Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          89SE9p0L+R8679AH152s0nhnpuACPGrBmrP38hRxyPM=
Subject key identifier:   3C:47:D5:ED:D8:8B:87:12:43:4E:3F:75:B9:68:F0:AE:07:CB:29:57
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       0196C238FAB44215494197A20DD730C50B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          0E09
Signing time:             Mon 12 May 2025 02:00:36 +0000
Manifest this update:     Mon 12 May 2025 02:00:36 +0000
Manifest next update:     Tue 13 May 2025 02:00:36 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: 4O+GJxasxKA4JZYTkhpYFRmVqQOasN03IGqF7xatGJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:38:fa:b4:42:15:49:41:97:a2:0d:d7:30:c5:0b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: May 12 02:00:36 2025 GMT
            Not After : May 13 02:00:36 2025 GMT
        Subject: CN=3c47d5edd88b8712434e3f75b968f0ae07cb2957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:93:5e:94:42:5f:30:35:f8:26:12:4d:d6:
                    ac:8f:10:88:36:9e:9a:f0:d6:15:9a:95:4a:07:a5:
                    5f:57:6b:99:d2:5d:10:fe:2d:68:c9:2b:b1:ed:5c:
                    74:91:f1:e7:5a:3b:d9:28:78:c0:6a:94:a3:85:aa:
                    b5:2c:48:01:a3:7f:9e:2d:b5:98:98:61:f9:27:e0:
                    75:07:10:e1:44:fd:94:62:12:85:d0:5c:88:4e:5a:
                    03:dc:d3:92:a7:4b:62:4c:07:a6:52:12:e8:97:8f:
                    1f:55:3d:52:01:7d:32:15:30:46:ef:0c:78:8e:87:
                    25:ee:03:66:0a:eb:fd:8b:c6:78:b2:93:88:2e:6f:
                    e5:4c:8f:72:7a:56:e1:1a:14:ee:ac:e7:23:70:40:
                    ba:ec:7d:df:05:c5:15:9c:fa:9c:a1:e9:8d:0b:1b:
                    1c:cb:df:11:11:2f:1a:6b:29:08:b4:68:9f:bc:07:
                    94:93:45:ed:3a:80:fd:07:08:8c:95:25:06:70:1c:
                    9e:1d:62:d2:d0:73:0a:52:43:a9:44:e6:a9:c3:3e:
                    aa:ac:48:2b:a1:d8:31:9e:d2:2a:a1:13:ad:a6:be:
                    9f:b0:a6:e5:f7:2d:1a:94:1c:d1:23:ab:5c:75:6e:
                    77:a2:7f:7d:71:47:08:f6:35:d1:67:04:20:fb:1a:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:D5:ED:D8:8B:87:12:43:4E:3F:75:B9:68:F0:AE:07:CB:29:57
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:5b:48:44:e0:70:8b:6f:e0:6e:33:a3:f7:c2:df:86:83:
         18:3b:7f:f7:21:ae:09:8f:c7:b4:49:4f:59:40:85:df:56:75:
         36:f5:05:a9:af:b6:8f:98:1f:73:b9:26:90:13:1d:cf:0f:cf:
         c8:16:43:bc:b8:00:fc:e1:8d:95:0a:45:a7:4a:38:19:39:cb:
         3c:a3:b8:c2:01:01:03:db:6a:f4:b7:c9:f8:cd:da:4c:44:95:
         bc:1e:e3:64:03:04:52:98:d3:e4:81:38:20:47:13:59:4e:e3:
         bc:fa:1c:75:d8:b9:e6:af:09:a2:f4:a4:ee:17:4e:3c:43:bf:
         fb:fd:03:2d:50:15:10:cb:bb:b0:34:36:d1:af:6d:38:4b:35:
         4a:e3:bf:38:dc:b8:44:3e:39:7c:a0:1d:d5:28:a4:c3:fa:bc:
         ac:d2:ee:d0:66:e0:a4:fa:f0:a5:47:25:6d:84:39:88:12:59:
         b3:50:86:da:9f:b7:aa:84:57:b9:6c:fa:f6:79:8d:7f:63:71:
         d4:c4:c2:d7:fe:e3:ba:24:8f:61:fc:fc:88:9d:35:74:16:60:
         a8:3e:07:ca:55:27:b9:7e:98:4a:11:7d:2b:38:c3:0c:8f:a1:
         1b:7b:66:d2:ac:ad:48:2e:c6:5a:0e:23:81:4f:04:b4:0c:13:
         5a:fb:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:38:19 2025 by rpki-client