Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File:                     NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier:          L6+PYVBiOZTWKhFwA/kIlxpdPtKBsTimkq6UufZDxhU=
Subject key identifier:   F4:60:BA:5C:A9:E2:7C:B1:96:36:E9:F6:21:EE:0D:3A:E7:E2:27:0F
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer:       /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial:       019E1F11587CE58EC3860DA3B6D6C1541871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number:          0322
Signing time:             Wed 13 May 2026 02:01:30 +0000
Manifest this update:     Wed 13 May 2026 02:01:30 +0000
Manifest next update:     Thu 14 May 2026 02:01:30 +0000
Files and hashes:         1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: AsazzvnNFruS/usYL9P8VzX90HW5NvyCj/INNLZhIkU=)
                          2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:58:7c:e5:8e:c3:86:0d:a3:b6:d6:c1:54:18:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
        Validity
            Not Before: May 13 02:01:30 2026 GMT
            Not After : May 14 02:01:30 2026 GMT
        Subject: CN=f460ba5ca9e27cb19636e9f621ee0d3ae7e2270f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:a3:74:3f:47:ee:f4:40:8d:0b:ab:d4:73:
                    42:cf:0f:f4:19:5b:ab:69:8a:5a:79:7d:eb:d6:cb:
                    8a:0b:19:fd:09:5a:75:b1:7d:40:70:93:c3:0f:e0:
                    b7:be:4c:75:01:77:e5:a7:10:fa:6e:01:0d:24:3a:
                    bc:1c:7a:1e:71:16:38:d3:26:84:b3:bd:ab:62:10:
                    c2:c4:94:9a:ed:e7:2f:7f:2d:0c:76:48:96:3d:e2:
                    e8:fc:b7:25:a8:a3:64:df:d0:ea:41:56:34:36:6d:
                    ea:9b:61:75:c3:01:9c:b8:6c:d5:6b:91:af:6c:c2:
                    7d:4d:b0:c6:1b:98:ce:3f:4c:0a:48:49:20:14:fe:
                    62:06:dc:1d:99:3e:03:1a:82:27:b2:9f:8f:8c:2f:
                    d7:70:a3:d5:8e:90:c9:39:9b:12:97:e7:06:c3:11:
                    f5:ba:38:3d:b1:65:ef:a1:7f:69:be:a5:43:1c:2e:
                    08:be:a1:96:11:1d:ca:af:22:ae:5d:a3:8a:74:03:
                    3d:4a:12:9e:8b:37:10:fb:c7:1a:3e:60:62:95:65:
                    b8:4d:d6:bf:b8:11:ce:ae:a6:05:e5:24:66:1e:42:
                    12:63:b5:97:d5:fb:cf:d5:8d:63:b4:1d:e4:35:b1:
                    4f:b8:4f:64:5c:42:69:25:63:26:ee:56:e7:bb:ea:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:60:BA:5C:A9:E2:7C:B1:96:36:E9:F6:21:EE:0D:3A:E7:E2:27:0F
            X509v3 Authority Key Identifier:
                keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f5:78:13:41:87:ee:ec:4f:4a:c7:e2:46:10:65:a0:eb:04:
         e9:6b:6c:e7:86:c4:36:cf:97:74:04:09:42:4b:76:4d:2a:23:
         f0:47:2f:5f:2f:3d:3c:65:f7:27:5e:e5:62:e4:b4:a0:1d:b4:
         ae:d4:13:bc:45:e1:ea:19:0c:73:62:37:53:d5:29:b2:8a:eb:
         46:39:87:92:04:f0:bb:43:f3:eb:f8:05:95:95:bc:5e:72:93:
         2d:98:34:bd:f3:7f:2f:36:87:1b:bf:c9:44:0b:47:84:28:22:
         c2:14:cd:1d:78:26:07:a6:a6:90:51:94:01:af:b3:04:e6:b6:
         c0:df:33:58:cf:42:b6:08:11:d0:6c:1a:47:7b:42:7e:3f:4b:
         5a:eb:20:83:fe:de:c9:16:9d:60:eb:c3:85:f5:36:72:f4:66:
         22:10:72:2f:4d:1c:c4:b9:4f:50:dd:35:f8:9d:93:fb:33:dc:
         ce:b1:45:f4:c4:b9:5e:fb:d9:92:7d:db:8c:02:5f:f2:b3:06:
         9d:ae:af:67:49:a4:cb:8a:ab:05:33:92:45:fe:a2:c9:2d:f9:
         95:20:6a:96:88:25:be:73:d4:ee:bb:2b:df:32:73:fa:1a:51:
         64:5f:c0:a5:b0:50:06:93:7a:8e:e0:5d:42:c6:b1:8a:75:ba:
         d0:f3:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:43 2026 by rpki-client