Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          +/Bxx/6lvdQ6um1K1X5njnFh6UhXrKYlsYU5TzRWyzM=
Subject key identifier:   9F:0B:0C:0A:2A:AA:52:41:BD:2A:77:64:15:7F:75:11:5D:EC:2F:84
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       019A2289DB4513002446996CFE250343639F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          0901
Signing time:             Sun 26 Oct 2025 22:00:51 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:51 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:51 +0000
Files and hashes:         1: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (hash: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=)
                          2: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: /iSidzmkr4UeKcMwgJuzZXVJJjv7YZamt+xY68Soc3Q=)
                          3: uWoPBSuKtZ2HO_WxNhkewE8kmNI.roa (hash: QJNvWDQRN2z0KaQFQt1TsEZSkKfsSbNz4FWIaeOeQG0=)
                          4: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (hash: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:db:45:13:00:24:46:99:6c:fe:25:03:43:63:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Oct 26 22:00:51 2025 GMT
            Not After : Oct 27 22:00:51 2025 GMT
        Subject: CN=9f0b0c0a2aaa5241bd2a7764157f75115dec2f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:8e:93:70:dd:b4:7a:83:9f:01:31:33:15:
                    ae:6c:69:b1:c1:fc:c6:9e:b0:4d:5d:55:90:26:5a:
                    22:e4:78:ef:71:68:4c:18:55:59:61:bb:4d:68:71:
                    41:f9:81:31:78:3b:49:c1:a4:cf:8b:f1:90:16:c0:
                    69:e0:57:e9:78:e3:c1:0c:7c:54:9d:76:39:c5:00:
                    69:c9:75:30:60:ea:fe:27:9a:6e:0f:0a:65:01:8d:
                    ab:1a:8e:a0:ae:c2:cf:b9:f2:98:94:8c:b5:51:69:
                    92:68:2d:46:fd:f7:ff:65:b7:3e:5f:64:ba:d4:40:
                    09:cd:76:7f:c0:9f:a4:06:37:87:45:e0:c7:7d:c2:
                    0c:f8:ae:62:61:3e:d6:d0:99:c2:d7:03:d1:d5:8c:
                    b8:ab:11:f6:5f:7c:b9:18:5c:1b:60:45:4a:94:99:
                    00:93:69:66:64:1a:46:23:a0:7f:29:c8:09:32:b1:
                    91:fc:c1:06:23:ea:9c:dc:d3:ba:91:f9:d1:d7:21:
                    37:8b:cf:dd:03:31:32:6d:19:8b:de:a6:33:0f:dc:
                    be:cb:71:68:46:3b:99:b5:13:79:1b:7b:5e:69:b3:
                    63:96:a4:cc:9b:91:1c:00:31:b9:69:62:1d:ac:65:
                    1c:ea:bd:78:6c:05:2f:cc:f4:2d:b4:e1:ef:d8:15:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:0C:0A:2A:AA:52:41:BD:2A:77:64:15:7F:75:11:5D:EC:2F:84
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a4:63:13:ec:9c:73:0c:96:e9:2b:6c:31:07:d2:46:30:ef:
         52:63:7e:ac:40:e4:57:d4:28:8c:99:18:c8:e3:94:3a:e9:33:
         9f:a3:e8:5b:0a:55:db:ac:04:47:9b:7e:34:5c:8e:68:6d:29:
         ab:50:92:02:7e:40:ad:a8:25:f7:e9:1d:1a:57:45:3c:48:1a:
         f8:da:01:14:02:80:e1:62:28:24:ab:46:c9:6f:6c:81:13:59:
         12:2b:0f:79:92:77:c5:d7:ec:78:fe:ce:f5:f6:f8:61:b3:fe:
         d7:37:2f:80:85:20:8d:90:eb:31:83:5e:eb:8d:78:f6:6f:94:
         0a:78:07:67:27:b4:b4:c9:8f:b2:20:bc:1d:b2:c7:69:a9:a4:
         b5:e2:3f:f5:29:0e:19:3e:3d:55:ff:7a:c4:eb:67:18:0d:88:
         9e:6d:0b:3e:48:09:84:a5:e9:31:c7:ba:18:30:fb:a7:70:34:
         08:b0:27:1e:13:c9:c6:d3:e6:3e:9a:c1:bc:a1:47:37:3e:72:
         f4:80:0f:17:36:4c:13:86:29:e6:55:cd:43:66:8b:8c:fc:c3:
         b2:25:25:e9:18:b0:58:0d:2b:44:02:c4:bb:34:e0:1c:b0:a3:
         88:f6:b9:7c:9d:35:1c:c0:39:38:2c:7c:a3:58:b7:ff:9f:8f:
         6b:04:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:32 2025 by rpki-client