Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          zpfpLaw/lk0IoUBMPO2WFovcXDphD8pr3PNBkRxgjBk=
Subject key identifier:   41:36:A0:0D:1E:81:59:0D:5F:86:E8:78:F7:78:A6:B1:E6:88:16:F6
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       019DE633F2B9AE5DC960997408DF49B4E6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          0AF5
Signing time:             Sat 02 May 2026 01:00:57 +0000
Manifest this update:     Sat 02 May 2026 01:00:57 +0000
Manifest next update:     Sun 03 May 2026 01:00:57 +0000
Files and hashes:         1: AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa (hash: MKkScRWC1oRd8kAjKYwh38bSe/XT+iXgkda09WhWgiw=)
                          2: OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa (hash: DiG4yHrI0kfPeYPN9aDsXIafjZKsHrnExZ+/Ie46DI0=)
                          3: ZQDzbR1tXesEtbaNpTXeR98UNSU.roa (hash: p/CZ3mMgPUysAR/2N4wlvUf4JRvyOPuugh7sAJNEfMo=)
                          4: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: y8jZAr4mLPVdP5uxk4qa3E72ByzgvRDrjiF1GrPrl/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e6:33:f2:b9:ae:5d:c9:60:99:74:08:df:49:b4:e6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: May  2 01:00:57 2026 GMT
            Not After : May  3 01:00:57 2026 GMT
        Subject: CN=4136a00d1e81590d5f86e878f778a6b1e68816f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:67:d7:93:bb:f9:1d:c8:bd:a4:b6:21:4d:
                    fe:12:97:15:b9:5b:11:ba:28:12:17:90:f3:c1:31:
                    72:5c:0f:c4:af:69:22:d1:8b:3d:a7:0a:40:e7:07:
                    f1:4f:25:bb:d7:0c:13:31:3e:33:23:92:72:e0:1d:
                    63:99:a7:ac:4f:3f:13:fb:f6:69:da:b6:24:23:0c:
                    10:3f:f2:10:d0:84:46:ff:79:a0:51:c0:00:fd:47:
                    63:7a:c5:f9:64:b1:63:a6:27:84:60:e7:fc:f7:d4:
                    09:d1:fd:be:53:31:ff:72:ce:22:34:0c:e4:b7:98:
                    7a:fa:d1:c1:6f:ae:57:7a:a5:4b:df:96:96:1c:ba:
                    61:ab:f4:7c:dd:08:38:47:fb:e8:98:26:3f:78:96:
                    57:e4:4c:ba:db:b7:e2:d8:ed:3a:38:86:35:e3:e1:
                    22:8b:b2:90:67:1b:9c:e1:70:11:31:b5:bd:29:0f:
                    37:b6:ac:16:c8:18:33:64:e4:44:76:8a:b5:0a:fa:
                    e9:de:92:d4:4f:6f:a6:bc:61:83:9a:2d:3d:e0:c9:
                    62:85:b1:25:e5:42:62:f1:8e:f2:09:5f:19:91:6c:
                    e8:6b:21:ef:1b:e1:76:8d:3a:40:67:95:f6:80:0e:
                    a1:ce:eb:76:e5:c6:a5:e2:5b:e9:ad:e9:56:43:92:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:A0:0D:1E:81:59:0D:5F:86:E8:78:F7:78:A6:B1:E6:88:16:F6
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:46:d9:2e:ed:1b:7f:e3:b7:8e:0d:7d:9c:09:61:7b:3a:a4:
         bf:29:38:07:52:e9:a6:fe:d5:48:5a:66:3c:35:c3:67:40:7b:
         9f:08:9d:73:7f:c6:95:7a:3a:14:7c:ac:5e:3a:6d:d6:a3:82:
         4a:64:31:75:71:18:90:74:41:55:91:6f:2a:c2:89:18:f6:41:
         d3:94:4c:31:c3:f5:72:bd:22:2d:d4:cb:e4:32:28:33:a4:d4:
         5d:58:d3:ec:6a:be:03:5c:5e:b9:23:ee:22:77:8a:bd:5f:12:
         66:82:7b:57:7e:77:13:df:e4:80:57:8f:f4:27:53:8e:2c:f2:
         23:93:c6:64:25:3f:0e:59:49:3f:d2:81:58:f1:d3:27:ea:4b:
         6a:77:75:22:f3:01:66:69:b5:12:59:f4:25:5d:12:4f:76:b6:
         8e:6b:9c:16:aa:cb:03:fe:8a:62:64:77:c2:7c:c1:9b:cf:48:
         a5:5f:54:e7:e4:9c:e1:09:09:91:c8:e3:d0:9a:7c:b8:ff:56:
         ed:e4:37:5b:cf:46:0f:2c:11:71:48:fa:63:25:77:3d:aa:fc:
         6a:bd:7b:2f:d2:a4:d5:af:4b:8f:8b:97:a5:9e:49:9f:ed:27:
         98:08:d7:75:b9:98:45:10:a6:e9:62:0b:47:91:68:36:b8:34:
         05:b0:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 11:11:38 2026 by rpki-client