Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File:                     mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier:          NXLvz3uEK6O2NyLFHCsYuKiDerW5eUF7hGbbiJTqda0=
Subject key identifier:   7A:4B:9E:D3:C9:14:C5:08:82:58:1A:39:FA:9F:00:79:F8:EF:D5:1E
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer:       /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial:       019D27A929F90F7AAAC442433AC8C5C7C175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number:          0E9A
Signing time:             Thu 26 Mar 2026 01:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:30 +0000
Files and hashes:         1: Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa (hash: okiWGqJS235fCpGNLndRTcJ9gZ0cQPFcyQUgRG2jzsY=)
                          2: SvxCrHRH9qtDgRtKCtLQ9Vh4GMg.roa (hash: hh/DbdPPGnpvcaZfF2CgRTxk6vKo3UGb19IP1Aj8Lm0=)
                          3: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: kx3hJz2glbmCOVIi4aB4jMmO3WiGtwTuN2jw5VDP0DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:29:f9:0f:7a:aa:c4:42:43:3a:c8:c5:c7:c1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
        Validity
            Not Before: Mar 26 01:01:30 2026 GMT
            Not After : Mar 27 01:01:30 2026 GMT
        Subject: CN=7a4b9ed3c914c50882581a39fa9f0079f8efd51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:5c:66:8c:83:c6:ac:cd:ce:5d:45:2f:26:
                    0d:d5:f7:65:e9:25:09:47:21:b2:ba:3d:b2:6c:bc:
                    ef:99:0f:4d:04:fb:e6:c8:df:37:4c:cb:86:72:67:
                    11:fa:6c:a0:2e:46:c2:d4:f2:d6:ca:38:53:e2:82:
                    f7:10:ab:ac:9a:b7:f9:6c:0d:05:5b:d1:35:56:9d:
                    42:7c:17:47:14:00:c8:44:78:0a:53:5c:a4:11:3c:
                    e4:fe:a6:2f:8f:29:9c:32:c3:a3:f5:05:25:2a:a6:
                    fd:53:8a:47:12:35:4e:68:de:00:c6:75:b1:aa:be:
                    f1:ca:da:bb:6d:76:2c:ad:b0:ee:89:a9:f4:f0:7a:
                    c2:08:b8:7d:4b:dd:dd:dd:2c:41:af:cf:64:a6:b2:
                    ad:c9:ff:ea:ca:36:51:1b:96:86:d0:c6:13:43:7b:
                    76:c0:f3:a6:9b:5b:7c:32:ff:52:36:bb:95:91:c3:
                    9a:0d:66:2b:84:ee:09:4c:f6:6d:5c:0a:2e:b8:a8:
                    43:0a:ba:c7:cb:00:1a:00:ff:72:c5:64:4e:b9:4e:
                    bc:17:2c:7c:14:c6:54:80:cc:12:54:5d:02:42:7e:
                    49:a3:ed:eb:f7:0c:64:0b:ad:3a:74:bb:d1:a6:ab:
                    b6:59:0c:81:f9:be:fc:b1:a1:0f:82:39:4a:25:83:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4B:9E:D3:C9:14:C5:08:82:58:1A:39:FA:9F:00:79:F8:EF:D5:1E
            X509v3 Authority Key Identifier:
                keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:05:5c:bf:3f:a0:0b:ae:ed:ec:e4:9c:af:95:4b:3d:ca:
         10:7f:97:22:4d:bc:3d:0e:7b:19:bf:0a:ca:de:6f:d4:95:62:
         93:56:03:20:5f:07:2a:4a:72:93:52:d8:be:96:9e:d2:69:d5:
         2b:c5:5d:30:35:70:e4:10:33:90:94:27:2d:0b:db:06:3e:36:
         24:a2:6a:4d:e9:77:9b:bb:51:8e:46:82:2d:f3:0e:32:1e:c1:
         a5:9c:86:83:86:98:25:4c:b1:aa:dc:0e:64:fd:ab:ba:e1:cd:
         f6:a0:92:12:4b:70:60:cf:ff:d6:23:e8:b2:3d:fd:9f:83:52:
         3a:e4:a7:71:bf:af:57:a1:7e:27:aa:81:b1:1a:39:a9:50:7d:
         be:8f:71:ff:4e:18:00:8b:18:c2:f3:9a:67:22:4f:dc:3f:86:
         d5:77:98:d7:df:36:cb:5c:5a:88:a2:76:df:9c:62:7f:d8:5b:
         a0:a2:4f:4c:cd:3e:40:01:90:a3:68:2a:96:79:0a:c9:41:6e:
         d2:fc:4d:da:49:35:19:72:88:ac:b0:58:6e:61:f0:84:26:4b:
         b8:7a:71:39:b8:3a:c6:59:51:9a:16:b6:36:bb:12:75:a1:ba:
         46:43:c8:40:d3:27:61:7e:a2:3d:6c:fb:b3:9b:b8:8c:39:8e:
         b6:e5:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:40 2026 by rpki-client