Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          8MnOSXFqSd5nOhGE5KN/LKRHF5X6vzPqESxj4c9eLIw=
Subject key identifier:   35:41:33:E1:12:CC:5D:C7:E7:22:51:95:DD:DD:0F:6B:A7:DA:3C:BE
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       01A0DA28E94BA3CA6093C75ED5EED5A3C1B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0BE3
Signing time:             Fri 25 Sep 2026 20:01:49 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:49 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:49 +0000
Files and hashes:         1: pC1PxnBfbpu2eskCC6g9M0LEFYc.roa (hash: JhfK+r3Mm7DMr8mukWX8lT+1cq71+mLTWF1BdfN9lpc=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: FNYGfmkviYGfeCjTa88AXLmmFNAtHJBVE/S1rJuvY0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:e9:4b:a3:ca:60:93:c7:5e:d5:ee:d5:a3:c1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Sep 25 20:01:49 2026 GMT
            Not After : Sep 26 20:01:49 2026 GMT
        Subject: CN=354133e112cc5dc7e7225195dddd0f6ba7da3cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:70:e7:4f:c5:08:19:eb:fd:f0:27:d6:10:
                    7d:d8:0c:1b:f5:90:2e:dd:51:42:b2:d2:26:15:1c:
                    65:76:9d:57:ed:49:2a:d2:c1:d7:59:9d:76:1f:b0:
                    96:bd:d1:bd:b0:5b:12:12:db:53:93:d1:a3:ad:23:
                    8f:75:6e:88:bf:9d:4f:72:60:fe:4b:74:47:0f:a7:
                    af:96:45:14:b8:5f:a0:f9:50:be:a6:bc:1e:f0:be:
                    28:31:d3:d2:01:6f:96:8f:48:bf:e8:88:43:4c:5c:
                    47:1e:ba:0e:0a:63:01:f7:8c:16:0e:62:5c:80:c9:
                    76:48:46:9e:b1:eb:9b:f7:ea:db:c1:5f:92:c2:02:
                    be:e1:92:a2:70:99:3d:74:06:c0:ce:30:ed:8d:54:
                    ed:cd:29:f6:d1:29:ac:d6:37:ce:00:ad:5d:05:0d:
                    b5:7a:ed:95:89:a0:6b:d5:3f:83:56:72:15:c2:98:
                    97:81:33:a2:2e:77:4f:dc:30:6f:b8:30:1a:1f:8d:
                    17:ea:bd:97:ff:3c:0f:15:b7:3d:ff:fe:67:f4:81:
                    77:72:1a:95:3f:55:60:42:4e:9e:73:8f:2f:a3:42:
                    91:17:68:ca:0e:ce:21:6c:53:77:2e:88:3e:1b:a3:
                    f8:c7:ec:fb:96:6e:f8:30:7f:f1:cc:df:bb:1f:33:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:33:E1:12:CC:5D:C7:E7:22:51:95:DD:DD:0F:6B:A7:DA:3C:BE
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:0b:78:4c:48:c2:64:64:57:95:46:09:ca:fa:89:77:69:
         e7:77:dc:78:52:17:5d:7d:c1:f4:be:1b:95:08:bc:14:5e:9f:
         6f:c3:78:5f:2d:4e:4a:c6:e4:0d:90:1c:9c:04:d8:cf:5d:da:
         a8:d0:8f:7a:f5:f3:04:23:a1:0d:80:48:eb:14:71:ac:bb:ff:
         ee:fa:ca:64:3d:96:f3:ae:62:b2:44:dc:ce:05:68:6f:2a:1c:
         6e:74:8f:9e:a1:54:9a:99:20:ab:83:ad:b9:6c:22:9b:2f:3b:
         23:da:a6:c5:c4:63:08:e3:ad:45:53:9b:84:60:71:49:e6:0b:
         e1:d1:7b:4b:e6:2d:3b:49:bf:41:52:51:b9:96:d5:ff:a0:09:
         55:0b:e4:0e:e4:16:23:f4:b4:c8:7e:4b:40:2c:6c:9b:73:3f:
         e1:0a:e5:5b:82:df:19:e9:e4:0a:18:0f:14:eb:f4:ba:0e:95:
         0f:ba:31:5c:24:fe:82:10:db:74:b0:07:6e:e1:28:07:37:74:
         33:06:3b:3e:96:3e:d3:bc:9f:c5:33:2f:17:f7:92:0f:03:02:
         ea:30:6a:68:ab:1d:b2:a6:8c:26:a3:73:12:f0:ce:8e:5f:11:
         d9:f4:b5:6e:1a:d6:92:a9:64:55:52:7b:e4:00:83:d7:22:9e:
         f8:44:fb:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKOlLo8pgk8de1e7Vo8G3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk
NmM1YTUwHhcNMjYwOTI1MjAwMTQ5WhcNMjYwOTI2MjAwMTQ5WjAzMTEwLwYDVQQD
EygzNTQxMzNlMTEyY2M1ZGM3ZTcyMjUxOTVkZGRkMGY2YmE3ZGEzY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDxw50/FCBnr/fAn1hB92Awb9ZAu
3VFCstImFRxldp1X7Ukq0sHXWZ12H7CWvdG9sFsSEttTk9GjrSOPdW6Iv51PcmD+
S3RHD6evlkUUuF+g+VC+prwe8L4oMdPSAW+Wj0i/6IhDTFxHHroOCmMB94wWDmJc
gMl2SEaeseub9+rbwV+SwgK+4ZKicJk9dAbAzjDtjVTtzSn20Sms1jfOAK1dBQ21
eu2ViaBr1T+DVnIVwpiXgTOiLndP3DBvuDAaH40X6r2X/zwPFbc9//5n9IF3chqV
P1VgQk6ec48vo0KRF2jKDs4hbFN3Log+G6P4x+z7lm74MH/xzN+7HzMENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVBM+ESzF3H5yJRld3dD2un2jy+MB8GA1UdIwQY
MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt
ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm
LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimgLeExI
wmRkV5VGCcr6iXdp53fceFIXXX3B9L4blQi8FF6fb8N4Xy1OSsbkDZAcnATYz13a
qNCPevXzBCOhDYBI6xRxrLv/7vrKZD2W865iskTczgVobyocbnSPnqFUmpkgq4Ot
uWwimy87I9qmxcRjCOOtRVObhGBxSeYL4dF7S+YtO0m/QVJRuZbV/6AJVQvkDuQW
I/S0yH5LQCxsm3M/4QrlW4LfGenkChgPFOv0ug6VD7oxXCT+ghDbdLAHbuEoBzd0
MwY7PpY+07yfxTMvF/eSDwMC6jBqaKsdsqaMJqNzEvDOjl8R2fS1bhrWkqlkVVJ7
5ACD1yKe+ET79A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:01:01 2026 by rpki-client