Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          9xEHIDhmV8WQabRdWveSrnFka9bXVDfHGI1QhF8L2cI=
Subject key identifier:   69:3F:7B:EC:60:22:A2:75:FD:DD:9E:04:CD:3E:76:EB:59:CD:73:4F
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       0199FCC60CE0C2BE22C1E569263C543D6121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          0FB5
Signing time:             Sun 19 Oct 2025 14:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:01 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: ZjHAvJ3xbB2GAqqzMkVdC/f45e1aeEB3pFjSepUKeug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:0c:e0:c2:be:22:c1:e5:69:26:3c:54:3d:61:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Oct 19 14:01:01 2025 GMT
            Not After : Oct 20 14:01:01 2025 GMT
        Subject: CN=693f7bec6022a275fddd9e04cd3e76eb59cd734f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:8b:aa:9f:88:5b:a4:cc:fb:4e:8c:08:1c:
                    74:0a:f8:d3:6d:a1:ec:63:e0:4a:f6:8c:53:2c:52:
                    b7:cb:1a:f3:12:64:c9:24:96:ba:9e:99:7b:99:a2:
                    55:b1:1d:d2:c6:d1:bd:65:6f:64:22:6d:0c:33:b0:
                    55:bc:32:81:f1:35:2b:6e:4f:1f:a0:5a:79:2f:21:
                    8f:58:39:b6:04:20:be:c8:f9:6e:34:90:87:44:2a:
                    40:16:24:36:e0:77:00:13:43:9a:9d:5b:26:95:11:
                    22:51:d4:ec:9a:03:4e:4a:17:fb:76:b8:42:0f:bd:
                    47:60:76:c5:d7:75:29:14:20:5e:8f:73:03:23:25:
                    6c:61:41:82:41:f3:1c:57:9c:ab:c2:13:50:b6:8b:
                    b4:bd:58:b0:9e:79:38:6a:c3:0f:a5:d7:cf:5b:39:
                    89:51:dd:89:a3:38:83:55:2b:c1:20:b1:b4:51:2a:
                    fb:11:95:aa:16:06:0e:32:1d:b6:42:7b:6b:f6:d0:
                    43:e2:27:88:11:c4:e7:be:91:31:de:3f:b6:a2:c4:
                    46:8f:77:a7:83:d4:de:82:09:34:56:75:15:9f:44:
                    14:8d:b2:68:c8:cf:cd:82:fa:a6:71:de:20:28:08:
                    5e:87:86:0c:f9:8e:da:2e:0c:f6:02:d6:7e:93:28:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:7B:EC:60:22:A2:75:FD:DD:9E:04:CD:3E:76:EB:59:CD:73:4F
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:11:57:bf:be:fa:3a:1a:76:66:e9:05:e8:d7:be:b2:ca:ba:
         17:e1:6c:44:70:3f:9a:a5:fd:b5:c4:02:be:9b:7b:d1:33:8e:
         4b:2d:e6:49:3d:1d:35:4d:8d:f2:1d:4f:e3:39:1f:26:3c:f7:
         68:1d:aa:9e:12:96:46:43:d5:3a:54:c6:a6:45:bf:2b:45:b9:
         85:a6:de:8e:c7:86:98:15:ab:52:41:6e:57:9a:99:39:2e:15:
         12:e7:f9:2a:41:6b:1c:89:79:92:d1:99:2a:8a:71:5a:e8:f7:
         74:6f:65:6c:67:0e:6d:6a:23:c6:b2:15:2a:a5:b3:ea:cb:91:
         a9:9b:e7:93:be:27:18:02:62:0d:7c:31:cb:bd:22:43:73:be:
         da:29:16:56:64:4f:1b:04:c2:a2:31:5e:d4:a2:4f:6d:72:09:
         38:3a:0a:45:e0:4f:54:da:ae:af:dc:f4:55:3e:cf:67:d6:92:
         db:12:be:52:51:36:8a:5a:13:17:e2:27:a5:3f:32:9d:d0:86:
         53:65:04:14:38:b0:c2:09:66:2e:1b:be:6c:f6:8a:29:b8:df:
         86:bc:d9:70:a0:7a:9d:34:e0:e0:b6:18:ff:94:ea:a0:c9:a7:
         c4:ad:68:85:4e:ec:fe:d9:b9:1f:f0:9a:07:ed:37:2b:93:5c:
         67:67:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:22 2025 by rpki-client