Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          sqaljK3/SyfHQCwb0m1DDnDIDoZi1mtG8CwS21gj/wI=
Subject key identifier:   BC:FC:DA:FE:1F:37:64:5D:E4:73:FD:FE:A0:14:9F:1F:0B:B5:CC:F2
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       0198D660BB855C17A8607E5651C5D9837230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          0855
Signing time:             Sat 23 Aug 2025 10:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:00 +0000
Files and hashes:         1: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (hash: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=)
                          2: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: RTywaSwjDkw1fCwJM7iB/gc1RKAkF4t2Pt3IMDbcq8k=)
                          3: uWoPBSuKtZ2HO_WxNhkewE8kmNI.roa (hash: QJNvWDQRN2z0KaQFQt1TsEZSkKfsSbNz4FWIaeOeQG0=)
                          4: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (hash: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:bb:85:5c:17:a8:60:7e:56:51:c5:d9:83:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Aug 23 10:02:00 2025 GMT
            Not After : Aug 24 10:02:00 2025 GMT
        Subject: CN=bcfcdafe1f37645de473fdfea0149f1f0bb5ccf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:86:2d:69:b2:5a:e1:53:49:4b:f4:7a:f6:
                    af:ba:c2:a0:6a:20:69:74:5c:b1:1a:3a:ea:02:c6:
                    30:62:7a:fc:b0:c9:a9:c9:2d:cc:e0:27:de:9a:e6:
                    e8:4f:c3:86:e4:11:99:87:15:5f:11:6e:76:2e:7a:
                    c6:c3:38:4d:4f:c7:bf:01:c8:19:f8:3e:98:58:9f:
                    a7:ad:e3:52:bb:69:37:0d:b6:57:59:98:2a:85:11:
                    ee:74:26:5c:2a:83:9a:f9:82:22:66:40:b3:30:b8:
                    22:32:07:0e:08:07:2b:56:90:85:c2:4a:9b:7c:24:
                    f0:5e:28:16:11:60:73:7d:e1:05:21:17:47:e4:c8:
                    6d:3b:59:e0:65:45:2d:cc:dc:9b:20:2b:96:81:ab:
                    b6:43:08:02:0f:28:53:d1:67:80:93:42:04:86:f9:
                    29:73:ea:ae:bd:72:82:48:b1:f9:bc:41:ca:8b:c4:
                    52:7c:37:75:f6:e5:94:fa:d9:3a:4f:db:b8:3c:2b:
                    62:41:1a:a5:ff:e0:38:ca:79:65:84:a1:4c:f6:e4:
                    54:8e:e4:36:5d:d8:43:af:7a:41:2e:39:8e:90:ce:
                    df:a1:a4:5d:aa:88:fc:9f:01:61:94:67:a5:56:2c:
                    2f:73:36:e4:94:6b:8d:42:ed:4a:5b:b3:f0:d3:ac:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FC:DA:FE:1F:37:64:5D:E4:73:FD:FE:A0:14:9F:1F:0B:B5:CC:F2
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:31:94:e1:1b:e4:34:c2:f2:b9:e1:1c:2f:37:e2:f4:09:c0:
         4e:30:fd:66:86:e8:74:ac:4f:37:ce:63:f8:74:58:5c:fb:2a:
         6a:00:d7:bd:50:fd:da:d7:30:5f:0a:8d:42:c0:21:3e:d5:8d:
         53:3d:ce:47:70:cc:4e:31:4e:38:e3:97:a2:14:c3:47:e9:b9:
         11:5b:05:a3:b3:7c:d8:99:4f:dd:94:f1:46:3b:87:a1:36:8d:
         07:c9:57:84:d1:d8:73:33:91:8a:55:2b:8f:1b:61:1a:1c:c5:
         65:70:b6:54:c0:56:5e:14:bf:29:2d:9d:92:dd:f0:d4:f8:2c:
         d0:2d:4a:f3:67:bc:0b:2f:5d:81:43:39:d0:b4:21:3c:03:86:
         cc:23:c7:ca:bf:d3:ab:52:d7:0a:46:7f:70:33:b6:f4:cb:2a:
         b4:52:0c:5f:b9:d6:78:c3:bb:39:3d:ff:cc:04:16:65:08:82:
         8a:98:76:69:47:ba:9f:72:61:51:85:43:65:26:e2:0c:9b:8e:
         61:e1:f8:ee:9e:7d:da:8b:a4:88:ac:62:20:40:9d:c8:5c:77:
         5b:ac:56:04:63:37:40:f1:33:e2:0a:16:ff:8f:a8:5b:a2:59:
         d4:fe:a4:66:b9:00:13:89:28:a5:71:e2:ca:68:a1:b8:95:9b:
         fb:e7:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:37 2025 by rpki-client