Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          sBeqyamO2qKHh7XlI2g9CyHbYjk8m/amdFkR1KbwYtw=
Subject key identifier:   0B:56:EC:17:A8:4D:39:17:E8:15:B0:44:A9:DE:47:43:7C:65:90:99
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       019677C38CF975392257A2843C61D512ECFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          071B
Signing time:             Sun 27 Apr 2025 15:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:26 +0000
Files and hashes:         1: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (hash: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=)
                          2: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: 7vZ3IcHMa2AZb9r+FzvFchecdmi3uCTNoMnAfn3dPzc=)
                          3: uWoPBSuKtZ2HO_WxNhkewE8kmNI.roa (hash: QJNvWDQRN2z0KaQFQt1TsEZSkKfsSbNz4FWIaeOeQG0=)
                          4: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (hash: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:8c:f9:75:39:22:57:a2:84:3c:61:d5:12:ec:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Apr 27 15:00:26 2025 GMT
            Not After : Apr 28 15:00:26 2025 GMT
        Subject: CN=0b56ec17a84d3917e815b044a9de47437c659099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:99:9d:fe:fb:51:ba:63:9a:10:9c:d7:9f:
                    e4:ee:1e:5f:8a:df:3a:b4:e5:5e:56:99:ec:07:13:
                    2a:8c:57:62:0e:78:af:5c:df:50:d1:22:4d:ff:62:
                    76:5c:cb:bc:c2:36:ae:f1:68:b8:b2:93:98:e9:c6:
                    f4:ba:fb:45:36:14:a4:95:8d:2d:26:b6:13:bb:22:
                    12:43:b8:25:3c:f9:f7:e4:94:3b:69:e2:4c:5c:58:
                    c6:af:48:59:7a:33:d9:96:81:64:b5:c0:3f:12:ec:
                    62:4d:0c:66:f6:0e:2a:fb:d2:08:f3:ef:a6:c6:c5:
                    88:d7:bb:d3:be:ed:36:18:07:cd:45:9f:ec:c2:d8:
                    da:6e:29:33:6f:fd:8c:da:16:10:d6:4f:fc:51:1f:
                    4c:5b:06:78:1b:16:03:25:11:dd:2d:51:41:14:72:
                    fd:e0:27:72:de:26:09:db:58:90:8d:db:e2:62:5d:
                    ad:f8:67:38:d9:52:06:44:b9:a2:4c:e9:14:f7:ed:
                    d2:ec:f3:e3:fa:de:83:b8:c8:00:89:23:66:a4:9a:
                    9b:16:da:ab:13:bc:07:96:ec:18:cf:33:ca:8a:52:
                    21:61:09:37:93:df:ae:51:d3:34:6b:aa:1a:08:03:
                    27:66:01:68:ce:1a:eb:e1:c5:13:bf:d9:3d:10:bf:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:56:EC:17:A8:4D:39:17:E8:15:B0:44:A9:DE:47:43:7C:65:90:99
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:03:2f:c8:14:dc:1e:6d:c4:2a:87:7d:6d:ed:a4:51:23:
         70:b2:2d:1f:2d:f5:91:60:77:b2:b5:b0:28:b0:15:71:fe:92:
         93:8e:2d:fa:67:54:81:dc:c2:a8:a8:87:42:fd:07:96:7a:23:
         9e:8c:9f:a4:be:1e:4c:6b:5c:64:0e:0c:9d:b1:03:d7:97:c1:
         a2:3f:c2:5e:79:29:f1:be:35:3b:48:82:69:c2:0e:bf:b6:ef:
         05:ec:6e:b1:8b:3c:76:a6:eb:9c:c3:ba:a5:e8:b7:99:fd:37:
         1f:19:dd:5a:49:3f:8a:6d:b6:a9:bf:02:a2:8c:17:e4:47:c9:
         d5:60:cc:81:96:b2:20:c0:67:8f:6f:e8:5e:1f:98:f8:19:6c:
         50:9e:28:15:77:88:45:3e:39:bd:b5:02:5e:70:ae:4b:55:cb:
         a6:3b:54:4a:23:5c:b0:77:89:01:cb:d3:9c:63:5e:84:c3:38:
         53:91:3f:5f:d8:30:19:51:9d:d6:9f:b7:e5:75:fa:0b:a1:3a:
         5a:53:92:d1:3a:4b:ac:7d:85:b8:37:34:d9:ac:f0:5b:71:55:
         dc:8b:3a:e6:31:33:9b:1b:da:91:a5:0b:e1:64:e1:da:04:c7:
         ff:01:09:62:d9:a4:ef:85:f1:14:fc:e4:34:6b:09:08:09:3e:
         e5:da:e4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:36 2025 by rpki-client