Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          wVsaH1ZQEwxhSfRvTH5HCqXhhG1EDsMstloZAtFgzrs=
Subject key identifier:   D8:3D:D8:96:04:7C:37:CA:62:57:8C:46:78:1C:BE:57:67:E0:39:29
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       01974967A65F11ED69E90CAE32502D2BFF79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          0E4F
Signing time:             Sat 07 Jun 2025 08:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:18 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: michEAymXPtSuSmMtkCqQcl/fGN7L0KDZCI2vePBfDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:a6:5f:11:ed:69:e9:0c:ae:32:50:2d:2b:ff:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Jun  7 08:00:18 2025 GMT
            Not After : Jun  8 08:00:18 2025 GMT
        Subject: CN=d83dd896047c37ca62578c46781cbe5767e03929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:d2:6f:af:14:01:ef:e5:23:cc:4e:31:85:
                    a4:fe:1e:b4:fb:e0:0d:d3:b6:8f:29:97:d0:31:e3:
                    13:8b:9a:8d:33:bf:32:9a:b2:78:93:99:ce:2f:90:
                    92:81:b9:dc:c2:72:d8:8d:6e:a1:6a:cd:6a:f0:6d:
                    b5:46:ab:8a:d4:6a:dd:b6:8a:29:a0:3e:88:a8:7a:
                    d4:88:74:f4:8d:cc:e4:44:84:b8:8e:2d:78:59:e8:
                    dc:6b:dc:3d:5f:c2:f7:96:b8:11:9d:0a:86:82:b0:
                    47:ff:54:ce:3a:12:d1:77:ae:d6:48:6b:5d:dc:b6:
                    3d:95:0e:8b:80:02:20:85:66:18:ae:a2:57:91:87:
                    c6:78:b3:96:80:f7:13:0d:67:d1:c9:4d:7d:3f:38:
                    67:64:fd:dc:69:39:74:a7:50:c0:5e:c0:5d:0e:fe:
                    da:60:94:1b:ec:ac:4b:48:ef:28:98:96:94:4a:c4:
                    3d:71:2b:40:46:e8:e8:82:3a:f8:88:52:f2:f7:68:
                    6e:69:60:3e:79:36:34:53:96:a3:2e:3c:ac:62:d7:
                    f5:c2:07:2d:82:da:c7:87:95:1f:bf:a9:d7:9d:eb:
                    1f:20:c6:9b:e9:6c:a1:38:7f:c3:eb:a2:4e:37:a6:
                    5a:a5:c1:30:8d:73:f7:25:3f:e7:03:49:ce:68:8a:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3D:D8:96:04:7C:37:CA:62:57:8C:46:78:1C:BE:57:67:E0:39:29
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:0d:0b:4c:29:c7:ff:9c:33:2e:cc:e8:76:8e:79:76:0c:
         e7:bc:d1:4f:15:ba:75:d8:59:45:bb:8a:29:16:e9:65:83:a9:
         3c:36:e1:d4:ae:d7:8a:29:65:de:d8:6d:02:2c:01:80:48:d4:
         a3:01:a3:ac:39:bd:0b:f5:b6:74:a3:af:10:82:da:35:8b:7a:
         d9:9f:41:a2:82:07:4e:82:bd:2d:b9:9f:7d:92:37:7b:7d:51:
         d7:a7:ee:a0:5b:11:0c:f2:e7:a3:70:36:7b:9a:3a:ee:27:fc:
         bc:1f:f3:42:50:f6:e6:2d:59:ae:5e:c9:b2:47:91:e5:6e:21:
         ac:51:3d:44:b1:3f:3d:08:c9:d0:68:20:5e:87:29:db:cb:19:
         10:6f:c7:e1:53:de:cf:c0:49:4f:87:8a:5e:07:b2:53:fb:89:
         04:57:64:c0:af:b8:4a:83:d4:b5:6f:a4:29:a4:86:38:cb:ea:
         f4:91:16:98:93:58:4e:82:a7:27:08:8b:73:87:82:ba:1f:fd:
         fc:9f:cd:7e:66:0e:7e:47:78:2c:8f:23:e2:9a:7d:fe:9b:1d:
         a8:54:e1:b2:f7:7f:52:9c:97:26:60:42:2c:b3:95:dc:14:74:
         98:69:80:80:19:d8:23:9b:41:6f:43:c6:2d:f1:66:35:a6:36:
         96:91:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:05:51 2025 by rpki-client