Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File:                     mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier:          DKF+W2ikANO1owsj3rrLbo3bd2s5t6GwAhhE677PQJo=
Subject key identifier:   D1:3D:27:FF:36:F1:40:04:D3:E3:C8:84:BF:D6:DB:58:C3:83:4C:85
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer:       /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial:       019510903F09CBFE7081801467245AB79F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number:          0A69
Signing time:             Sun 16 Feb 2025 21:00:43 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:43 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:43 +0000
Files and hashes:         1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
                          2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: T0fMtPzMOm7Bz6YlCt2J5Gs9GLnEadLa9Xo4aNVl0Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:90:3f:09:cb:fe:70:81:80:14:67:24:5a:b7:9f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
        Validity
            Not Before: Feb 16 21:00:43 2025 GMT
            Not After : Feb 17 21:00:43 2025 GMT
        Subject: CN=d13d27ff36f14004d3e3c884bfd6db58c3834c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:73:a8:77:21:b3:2e:9d:ca:1b:9a:4e:9d:
                    0d:80:88:42:19:7f:a2:52:06:a1:39:21:7f:80:be:
                    0e:a9:b3:41:6e:c9:58:5c:f5:24:8b:34:5d:8a:c9:
                    ba:c9:45:49:71:ef:9f:df:c5:f7:a3:c3:05:f0:9a:
                    9f:14:3b:63:76:52:63:17:99:be:9c:c2:98:98:6d:
                    3b:dc:a4:a6:4b:3e:3f:08:1b:70:fb:46:fa:71:8c:
                    7f:05:9b:69:77:05:7c:54:bc:38:1b:20:c1:41:f7:
                    03:35:a2:d9:f0:aa:03:7e:18:38:52:45:5d:d0:cf:
                    47:86:10:c7:ff:f5:8c:ae:35:27:b9:c4:35:53:fe:
                    dc:5d:60:45:b4:43:57:74:d9:98:32:04:39:13:0f:
                    4c:0f:a3:40:81:2d:70:42:ae:e1:94:b8:fd:8b:fa:
                    90:c1:42:7c:6f:d5:21:f0:04:cf:66:35:9a:93:a9:
                    3e:15:64:ae:6d:3d:ed:a5:5e:84:68:9d:a2:b5:d1:
                    57:2e:26:bb:43:ad:d9:f3:13:44:ab:38:31:b0:de:
                    8d:70:72:d1:0b:0e:6e:27:1e:d0:52:b1:1f:9f:ec:
                    1c:4f:a1:95:2e:2c:48:8b:a4:4a:53:33:dc:83:21:
                    02:e5:4b:f9:db:d6:27:40:7a:68:72:4c:e1:bf:02:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3D:27:FF:36:F1:40:04:D3:E3:C8:84:BF:D6:DB:58:C3:83:4C:85
            X509v3 Authority Key Identifier:
                keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:47:9e:ba:df:77:4e:35:df:02:e2:f4:12:7a:09:8b:6a:5e:
         5e:95:a0:ba:2a:bf:e7:65:f3:40:50:7d:98:8d:2a:85:0f:d2:
         e9:c4:f1:e1:a4:41:00:1d:84:f2:0d:d1:31:36:3b:4a:f7:6e:
         7d:f9:3b:5e:07:54:cf:4c:b1:e8:b9:7b:60:2f:56:7b:a2:0e:
         d3:c1:b2:19:f7:c5:92:2a:07:9c:8d:44:bf:f9:13:67:eb:1b:
         26:09:95:88:72:26:cd:71:b2:0f:87:7e:cd:a3:fb:93:01:9d:
         f3:62:0b:97:9b:dd:33:54:60:6e:5e:6c:90:96:30:55:0a:24:
         6e:df:b4:9c:bd:d8:37:47:38:36:0a:7a:0d:c0:87:3c:ac:f6:
         b0:47:53:31:76:f7:b1:fe:ac:56:13:c9:1c:98:e5:57:5c:04:
         56:d5:8c:37:50:ad:c7:a4:73:35:93:f1:7b:f6:90:16:95:dc:
         80:11:ad:7f:5f:77:69:0b:f3:26:48:eb:7b:63:9c:23:27:44:
         68:27:e8:60:46:28:0b:07:06:da:82:6a:33:4d:7d:45:e5:92:
         53:9c:af:06:cc:f3:1a:b5:55:fa:d7:ce:5e:46:87:05:23:06:
         08:79:61:64:17:74:31:5d:85:a2:25:1d:15:2d:93:eb:04:27:
         f8:d1:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:45 2025 by rpki-client