Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File:                     mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier:          brEMk+aQYOMHhRL6EKrFWh3LoePV/Zd5wlt98/kvKYE=
Subject key identifier:   99:D7:CB:78:7E:FD:26:E4:6C:B1:80:DC:21:BF:3D:A2:4F:F2:77:4B
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer:       /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial:       0199FBEBF20D56520F9BBA5F2A2502EF0271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number:          0CF5
Signing time:             Sun 19 Oct 2025 10:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:47 +0000
Files and hashes:         1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
                          2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: 64nOvLf6503euwVW3lD6KtsbHMjqO/pudlNG9nawOeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f2:0d:56:52:0f:9b:ba:5f:2a:25:02:ef:02:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
        Validity
            Not Before: Oct 19 10:02:47 2025 GMT
            Not After : Oct 20 10:02:47 2025 GMT
        Subject: CN=99d7cb787efd26e46cb180dc21bf3da24ff2774b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:19:ed:ca:2d:9f:a3:53:82:40:20:dc:5d:
                    96:2c:62:6a:84:bf:61:ff:ae:63:d6:25:e3:70:7a:
                    4a:10:a2:7d:d2:08:ea:06:71:33:bd:d4:c1:45:b2:
                    8b:0a:aa:7e:00:a8:ff:f3:d9:49:d2:df:89:b6:87:
                    2d:de:64:d0:37:17:14:33:6e:d5:dc:04:02:c2:2d:
                    34:2f:4a:6c:f2:c9:29:9a:43:2d:5b:ef:9d:62:7a:
                    10:3b:91:a1:82:bf:e3:a3:6f:d9:1e:9e:92:eb:de:
                    d3:fb:18:fe:37:9f:da:f3:0d:37:f8:4a:7f:13:db:
                    e1:b6:2a:d2:bd:bc:f5:ad:5b:78:2f:64:c9:bd:f6:
                    4a:00:96:9c:56:51:e7:1d:95:d2:b2:b3:5a:9d:0d:
                    47:80:98:3d:9b:93:77:0f:ad:65:59:82:62:07:8f:
                    df:1d:52:19:50:65:c6:ce:2c:99:e8:9c:04:18:14:
                    78:bb:a1:ba:24:fe:83:02:6f:4f:ce:8b:12:ca:89:
                    49:d8:24:f2:1a:2d:88:91:80:27:bf:d0:f0:9d:d5:
                    b6:f0:28:f4:13:03:c6:32:51:52:05:12:a4:08:45:
                    1f:be:cf:a5:6a:ae:cc:1c:aa:bf:c8:32:3f:3c:d3:
                    61:43:99:57:f3:8c:68:e0:bf:6a:96:58:e6:57:7e:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:CB:78:7E:FD:26:E4:6C:B1:80:DC:21:BF:3D:A2:4F:F2:77:4B
            X509v3 Authority Key Identifier:
                keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:f4:0a:e8:98:22:a3:08:12:b3:ab:c5:28:c5:9b:cb:4b:
         d5:dc:6a:0a:4f:e2:17:10:81:4c:26:34:fe:44:4a:8d:50:35:
         1e:13:c0:bd:a9:23:7b:b6:31:94:79:07:1c:04:af:0a:1a:48:
         c2:51:7e:35:f5:6a:9f:e2:17:c2:89:2b:70:f4:3f:32:4a:f0:
         d8:06:2a:89:28:84:f6:4d:f5:94:cd:19:91:d3:ea:9b:ba:2e:
         f1:a2:dc:c2:8b:15:39:ea:d3:03:3f:5e:83:6b:78:1c:51:c5:
         2a:3d:a5:3c:82:0a:5f:ba:0f:5c:2a:ff:fb:9e:55:f6:bb:2b:
         c7:8e:e2:b9:59:4a:e2:c5:7b:60:ae:18:92:ae:1f:6b:1e:cf:
         5d:b8:b6:8d:af:47:2b:48:72:24:3c:81:54:8a:75:2c:23:5d:
         c3:79:e5:06:8a:6d:90:c4:07:5c:ad:3b:09:dd:db:45:2f:40:
         53:a0:04:ec:32:8e:04:3b:bc:58:c3:9e:06:d3:f2:40:ec:70:
         17:db:25:37:8f:67:9a:12:7c:b9:fb:23:47:c8:e3:c6:18:97:
         e8:f1:3b:a6:af:3b:41:64:bc:2a:af:f3:0f:64:16:e3:af:8c:
         37:07:2e:b3:d3:e6:e0:cc:39:5c:e4:13:b9:ef:0e:a4:00:b0:
         b8:80:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:13 2025 by rpki-client