Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft
File:                     ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft (raw, json)
Hash identifier:          zVE2ZROc0sAa4jAgk5hd3iEAtZR8qKg+8UFLA9ducfE=
Subject key identifier:   B5:C2:38:34:86:4B:F7:DF:D7:F3:35:87:06:0B:65:87:E3:D5:9E:EA
Authority key identifier: 12:B1:9A:65:51:3F:9E:2E:BE:DE:F0:05:7B:FF:95:41:72:55:CF:FC
Certificate issuer:       /CN=12b19a65513f9e2ebedef0057bff95417255cffc
Certificate serial:       019D273AFC2D0B20608626D058D82A3E6877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErGaZVE_ni6-3vAFe_-VQXJVz_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft
Manifest number:          01E8
Signing time:             Wed 25 Mar 2026 23:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:10 +0000
Files and hashes:         1: 1-eX3LzXNygVA5Rw42VT_UzcG1To.roa (hash: 0SjEi87CFniLM07BFngiD7sSkdKuk0WbGO1VvY+WLhE=)
                          2: ErGaZVE_ni6-3vAFe_-VQXJVz_w.crl (hash: IO+THhHPjwJCrZMtzZfVcdDWsUxY4AiWxT2cOuwQzfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErGaZVE_ni6-3vAFe_-VQXJVz_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:fc:2d:0b:20:60:86:26:d0:58:d8:2a:3e:68:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b19a65513f9e2ebedef0057bff95417255cffc
        Validity
            Not Before: Mar 25 23:01:10 2026 GMT
            Not After : Mar 26 23:01:10 2026 GMT
        Subject: CN=b5c23834864bf7dfd7f33587060b6587e3d59eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:84:03:84:9d:90:23:d5:b3:fe:57:d5:14:
                    8d:2d:5c:52:6a:b6:1c:bf:ec:f0:e7:7d:68:78:df:
                    ad:a8:8e:eb:cc:e4:5c:7c:57:51:f9:36:30:33:4b:
                    f6:cc:cf:47:35:80:1b:57:d4:15:e5:cc:89:77:40:
                    b5:31:c8:f1:0c:05:5c:a4:00:44:92:5e:11:93:76:
                    bd:5e:9a:59:c0:19:6a:b3:02:59:e5:6b:2f:04:2d:
                    05:02:7e:92:31:9c:81:13:84:3d:6c:c0:d1:7d:b4:
                    a3:f1:90:62:ef:53:00:68:89:d4:5b:fe:3e:52:7c:
                    e8:8c:ce:a2:c7:db:22:a0:80:ba:c8:5d:27:c5:d7:
                    5d:67:34:80:32:76:b2:dc:01:cb:86:0b:87:70:bb:
                    b3:bf:58:84:9c:0d:37:5e:a3:77:64:f2:8a:84:1b:
                    e2:ff:4d:e8:13:83:cc:09:94:86:ce:de:41:6a:a5:
                    0a:48:f5:95:68:4d:e0:85:a9:3f:89:d1:20:68:b3:
                    86:5d:f2:27:18:ec:f5:1e:e2:1e:80:b4:76:8a:c3:
                    c2:b3:dc:7c:65:ac:f2:fb:f9:49:ba:33:7d:0e:ee:
                    1d:84:a3:33:a4:84:2c:80:08:19:b2:00:2c:e9:e6:
                    b9:be:f7:87:f1:d6:6b:2d:2c:d4:a1:6c:d6:57:78:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:38:34:86:4B:F7:DF:D7:F3:35:87:06:0B:65:87:E3:D5:9E:EA
            X509v3 Authority Key Identifier:
                keyid:12:B1:9A:65:51:3F:9E:2E:BE:DE:F0:05:7B:FF:95:41:72:55:CF:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErGaZVE_ni6-3vAFe_-VQXJVz_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1f:df:4e:9e:c0:69:ef:20:89:e5:72:e0:65:39:9e:1f:07:
         0b:5f:c0:e0:92:ba:08:cb:60:ca:72:bd:6e:a3:3c:b0:da:9f:
         a0:6b:a8:1a:ef:31:8d:06:f1:84:e2:49:c2:f7:42:52:8e:0c:
         ab:0f:df:53:61:61:ec:4c:db:d6:5f:d5:a3:eb:59:1a:6d:a2:
         f2:31:f7:43:ac:6d:7f:5d:4d:d9:5f:fd:1a:db:d1:59:29:45:
         2f:c4:85:44:66:ce:05:a8:df:4c:a4:dd:7e:04:5c:4b:9c:14:
         0a:1b:ba:cb:a2:ec:1c:04:cf:72:7f:a8:08:39:60:14:d8:57:
         5e:55:f3:56:a3:93:68:c2:52:94:64:f6:2d:a6:83:98:5b:64:
         79:f9:c0:42:8e:d7:a9:7f:d6:cf:78:4f:40:45:eb:db:fc:9d:
         28:07:2e:ea:0c:36:98:ab:91:3c:dc:08:06:cc:97:8f:ef:29:
         c5:76:be:b4:8a:82:80:db:49:ce:91:d9:9c:7a:fb:55:fd:0e:
         af:c3:48:22:d5:6a:91:1c:ce:cf:36:59:04:11:44:4d:b6:42:
         df:0a:ea:32:83:33:3b:75:15:3b:dd:6e:6d:49:f7:48:3a:b9:
         1f:23:0f:ea:f7:ce:ce:bd:cf:8c:e0:dc:f1:3a:60:47:4c:1a:
         6b:56:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:59 2026 by rpki-client