Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          xasEdNZHIM7363dT/C+E6ATXhUQOqA3t4TxOLaBMX2g=
Subject key identifier:   3E:55:25:31:21:5C:E1:B5:9E:21:43:64:49:D0:3E:68:5F:A3:DD:24
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       019D29CE2A05EE408FADE10728F4ACDE65C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          09FA
Signing time:             Thu 26 Mar 2026 11:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:10 +0000
Files and hashes:         1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: NZOIlcX4k3h1t5COvYIhbVWwhBgFaCyV8Mkf5vDoJxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:2a:05:ee:40:8f:ad:e1:07:28:f4:ac:de:65:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Mar 26 11:01:10 2026 GMT
            Not After : Mar 27 11:01:10 2026 GMT
        Subject: CN=3e552531215ce1b59e21436449d03e685fa3dd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:34:b3:e5:b8:93:86:84:6f:bd:1c:01:41:
                    23:db:a9:b7:d8:c2:16:58:1e:04:5b:61:ee:a1:88:
                    5c:46:47:63:b1:19:d7:bc:29:7e:51:25:4e:a8:08:
                    12:7f:25:6e:20:76:e6:0f:a6:2e:3a:5d:ea:94:ce:
                    b7:9b:5e:ef:a9:73:0d:c1:02:25:9b:c3:f6:08:0c:
                    7c:06:63:e4:35:2b:e7:02:31:c8:00:3e:a6:63:c7:
                    fe:52:5c:20:a2:dc:12:32:09:ef:65:53:05:8a:73:
                    cd:b0:7e:0b:bb:0e:2b:65:f1:02:41:98:4a:04:93:
                    f2:6b:c9:12:55:68:ec:e9:bb:d1:94:09:6a:a4:48:
                    9e:90:85:36:e9:28:e4:dc:a4:48:56:18:80:73:41:
                    1b:d1:86:f2:c2:f1:ff:b1:1f:e4:c4:81:2c:9b:c8:
                    d2:07:ff:c7:3c:9c:a9:c2:c7:8a:ee:12:00:bb:e6:
                    6f:e7:cc:ae:a9:2f:4e:d4:23:05:1c:b6:a4:68:52:
                    a2:74:52:a3:12:92:13:6e:98:71:a0:c4:95:43:49:
                    fa:b4:0f:42:8e:a4:1f:06:22:d4:62:9a:bd:70:60:
                    a5:d1:d8:d0:8e:a4:c1:da:3a:6a:89:95:02:04:4d:
                    4a:46:3e:24:cb:ac:90:77:8f:9f:23:e6:a4:e5:6e:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:25:31:21:5C:E1:B5:9E:21:43:64:49:D0:3E:68:5F:A3:DD:24
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d8:cd:4b:0d:bd:ef:7e:2a:d1:60:56:74:fa:69:ac:45:51:
         5f:2a:e6:8a:b2:e1:d3:bb:e6:58:65:9d:5b:d0:27:14:44:c8:
         37:cb:9b:56:2a:07:dc:55:eb:6b:1a:a8:0f:27:ab:54:bb:d6:
         8f:66:9b:db:05:55:88:fb:1a:ec:08:e0:dd:25:27:dc:a3:d3:
         93:78:80:40:3e:56:a7:da:e1:cb:57:8d:55:c7:66:a1:11:fd:
         0c:aa:ac:cc:fc:48:8e:51:3d:b0:46:f8:fc:d7:c6:2c:74:99:
         71:7b:e5:f0:3f:88:39:be:bc:5e:a1:cd:39:eb:d8:9f:6d:59:
         e6:a1:6e:21:59:bd:93:5f:15:ef:a3:e2:4b:e9:b4:c0:96:fc:
         58:37:f9:c7:d7:16:5e:a5:47:fb:55:51:45:8e:10:b5:08:94:
         4d:23:e8:bc:97:f4:c2:7e:ac:8a:3d:74:09:60:ba:be:d1:66:
         05:0d:59:92:f8:dc:b9:26:b0:59:6d:f4:42:10:7a:7c:22:00:
         54:a4:ff:16:ae:9c:5b:c8:a4:b0:a9:ee:88:bc:5b:85:80:d2:
         a9:f1:46:2e:b3:9a:90:ce:79:64:3a:d6:82:cb:5d:77:1a:f2:
         41:c0:e8:5f:c3:96:94:af:5e:ac:34:46:83:67:82:fc:71:85:
         62:c3:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:35 2026 by rpki-client