Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          DUAvYTAIYmSRwds4EKk8EPhHVwCfGYrlb7evdJVC0Sk=
Subject key identifier:   78:2F:29:96:74:02:96:B4:C6:59:59:16:B2:57:E8:4C:FB:F4:1A:52
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       0198D583B22288E48CE66F422E227D416EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          07BC
Signing time:             Sat 23 Aug 2025 06:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:34 +0000
Files and hashes:         1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: +rCNMvHr0ILEUn+uR3CGpcWpJQp+BdV4rw4RcWbrWK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:b2:22:88:e4:8c:e6:6f:42:2e:22:7d:41:6e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Aug 23 06:00:34 2025 GMT
            Not After : Aug 24 06:00:34 2025 GMT
        Subject: CN=782f2996740296b4c6595916b257e84cfbf41a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:f4:65:4b:f3:be:88:c9:44:27:7a:45:f0:
                    c2:66:96:c9:87:09:11:77:5d:c8:bb:e8:24:06:c4:
                    d7:37:ed:db:40:e6:fa:d2:5f:50:de:2a:4d:25:8d:
                    97:91:88:36:ed:55:da:30:b8:67:fa:35:57:fb:40:
                    65:0f:99:32:17:16:71:80:cd:b5:61:d9:3e:c8:db:
                    32:63:cf:d6:88:9d:c1:77:84:76:49:80:15:fd:80:
                    46:35:1f:3c:3c:09:60:9c:41:84:1f:02:df:f0:3f:
                    be:ce:31:04:e3:e7:85:c2:9b:3c:06:62:1e:cf:88:
                    12:ef:b5:f1:ff:06:d5:0a:dd:33:cc:90:30:da:a0:
                    1a:90:f7:26:66:f6:48:da:f7:f0:c3:bb:24:5e:ff:
                    f6:09:a6:41:57:01:18:a7:24:3c:50:2f:53:f1:58:
                    0f:4a:17:21:48:dd:07:41:f8:c1:2e:a3:55:41:32:
                    7b:12:a8:cc:d5:31:db:17:ed:c2:6e:12:9c:e8:6a:
                    71:6f:6e:c4:3f:d9:29:45:49:43:87:34:1b:6b:8e:
                    58:b5:67:d0:f8:f1:9b:75:b4:39:86:49:3c:1f:ea:
                    91:d7:c7:05:19:d6:eb:02:33:19:99:83:ac:de:d6:
                    0a:1c:17:70:da:85:96:6f:2b:d3:fa:0e:c2:49:40:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:29:96:74:02:96:B4:C6:59:59:16:B2:57:E8:4C:FB:F4:1A:52
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:06:59:97:0f:24:11:2a:4a:4a:51:c5:98:b5:9a:b0:07:
         3e:fd:73:a3:3f:2f:d2:fa:46:27:b0:29:57:90:47:27:a4:e7:
         ed:4d:c9:e8:5e:46:ea:f3:d6:ec:d3:3c:38:c2:56:31:65:97:
         e0:96:84:89:e0:c3:5c:09:5d:ac:f8:17:3c:4c:f5:a2:ec:c2:
         18:d7:5e:5e:d5:71:ba:4b:0e:47:b8:fe:ce:54:ed:1f:c6:5a:
         3e:5e:9c:97:0b:a7:87:4b:24:8c:44:52:16:ce:41:a4:4a:11:
         e7:3e:b5:bb:5f:e8:4b:b0:1f:7e:97:41:ac:47:53:16:e2:91:
         7a:80:96:ce:3f:6e:a8:a7:5d:b5:f1:61:f4:2a:13:79:45:da:
         dd:18:10:b6:2f:21:d5:35:42:2a:5f:a3:a1:9e:f9:14:42:69:
         0e:b9:cb:42:de:82:a9:29:76:94:32:a6:06:51:03:42:9d:9e:
         bc:36:16:37:a6:db:2e:d9:fc:01:fb:25:24:fc:50:e7:9f:08:
         c0:d3:2c:d7:d9:8d:49:20:07:9e:b7:3a:aa:43:8f:37:09:4e:
         fd:f1:bb:b7:d7:77:98:01:a7:ee:21:b9:47:ef:e8:70:4f:fe:
         cc:d5:be:c4:ed:6d:82:ed:db:1f:7f:9a:be:17:63:41:16:c5:
         83:f2:e6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7IiiOSM5m9CLiJ9QW60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTRhNjhhYWZlYzk1MjJkYTljYWM4MDBiNDMyNGNjZDdk
NmM1YTUwHhcNMjUwODIzMDYwMDM0WhcNMjUwODI0MDYwMDM0WjAzMTEwLwYDVQQD
Eyg3ODJmMjk5Njc0MDI5NmI0YzY1OTU5MTZiMjU3ZTg0Y2ZiZjQxYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRb0ZUvzvojJRCd6RfDCZpbJhwkR
d13Iu+gkBsTXN+3bQOb60l9Q3ipNJY2XkYg27VXaMLhn+jVX+0BlD5kyFxZxgM21
Ydk+yNsyY8/WiJ3Bd4R2SYAV/YBGNR88PAlgnEGEHwLf8D++zjEE4+eFwps8BmIe
z4gS77Xx/wbVCt0zzJAw2qAakPcmZvZI2vfww7skXv/2CaZBVwEYpyQ8UC9T8VgP
ShchSN0HQfjBLqNVQTJ7EqjM1THbF+3CbhKc6Gpxb27EP9kpRUlDhzQba45YtWfQ
+PGbdbQ5hkk8H+qR18cFGdbrAjMZmYOs3tYKHBdw2oWWbyvT+g7CSUBmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgvKZZ0Apa0xllZFrJX6Ez79BpSMB8GA1UdIwQY
MBaAFKakpoqv7JUi2pysgAtDJMzX1sWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUt
ZTkzMDFhZmMzODRmLzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85ZTliMTctZWQ4My00MjcyLWJmYmUtZTkzMDFhZmMzODRm
LzEvcHFTbWlxX3NsU0xhbkt5QUMwTWt6TmZXeGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9wGWZcP
JBEqSkpRxZi1mrAHPv1zoz8v0vpGJ7ApV5BHJ6Tn7U3J6F5G6vPW7NM8OMJWMWWX
4JaEieDDXAldrPgXPEz1ouzCGNdeXtVxuksOR7j+zlTtH8ZaPl6clwunh0skjERS
Fs5BpEoR5z61u1/oS7AffpdBrEdTFuKReoCWzj9uqKddtfFh9CoTeUXa3RgQti8h
1TVCKl+joZ75FEJpDrnLQt6CqSl2lDKmBlEDQp2evDYWN6bbLtn8AfslJPxQ558I
wNMs19mNSSAHnrc6qkOPNwlO/fG7t9d3mAGn7iG5R+/ocE/+zNW+xO1tgu3bH3+a
vhdjQRbFg/LmAA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:44 2025 by rpki-client