Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          rObfEF7enOSmmsPSzRNgsB0sc/4g3BTI2rHQMZAxUqk=
Subject key identifier:   B4:86:47:3F:B9:D6:56:EE:54:BD:E5:1B:59:A4:C0:2C:9A:E9:49:75
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       019CEB26A79296871541CB2AD5B37145DD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          0A73
Signing time:             Sat 14 Mar 2026 07:01:44 +0000
Manifest this update:     Sat 14 Mar 2026 07:01:44 +0000
Manifest next update:     Sun 15 Mar 2026 07:01:44 +0000
Files and hashes:         1: AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa (hash: MKkScRWC1oRd8kAjKYwh38bSe/XT+iXgkda09WhWgiw=)
                          2: OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa (hash: DiG4yHrI0kfPeYPN9aDsXIafjZKsHrnExZ+/Ie46DI0=)
                          3: ZQDzbR1tXesEtbaNpTXeR98UNSU.roa (hash: p/CZ3mMgPUysAR/2N4wlvUf4JRvyOPuugh7sAJNEfMo=)
                          4: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: cd2BeZwXPGqcKhfSMmh0jAwoX8wWX6oBPzNLwef00dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 07:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:eb:26:a7:92:96:87:15:41:cb:2a:d5:b3:71:45:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Mar 14 07:01:44 2026 GMT
            Not After : Mar 15 07:01:44 2026 GMT
        Subject: CN=b486473fb9d656ee54bde51b59a4c02c9ae94975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9d:a1:1f:cb:37:d9:03:09:36:bc:7a:0d:ec:
                    00:64:eb:3f:38:cb:20:38:21:01:e4:03:6b:60:fb:
                    9b:9b:72:16:7b:b9:a2:01:4a:c7:55:85:c6:1c:b4:
                    d2:71:ab:af:06:52:17:c2:25:3f:64:21:2a:06:0a:
                    d6:e4:b2:64:c8:5b:a0:41:93:21:79:52:9d:0e:d7:
                    8e:c2:3c:2e:1f:68:a2:06:1c:41:9e:73:c9:37:06:
                    8e:6d:ec:c7:40:ed:a8:8b:6a:c5:26:91:05:fd:23:
                    8a:3c:13:d9:e9:42:16:48:04:da:5b:80:fc:04:da:
                    ce:58:e6:15:4d:79:2d:41:b8:21:05:c5:d8:2b:64:
                    ff:3f:d8:79:5e:dc:f1:71:86:84:11:8e:69:d4:f6:
                    c3:df:c0:df:5e:48:fc:41:e1:7f:4e:37:96:57:5e:
                    00:25:61:7a:dd:4f:27:89:86:b6:03:31:2f:a7:21:
                    ec:11:de:e8:59:61:dc:38:8c:c6:a5:7f:24:51:2c:
                    bd:a4:8d:0b:85:45:7f:9f:23:63:ee:28:75:6c:cf:
                    0a:85:b9:07:fa:c9:55:18:eb:58:79:45:61:fe:c8:
                    bd:63:64:88:ba:df:da:b1:15:9a:4c:2f:50:37:96:
                    2d:be:85:89:8e:51:c0:f5:8c:36:9c:93:07:64:26:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:47:3F:B9:D6:56:EE:54:BD:E5:1B:59:A4:C0:2C:9A:E9:49:75
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:86:c5:fd:f7:61:f6:c0:9c:f0:ad:f4:0b:d5:a1:6a:de:a0:
         52:d4:94:7b:76:b9:7e:c5:02:05:9c:bf:5a:f1:56:5c:c1:44:
         4e:e3:95:02:f2:c5:87:5f:a4:27:34:f6:8e:82:68:93:bf:90:
         84:ed:b0:fb:72:4a:e3:71:92:c0:60:d0:6e:a8:4a:dd:8c:c4:
         d8:81:8a:0c:96:51:06:de:ad:57:af:c8:f1:42:7a:44:87:6b:
         4d:2a:0d:df:b7:be:bd:03:b3:51:bf:60:7a:b7:8e:7e:b2:6d:
         18:6a:e4:ef:76:04:60:a5:cb:59:a9:dc:c4:c9:17:3e:92:31:
         94:ca:08:21:94:c1:32:96:d5:3c:b9:60:55:df:c0:32:d0:06:
         d9:e5:11:1f:29:54:dc:aa:a9:9c:a8:37:32:fb:ea:bc:63:ed:
         29:af:93:5e:22:05:ff:cb:32:09:53:5f:2f:61:03:f2:44:85:
         0c:a4:4d:9b:2c:9c:8a:b7:de:40:5b:d2:7b:a3:75:58:6c:b1:
         48:79:dc:b0:b7:6e:0d:b0:d6:6d:4d:74:a8:64:e8:55:f3:11:
         2c:ce:ce:3d:57:c7:3f:46:27:1b:ab:8f:bd:85:2e:d4:79:78:
         7d:87:da:02:0f:b4:52:76:03:05:09:6b:a5:d9:d8:b4:fa:7e:
         91:56:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:48:44 2026 by rpki-client