Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          O/IwX3453+S8aX9H4fmhg5Wp4vHjfoBlSDrEhNFskqw=
Subject key identifier:   53:F5:2E:5A:53:E7:5F:AF:7A:A8:46:DE:25:DF:86:12:79:C9:B1:34
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       0199228C7FC69472614B73826299A0FD3F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          0F44
Signing time:             Sun 07 Sep 2025 05:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:56 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: nnFHKqEjLiTmsX38ff19Uyj2VSATe1bKc4G1daAobhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:7f:c6:94:72:61:4b:73:82:62:99:a0:fd:3f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Sep  7 05:00:56 2025 GMT
            Not After : Sep  8 05:00:56 2025 GMT
        Subject: CN=53f52e5a53e75faf7aa846de25df861279c9b134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:77:85:3b:2c:f8:59:b3:54:a1:56:ca:e4:
                    d2:ca:a8:f3:57:4f:c6:d2:23:bf:9d:7f:23:88:39:
                    bc:86:ec:00:66:eb:b1:5f:9b:c8:f7:8e:58:8e:74:
                    82:be:93:76:07:3a:63:1b:cf:de:e4:1c:90:7a:0f:
                    7f:b5:ef:cc:90:7d:a3:ca:8d:e4:88:32:0e:09:c9:
                    30:e3:7e:d5:08:99:08:a9:51:1a:2f:82:c5:2f:27:
                    ae:3b:38:75:1c:47:1a:16:a4:c9:c1:4c:ae:9b:ba:
                    f7:51:25:bc:3f:13:88:7a:f6:5f:a8:de:50:06:2c:
                    e3:69:60:e1:43:78:f8:d5:ab:72:1b:b8:f2:b3:6c:
                    4f:4a:23:b1:f4:b9:bb:9e:7c:4d:a5:06:3d:44:7b:
                    9e:61:34:6a:8c:99:73:a8:d8:1b:2f:8d:48:cd:5f:
                    98:f2:91:e9:8c:84:49:7e:b0:64:48:f2:9a:2b:10:
                    9b:dc:0a:4e:f5:01:84:08:c8:21:c4:dc:72:eb:eb:
                    61:e7:0d:a9:11:eb:26:c4:60:10:59:e3:83:a0:f5:
                    5f:54:ca:d3:1b:19:27:8c:53:29:5d:a3:c1:fe:b1:
                    49:92:b1:57:84:b4:5b:ac:ae:d8:ac:c6:6d:e0:26:
                    9e:5d:f5:5d:3e:81:be:cb:da:77:85:2d:44:03:24:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F5:2E:5A:53:E7:5F:AF:7A:A8:46:DE:25:DF:86:12:79:C9:B1:34
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:3c:a4:1a:67:99:28:c0:4d:b1:12:4b:3b:70:f4:4c:f5:
         db:96:fb:f8:37:bb:d9:90:80:07:93:f5:9f:ca:eb:54:dd:ba:
         30:14:96:07:1e:25:47:53:0c:fa:3c:1b:3b:af:99:db:db:63:
         ff:4d:78:08:d9:16:4f:3f:a6:4e:c7:98:4a:15:f7:d0:6e:20:
         52:7f:7b:a2:09:23:77:42:b2:2e:02:85:f7:0e:e3:34:2c:e7:
         45:16:0f:f9:45:64:50:f9:98:a9:cc:fd:54:61:54:4b:f5:eb:
         33:46:1f:d6:1e:05:14:bd:da:b6:4f:cf:a4:13:8d:af:f9:31:
         16:dd:a2:d7:e5:1c:1c:e7:c8:ee:6b:70:0b:38:d9:fe:df:0a:
         b7:76:e3:c0:4c:c5:e1:4a:40:dd:b1:44:41:62:c6:e3:3c:1a:
         bf:68:2a:8d:ca:b9:ba:e5:5a:e8:90:21:c5:e6:d6:ec:b6:c2:
         9f:a0:45:7b:11:80:03:15:a3:fe:dc:11:28:50:9c:f4:c2:6b:
         7e:97:3a:6b:93:4b:35:2c:76:dd:3a:fe:85:c7:dc:d2:89:ab:
         9a:63:14:ba:c0:04:11:86:f9:71:83:a9:5c:19:fe:94:b1:99:
         54:f1:b8:49:54:09:5e:c1:7e:8c:db:23:99:b6:79:91:e8:fe:
         29:2e:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:37 2025 by rpki-client