Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          WX7wqeiIqtYUtv+q+k40NjlAAipuJldwdP3Qkp0Goa8=
Subject key identifier:   0E:27:32:F0:AB:53:72:F1:3B:DB:FD:48:C3:45:59:69:BF:DA:61:58
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       019CAC478F5562698BECD90202830B1392E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          1119
Signing time:             Mon 02 Mar 2026 02:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:36 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: SL9T8HtkUgQ5yXRhU5epfzDjmBbjl1rCHE0iYRKVaSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:8f:55:62:69:8b:ec:d9:02:02:83:0b:13:92:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Mar  2 02:01:36 2026 GMT
            Not After : Mar  3 02:01:36 2026 GMT
        Subject: CN=0e2732f0ab5372f13bdbfd48c3455969bfda6158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:cc:ac:ac:45:8e:d1:f2:23:c6:75:f1:96:
                    73:10:fa:4d:27:9c:58:6e:c4:42:05:38:de:24:b9:
                    f2:32:da:63:9e:f5:ad:37:10:95:f6:bb:c6:7b:d2:
                    7b:30:f2:a3:72:66:fe:ee:81:4e:54:0e:19:9f:3b:
                    bd:01:9a:85:e2:b4:d6:25:9a:38:55:32:1b:03:a4:
                    46:db:ce:db:41:36:ce:d4:81:ad:c4:f7:30:81:d7:
                    41:4a:42:87:94:a1:e1:fd:17:2f:5a:c6:ea:15:b0:
                    41:a6:cb:9a:33:63:91:d4:2b:f8:01:91:e1:c1:6e:
                    ca:cd:33:56:a2:96:ff:07:9b:20:73:ae:1b:19:01:
                    1a:2c:ef:02:49:7b:eb:2c:aa:e0:a8:8f:52:24:f1:
                    c6:3f:c8:23:cd:0b:f2:23:df:b2:d4:76:1a:6b:3c:
                    12:56:ea:d8:65:15:1f:48:0d:c4:7b:ef:bf:cc:cc:
                    ea:96:6a:e6:5b:16:67:7d:88:7e:4e:b7:cd:00:b1:
                    39:52:35:96:49:cf:0c:f5:a8:38:09:59:20:15:59:
                    ab:47:fc:b7:3e:32:70:39:27:d7:a5:96:c1:3f:18:
                    0f:b5:81:61:6e:fc:a5:4d:82:a9:21:de:08:7b:2e:
                    48:ea:f3:d5:a2:90:4b:1d:1b:1c:f9:60:52:fb:85:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:27:32:F0:AB:53:72:F1:3B:DB:FD:48:C3:45:59:69:BF:DA:61:58
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:73:61:e8:fc:29:bc:b8:9a:c0:5e:27:32:5f:c3:91:86:
         9e:9a:78:cb:bd:54:8b:5f:12:72:34:8d:f0:2b:1e:be:83:44:
         0a:7b:1a:69:00:6f:85:be:3c:13:6e:7e:27:e5:ab:f8:79:53:
         84:1f:56:a2:42:4b:44:5f:36:8c:83:cf:2c:06:17:56:60:74:
         a4:ef:ed:9d:df:f5:aa:a4:63:c6:d0:e4:44:9f:0f:2b:ae:ca:
         6a:81:1e:4a:b0:a4:71:f3:7a:10:1c:06:a1:22:5d:0f:78:71:
         28:85:45:c9:13:a3:17:9d:bb:c7:06:09:4a:05:2d:13:11:9d:
         33:6f:62:5d:1a:5c:4e:06:41:fe:84:69:8a:24:89:21:05:46:
         4b:e7:1f:fc:e5:c6:b7:c0:4e:dc:76:4a:54:19:8a:3d:97:9c:
         81:66:45:f3:8b:aa:be:cb:af:40:ab:8d:71:b5:95:52:73:ae:
         74:6d:4f:ed:fa:6c:14:d6:d0:09:c3:38:1f:1d:f1:ec:4c:fb:
         44:7d:d0:16:2f:7b:97:20:35:5b:64:56:ce:5a:8d:b9:fc:55:
         9c:2c:eb:0f:66:7f:51:06:2b:7b:c0:3c:74:20:f3:51:8f:db:
         0c:80:8a:d1:02:6d:e9:12:52:42:a7:69:99:18:5c:09:33:61:
         fa:a4:0a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR49VYmmL7NkCAoMLE5LhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiN2MzZjEyY2I3Zjk1MWE2MmRjOTZmNWJhM2EwY2RlM2U1
MGI2ZmYwHhcNMjYwMzAyMDIwMTM2WhcNMjYwMzAzMDIwMTM2WjAzMTEwLwYDVQQD
EygwZTI3MzJmMGFiNTM3MmYxM2JkYmZkNDhjMzQ1NTk2OWJmZGE2MTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17nMrKxFjtHyI8Z18ZZzEPpNJ5xY
bsRCBTjeJLnyMtpjnvWtNxCV9rvGe9J7MPKjcmb+7oFOVA4Znzu9AZqF4rTWJZo4
VTIbA6RG287bQTbO1IGtxPcwgddBSkKHlKHh/RcvWsbqFbBBpsuaM2OR1Cv4AZHh
wW7KzTNWopb/B5sgc64bGQEaLO8CSXvrLKrgqI9SJPHGP8gjzQvyI9+y1HYaazwS
VurYZRUfSA3Ee++/zMzqlmrmWxZnfYh+TrfNALE5UjWWSc8M9ag4CVkgFVmrR/y3
PjJwOSfXpZbBPxgPtYFhbvylTYKpId4Iey5I6vPVopBLHRsc+WBS+4UmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4nMvCrU3LxO9v9SMNFWWm/2mFYMB8GA1UdIwQY
MBaAFHt8PxLLf5UaYtyW9bo6DN4+ULb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTN3X0VzdF9sUnBpM0piMXVqb00zajVRdHY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yMGEwYTAtYTA0Yy00ZjdjLWJmMmMt
YzU3MjZmOTE2ZDVlLzEvZTN3X0VzdF9sUnBpM0piMXVqb00zajVRdHY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yMGEwYTAtYTA0Yy00ZjdjLWJmMmMtYzU3MjZmOTE2ZDVl
LzEvZTN3X0VzdF9sUnBpM0piMXVqb00zajVRdHY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzhzYej8
Kby4msBeJzJfw5GGnpp4y71Ui18ScjSN8CsevoNECnsaaQBvhb48E25+J+Wr+HlT
hB9WokJLRF82jIPPLAYXVmB0pO/tnd/1qqRjxtDkRJ8PK67KaoEeSrCkcfN6EBwG
oSJdD3hxKIVFyROjF527xwYJSgUtExGdM29iXRpcTgZB/oRpiiSJIQVGS+cf/OXG
t8BO3HZKVBmKPZecgWZF84uqvsuvQKuNcbWVUnOudG1P7fpsFNbQCcM4Hx3x7Ez7
RH3QFi97lyA1W2RWzlqNufxVnCzrD2Z/UQYre8A8dCDzUY/bDICK0QJt6RJSQqdp
mRhcCTNh+qQK6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:56 2026 by rpki-client