:
                    8d:9c:86:77:c0:a1:57:c3:1e:95:da:60:c0:7b:8f:
                    85:fc:b1:d4:cd:2a:e5:a1:dc:b4:47:70:0f:47:1e:
                    62:b0:68:9c:bb:b7:e3:02:41:b2:b1:7e:15:a4:31:
                    82:bb:49:2f:ef:2c:0c:80:b1:c0:a0:d2:b8:c3:12:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8A:60:02:D3:85:FA:B0:01:56:53:3F:FA:F3:A5:A5:A7:C3:E9:9C
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:21:7b:61:10:bf:52:40:5d:6d:6b:f4:92:cd:8c:b9:b0:cb:
         5d:af:17:0a:6d:de:eb:19:fe:59:0f:56:6d:eb:4b:d8:b7:d4:
         8b:cd:23:bf:b3:36:1d:35:2a:68:36:a4:fc:bd:57:f9:0d:8c:
         4e:25:3b:d8:2e:26:42:7a:a3:bb:b8:eb:a2:93:dc:e5:88:79:
         94:43:5a:c7:4d:74:68:cc:8e:72:c1:3f:32:b2:67:94:85:41:
         e1:14:36:c8:d6:07:80:3d:1b:c8:7d:65:f0:f5:80:c8:1a:f0:
         fd:ad:22:30:0a:94:72:63:13:54:9b:d2:a0:2b:c2:af:67:a6:
         d4:53:96:69:39:43:89:95:7e:22:87:30:d5:fd:00:e4:04:ac:
         f2:81:1c:e8:6f:17:a5:93:ba:f9:7b:89:1f:d8:c7:6b:18:d0:
         db:6f:cd:0b:83:55:39:0d:ae:af:ce:0b:75:05:8c:8f:4b:2b:
         ef:d6:e7:a3:4d:90:3b:d2:73:c9:d2:02:f8:43:0f:e0:b6:77:
         09:a1:9a:44:45:bf:87:9a:b9:ea:b4:38:b1:6c:d0:49:45:57:
         89:94:19:55:57:44:70:c9:e3:ab:79:22:97:08:37:da:dd:4d:
         0a:f9:f4:b6:05:b6:d8:a4:d5:21:2b:c5:ed:97:d2:47:a8:32:
         18:21:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:22 2026 by rpki-client