Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          hKMoEoObiUI9MHYzo53PPsVvEaxJFiDajgtNlESeWaI=
Subject key identifier:   FA:71:39:A3:72:C8:6D:22:62:5F:92:F9:70:1E:F4:BF:56:89:30:E4
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       0198D73B68125877D0A616EF575BB29FFDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          0F1D
Signing time:             Sat 23 Aug 2025 14:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:51 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: 1MGLx/ZBhJa6Lk8E2fllNnp8sdx20Dwy19WPPGUB3co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:68:12:58:77:d0:a6:16:ef:57:5b:b2:9f:fd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Aug 23 14:00:51 2025 GMT
            Not After : Aug 24 14:00:51 2025 GMT
        Subject: CN=fa7139a372c86d22625f92f9701ef4bf568930e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:3f:b3:ba:29:6c:a6:8b:81:f1:c9:31:27:
                    0e:91:eb:14:22:6a:be:e3:a1:d0:43:5b:56:84:2c:
                    8f:32:bb:66:58:03:30:64:80:21:69:04:5f:5f:c1:
                    d2:6b:6e:36:a7:01:2e:c2:b5:fd:1c:5e:14:bc:3c:
                    ba:5c:e2:ef:c1:bd:e9:69:8d:68:4c:d9:7f:47:f7:
                    b6:3d:cb:ae:ff:5a:2c:cb:89:0b:b4:3e:9f:9b:f9:
                    5b:69:30:23:66:d1:4d:8f:94:99:61:4f:e2:bb:4d:
                    b3:56:71:d5:11:c7:c8:65:37:dc:8b:52:85:b5:10:
                    d5:19:4e:f7:b7:c3:1d:cd:39:5b:2e:24:43:44:ce:
                    ae:8b:1b:e5:ec:cf:94:cd:ac:11:d8:0d:8e:ff:13:
                    d1:c1:d6:29:c8:3b:16:31:db:5f:73:ca:46:65:c7:
                    4b:0d:59:cd:9f:66:5b:e0:8e:80:1f:06:05:c1:29:
                    2d:3a:24:5c:53:22:b6:90:38:4a:77:b3:f6:8f:a4:
                    1b:ff:18:f4:c2:a0:d4:9b:76:20:a1:0e:7a:0a:14:
                    68:98:cf:e7:eb:21:00:92:ae:ab:43:1f:c2:0c:28:
                    b3:d9:9b:3d:d0:b1:11:f9:34:0e:ff:6d:2c:e7:d4:
                    82:16:cb:ac:62:32:b7:42:fb:e0:e6:eb:ef:89:de:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:39:A3:72:C8:6D:22:62:5F:92:F9:70:1E:F4:BF:56:89:30:E4
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:80:f6:7f:27:9e:23:62:4a:dc:32:fd:bc:a8:c8:64:21:
         fd:d5:ad:c7:08:d6:04:0a:0e:ab:bf:ed:df:d5:ac:c2:59:2f:
         4e:0d:98:a1:cd:34:e4:7b:2d:06:1d:07:b7:89:d6:81:78:05:
         b4:aa:8f:bc:0f:f6:dc:ff:33:5b:8b:2a:e8:a8:60:20:2f:99:
         46:c5:a1:ae:17:23:9c:42:ec:5f:4a:57:cc:34:3d:fb:06:8f:
         7d:8e:3f:74:5c:89:2f:75:cd:3d:c5:28:23:f7:ef:89:b4:33:
         d5:da:00:ed:a8:40:04:78:67:56:91:95:50:cb:f2:d7:85:67:
         9b:09:5b:11:9d:71:96:b0:e1:30:8d:7d:d7:c4:08:c6:47:37:
         d2:f7:6e:a1:a9:d2:77:e3:cc:c5:ec:e4:3f:f3:53:98:ec:cf:
         fb:9c:df:db:c4:21:2e:70:dc:0b:c3:ad:09:4d:82:aa:e5:70:
         d2:28:46:f2:ad:1c:0e:00:ca:3e:41:24:8c:41:59:17:f3:25:
         88:b1:f5:d4:1d:fc:1a:ef:c5:6b:46:50:7e:47:35:17:d4:e6:
         e9:83:83:b2:51:a9:ab:5a:dd:ff:76:bc:8d:a3:ca:82:77:03:
         d0:5f:a2:fd:d1:77:48:ab:3d:74:4a:10:ca:f5:e2:07:9d:09:
         39:36:c4:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO2gSWHfQphbvV1uyn/32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiN2MzZjEyY2I3Zjk1MWE2MmRjOTZmNWJhM2EwY2RlM2U1
MGI2ZmYwHhcNMjUwODIzMTQwMDUxWhcNMjUwODI0MTQwMDUxWjAzMTEwLwYDVQQD
EyhmYTcxMzlhMzcyYzg2ZDIyNjI1ZjkyZjk3MDFlZjRiZjU2ODkzMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZA/s7opbKaLgfHJMScOkesUImq+
46HQQ1tWhCyPMrtmWAMwZIAhaQRfX8HSa242pwEuwrX9HF4UvDy6XOLvwb3paY1o
TNl/R/e2Pcuu/1osy4kLtD6fm/lbaTAjZtFNj5SZYU/iu02zVnHVEcfIZTfci1KF
tRDVGU73t8MdzTlbLiRDRM6uixvl7M+UzawR2A2O/xPRwdYpyDsWMdtfc8pGZcdL
DVnNn2Zb4I6AHwYFwSktOiRcUyK2kDhKd7P2j6Qb/xj0wqDUm3YgoQ56ChRomM/n
6yEAkq6rQx/CDCiz2Zs90LER+TQO/20s59SCFsusYjK3Qvvg5uvvid4KzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpxOaNyyG0iYl+S+XAe9L9WiTDkMB8GA1UdIwQY
MBaAFHt8PxLLf5UaYtyW9bo6DN4+ULb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTN3X0VzdF9sUnBpM0piMXVqb00zajVRdHY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yMGEwYTAtYTA0Yy00ZjdjLWJmMmMt
YzU3MjZmOTE2ZDVlLzEvZTN3X0VzdF9sUnBpM0piMXVqb00zajVRdHY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yMGEwYTAtYTA0Yy00ZjdjLWJmMmMtYzU3MjZmOTE2ZDVl
LzEvZTN3X0VzdF9sUnBpM0piMXVqb00zajVRdHY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEeA9n8n
niNiStwy/byoyGQh/dWtxwjWBAoOq7/t39WswlkvTg2Yoc005HstBh0Ht4nWgXgF
tKqPvA/23P8zW4sq6KhgIC+ZRsWhrhcjnELsX0pXzDQ9+waPfY4/dFyJL3XNPcUo
I/fvibQz1doA7ahABHhnVpGVUMvy14VnmwlbEZ1xlrDhMI1918QIxkc30vduoanS
d+PMxezkP/NTmOzP+5zf28QhLnDcC8OtCU2CquVw0ihG8q0cDgDKPkEkjEFZF/Ml
iLH11B38Gu/Fa0ZQfkc1F9Tm6YODslGpq1rd/3a8jaPKgncD0F+i/dF3SKs9dEoQ
yvXiB50JOTbElQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:50 2025 by rpki-client