Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          DT+7+3B56+v6mWvTSSlzwczibTn67pQDjHx8ZnL5bEo=
Subject key identifier:   0C:31:AA:9F:B3:49:16:9D:51:31:CF:0F:E6:B6:3D:A6:56:8A:34:AA
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       0199FDD8CE3F8EC037D99D723D36F4606AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          08EE
Signing time:             Sun 19 Oct 2025 19:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:08 +0000
Files and hashes:         1: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (hash: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=)
                          2: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: 2Lylg2U1w01CrwKSkHyLu8Batu5STaBiyNK3DESdorY=)
                          3: uWoPBSuKtZ2HO_WxNhkewE8kmNI.roa (hash: QJNvWDQRN2z0KaQFQt1TsEZSkKfsSbNz4FWIaeOeQG0=)
                          4: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (hash: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:ce:3f:8e:c0:37:d9:9d:72:3d:36:f4:60:6a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Oct 19 19:01:08 2025 GMT
            Not After : Oct 20 19:01:08 2025 GMT
        Subject: CN=0c31aa9fb349169d5131cf0fe6b63da6568a34aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:d9:4d:64:27:53:63:7f:64:3d:db:34:37:
                    a8:df:fa:b3:81:56:61:2e:f9:52:18:df:92:e7:b1:
                    1f:1a:e4:fb:46:51:76:b7:58:30:6f:f2:d2:ec:60:
                    02:77:d0:16:3b:3b:c4:ab:71:9c:30:8a:da:32:4c:
                    c9:d5:87:b9:fc:7d:a5:28:e4:22:14:76:b1:f9:76:
                    ed:14:09:a1:98:3c:81:34:dc:5b:67:06:f5:c8:2e:
                    cb:7a:dd:2b:c4:dc:80:99:c8:d3:f3:47:a6:0b:40:
                    f3:d7:76:52:fa:b3:86:d2:43:04:0d:5d:da:88:0b:
                    9f:dd:c6:d8:73:96:21:51:ae:09:85:5a:d9:01:e3:
                    9d:43:a2:06:ee:28:db:5d:07:96:dd:ff:f0:a3:c5:
                    0d:be:1c:b1:b0:f3:24:70:38:00:aa:e7:75:58:33:
                    4a:83:e5:b1:1c:04:b9:a2:81:2d:51:31:8a:75:24:
                    ac:e8:07:18:77:14:a9:d4:8d:b2:6c:56:53:f3:61:
                    3c:7b:44:b5:2d:64:78:bb:14:bf:5f:47:42:a3:72:
                    c1:c9:00:3f:ac:6f:98:4c:eb:af:31:b2:6c:f0:6d:
                    0e:c6:b1:8c:47:f4:ea:2e:e9:ac:c0:98:c0:a9:e5:
                    71:7a:0b:ec:ec:1c:29:43:66:0a:3f:b0:ee:b7:a3:
                    07:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:31:AA:9F:B3:49:16:9D:51:31:CF:0F:E6:B6:3D:A6:56:8A:34:AA
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:f4:1b:d5:b6:f9:b5:ab:df:4f:6b:40:49:2a:a1:04:da:
         21:c9:60:35:f2:0d:0e:7a:8e:ee:bd:9d:ee:00:a1:99:7c:4c:
         18:4b:27:0e:26:23:93:ae:58:9b:f9:8d:cb:9e:59:ff:13:02:
         78:4a:b3:5c:ff:5f:d1:9f:20:76:cb:9c:0c:e1:fb:7f:cb:e4:
         c4:a4:00:ee:2a:d4:37:d0:35:7e:24:af:9d:9d:54:c6:f1:5c:
         df:e6:93:dd:82:5a:1e:08:d5:b6:ab:1d:2a:ed:b5:1e:a7:ca:
         aa:7c:ff:e3:53:cb:28:37:5d:31:05:02:73:12:54:e0:09:72:
         1f:7b:ef:2f:12:c4:70:95:b8:ac:6d:66:b1:5e:6c:ee:56:1f:
         e0:5c:dc:b9:32:49:12:2d:6b:e7:39:0f:41:6a:a9:87:a1:a6:
         06:43:3d:1d:35:dd:3f:b5:6a:de:f7:6b:c0:8c:94:0f:8d:51:
         d0:c4:54:78:88:9a:50:d6:ed:00:ec:f3:f1:4d:0f:56:84:62:
         d8:73:d2:29:b0:b9:e9:87:79:30:79:23:8f:24:59:cb:83:39:
         21:f8:5e:6a:0c:24:a7:45:1d:48:c4:6a:64:4f:89:31:01:8a:
         c4:ae:c8:3c:75:84:c0:e2:5d:e1:09:39:c7:6a:62:ae:1c:fc:
         2b:8d:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:40 2025 by rpki-client