Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File:                     mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier:          CdDLTROmL57Q9Glf6OFSCMj6DXM2IRpmPhAFRg65cko=
Subject key identifier:   11:05:6D:F8:87:B4:E6:8B:F9:C7:CF:2B:D6:BF:89:4A:A4:46:19:B6
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer:       /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial:       019CAA58BEBE339319BB9410F64826DD0E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number:          0E59
Signing time:             Sun 01 Mar 2026 17:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:08 +0000
Files and hashes:         1: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (hash: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0=)
                          2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: ILb4FdevatKOeBlQOFnQT+nQ0q8vL5MN3PHIWLDZQSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:be:be:33:93:19:bb:94:10:f6:48:26:dd:0e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
        Validity
            Not Before: Mar  1 17:01:08 2026 GMT
            Not After : Mar  2 17:01:08 2026 GMT
        Subject: CN=11056df887b4e68bf9c7cf2bd6bf894aa44619b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a4:48:ac:e0:fe:48:de:af:08:39:75:8c:dc:
                    8a:e7:28:5f:98:35:f5:e5:3d:68:1b:08:88:5b:54:
                    93:56:1a:fb:05:49:dd:7b:4e:0a:d1:3d:7f:1c:15:
                    ab:1d:f8:63:f6:0b:3b:91:18:26:14:b6:00:56:44:
                    8e:6b:17:fd:2b:c2:92:d2:4e:bb:5c:22:aa:bf:e2:
                    bd:7c:9e:c9:39:8f:89:85:84:9e:20:42:e7:38:6f:
                    d5:0c:8a:95:3e:0d:74:60:56:36:ea:07:b0:2d:05:
                    de:d9:75:49:5d:d0:26:04:ef:37:3c:92:4a:eb:18:
                    f2:cb:ca:74:3f:96:27:31:5b:a8:5c:90:c7:3d:78:
                    d3:27:52:9a:be:ac:c6:64:5f:ef:ac:f7:73:75:e6:
                    f6:60:ff:84:96:43:2e:a8:ec:55:e3:2c:a4:e5:2d:
                    7b:44:bd:9c:ab:29:0d:2a:45:e6:92:6b:4b:57:77:
                    f0:92:a4:c4:74:0e:f3:06:a3:2f:50:44:e7:f3:ab:
                    ae:41:7c:8f:b9:81:c3:4a:20:22:83:10:79:50:73:
                    7e:1a:5a:db:e6:0a:ff:b2:28:ac:6a:1d:97:94:4d:
                    b5:91:fe:71:4e:03:d5:ca:ab:36:b2:7a:0d:b7:29:
                    50:10:88:01:09:b4:1d:38:42:24:6b:c0:71:fe:dc:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:6D:F8:87:B4:E6:8B:F9:C7:CF:2B:D6:BF:89:4A:A4:46:19:B6
            X509v3 Authority Key Identifier:
                keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:89:e2:41:07:66:e3:87:81:35:1a:e8:8d:cf:ec:9a:0b:a7:
         12:12:ca:0f:0f:41:4b:ee:92:9b:a4:d8:fe:20:b7:f7:f4:88:
         fe:56:d6:88:b0:79:22:9f:67:a5:bf:ba:29:13:51:51:bb:d8:
         fc:ca:da:d1:e6:a3:d7:30:17:96:8c:43:88:c8:d5:d8:ad:66:
         4b:6b:d5:29:26:8d:37:04:de:fb:70:11:1b:2f:58:34:dc:0d:
         9c:0e:be:8a:82:4a:2c:57:f8:8d:dd:d3:14:64:3f:f1:5d:8d:
         5b:ca:9c:41:a9:d5:45:12:2b:00:55:7a:4c:f0:68:77:30:9c:
         8d:84:e3:3f:d2:a5:0a:f8:1f:e6:64:d5:61:60:c1:52:0d:ec:
         54:6c:69:f1:bb:40:a9:a8:3c:ea:96:40:5f:53:19:5a:de:ef:
         72:ae:ca:b5:ff:7a:1c:ec:b5:a0:42:67:5e:37:bd:c2:e9:8b:
         3b:db:97:65:b0:ef:b3:17:84:05:e2:41:83:2c:2b:74:20:f3:
         26:37:9e:4c:52:67:c9:c8:71:6b:89:ee:4e:bd:9a:3f:e6:3b:
         fc:1e:02:15:ef:ca:1c:df:af:d3:87:c0:79:35:ac:12:1c:82:
         c3:0e:df:63:cf:02:5d:d9:8e:d4:15:bc:4d:c6:e3:b5:7d:9d:
         ba:c6:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:34 2026 by rpki-client