Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          QkFN1KO2ExQT2hpQu1KRDaYueI6S0rJaA0rRNl6So9g=
Subject key identifier:   27:C3:A3:2C:ED:1A:0B:78:3C:91:A3:48:E3:DA:2D:C0:DD:00:4A:28
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       019D28F243CB0EDEACFBC32A9BBE7E619A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          0A93
Signing time:             Thu 26 Mar 2026 07:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:58 +0000
Files and hashes:         1: AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa (hash: MKkScRWC1oRd8kAjKYwh38bSe/XT+iXgkda09WhWgiw=)
                          2: OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa (hash: DiG4yHrI0kfPeYPN9aDsXIafjZKsHrnExZ+/Ie46DI0=)
                          3: ZQDzbR1tXesEtbaNpTXeR98UNSU.roa (hash: p/CZ3mMgPUysAR/2N4wlvUf4JRvyOPuugh7sAJNEfMo=)
                          4: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: KCdla5b7/W9T0VgJnWLmIpc/FZwVsN/Oym1cqCHWAXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:43:cb:0e:de:ac:fb:c3:2a:9b:be:7e:61:9a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Mar 26 07:00:58 2026 GMT
            Not After : Mar 27 07:00:58 2026 GMT
        Subject: CN=27c3a32ced1a0b783c91a348e3da2dc0dd004a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:c7:85:2a:58:ee:5d:db:50:25:72:d1:3e:
                    cf:cd:0f:ab:b5:11:cc:ab:9c:68:c3:36:c0:27:17:
                    43:60:64:e1:cc:43:06:84:a9:39:57:7f:76:0c:2f:
                    e3:73:f8:3c:f7:e8:0e:87:d1:24:e7:51:c2:65:46:
                    39:60:75:be:47:86:59:e8:41:f1:74:76:8e:04:98:
                    65:33:d1:9a:b5:c2:cc:8c:50:dd:13:67:ef:df:85:
                    81:91:0d:3c:6a:67:81:74:14:96:e3:a9:cd:6a:c3:
                    2d:01:ce:d2:b6:24:56:6d:32:8e:87:63:5d:42:bb:
                    bb:2d:ce:9d:22:e3:67:d0:9f:94:d9:f9:52:bd:9c:
                    6d:c7:61:10:62:c4:b9:f4:be:e5:fc:db:9a:5c:1c:
                    73:04:09:1a:53:ab:d4:58:a6:b4:c5:21:1b:cf:e2:
                    04:b0:03:38:e8:88:16:95:16:4e:2a:36:e7:9a:62:
                    fb:cd:4c:3f:45:7d:de:8b:07:b3:8a:e6:99:5f:7c:
                    87:ed:74:de:c9:78:43:e0:c8:bb:1d:2e:be:ed:52:
                    55:f9:ed:8b:b4:3e:59:5d:92:bc:6f:87:f2:29:91:
                    3f:88:a6:bb:c2:80:ee:a8:df:81:d7:a2:86:7c:60:
                    54:dc:12:84:30:49:ee:ee:68:b5:6b:1a:8f:83:e3:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:A3:2C:ED:1A:0B:78:3C:91:A3:48:E3:DA:2D:C0:DD:00:4A:28
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:01:51:50:63:8e:24:bc:de:d6:32:d6:32:7b:2f:2f:3a:b6:
         6e:28:21:53:37:f3:44:6d:ca:82:39:fc:38:9e:6b:b0:0c:be:
         b6:0b:c0:d9:92:56:bf:95:9f:3d:27:af:7f:5b:38:1e:1f:42:
         a7:72:35:38:f4:47:68:94:8e:7d:20:4d:9e:28:b7:6a:4c:fe:
         31:5c:e1:4a:11:bb:9e:01:da:79:96:6b:00:20:1a:df:6a:0e:
         ba:61:48:7a:65:b7:96:ec:cd:b3:24:28:f4:d5:68:62:ab:d7:
         06:51:5c:98:3d:8c:19:89:15:20:7d:fe:46:19:c6:51:f2:46:
         22:05:de:a9:81:03:d9:45:06:12:be:75:e0:92:85:a9:96:34:
         1c:55:8e:fe:ef:c2:4c:57:41:4e:30:83:66:38:c2:bc:5e:33:
         66:e1:1e:68:b4:0c:3b:00:d7:c7:ab:9f:65:13:9e:b1:f8:26:
         27:00:7e:9d:15:a3:5f:a7:7f:f7:63:1c:75:e2:90:a1:57:65:
         6d:62:d8:00:ee:b3:d1:87:69:86:a4:a3:4d:46:71:8e:de:07:
         02:88:43:e8:46:7a:7a:4a:14:6f:cc:cc:30:03:ed:d1:85:80:
         7a:a3:2c:f5:72:3f:9e:0d:24:f7:a6:d5:ad:ef:1b:b4:e3:08:
         79:33:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:03 2026 by rpki-client