Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File:                     NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier:          FoacGwfVlnGMU0aPffVF8wIaSrxzAXC7J+5DUzsgOf8=
Subject key identifier:   D8:2E:2D:B7:30:E7:2E:57:F5:7F:AB:4D:3A:78:95:A9:19:61:44:92
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer:       /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial:       019E28B8AB4C2D96C639CD921E6D3CE1F393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number:          0327
Signing time:             Thu 14 May 2026 23:00:51 +0000
Manifest this update:     Thu 14 May 2026 23:00:51 +0000
Manifest next update:     Fri 15 May 2026 23:00:51 +0000
Files and hashes:         1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: aKJSzRBhIJ6MIUdbsKcAY+sYJYnCFfwr8NGynTQdg04=)
                          2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b8:ab:4c:2d:96:c6:39:cd:92:1e:6d:3c:e1:f3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
        Validity
            Not Before: May 14 23:00:51 2026 GMT
            Not After : May 15 23:00:51 2026 GMT
        Subject: CN=d82e2db730e72e57f57fab4d3a7895a919614492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:f9:84:3e:c0:6e:65:b2:d4:4c:ec:0f:87:
                    57:94:5b:ac:11:17:44:8b:9c:a6:1e:d2:cb:2c:9a:
                    da:0b:0b:7e:93:27:f1:f8:8c:b0:91:16:74:96:b7:
                    f5:be:80:58:a7:1b:dd:f6:e4:66:fb:01:61:1f:24:
                    7f:ec:bc:d1:d5:25:22:f6:96:2d:3f:db:94:5d:02:
                    eb:b4:6c:d8:7c:c3:d2:b4:2a:db:35:2a:dc:03:69:
                    1d:54:01:25:ee:58:17:16:bb:07:24:df:6a:4c:30:
                    62:4e:57:e5:7e:df:69:99:0a:20:9d:43:29:ff:6c:
                    cb:cd:57:07:5e:47:6a:17:eb:e7:38:71:f6:c1:4b:
                    49:05:99:d2:93:93:3d:39:28:67:eb:98:30:c4:4c:
                    b3:6c:5e:6b:51:c3:22:61:a2:cd:56:78:f0:c5:6e:
                    9e:03:fa:f2:a0:6e:16:e2:54:32:e9:e7:12:2b:ff:
                    1e:92:1d:cb:6b:ee:72:55:e5:2a:90:f2:75:bb:a8:
                    ae:37:43:63:93:79:a3:a2:99:f4:0d:d6:bd:2b:b8:
                    26:49:e4:78:64:e8:68:af:6b:be:9f:e8:c2:0a:12:
                    b1:9d:19:cb:8a:55:9d:fc:0e:b9:cd:fe:4a:22:de:
                    50:4b:ae:a8:11:61:35:58:93:45:91:cc:aa:8a:89:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2E:2D:B7:30:E7:2E:57:F5:7F:AB:4D:3A:78:95:A9:19:61:44:92
            X509v3 Authority Key Identifier:
                keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:38:30:bd:cc:3e:1c:32:b6:a2:bf:55:70:17:ff:eb:b7:d6:
         c4:1d:1d:df:ae:71:83:09:f7:12:58:16:3f:34:4f:1b:2e:32:
         81:0f:df:9c:04:06:ed:18:91:7d:29:61:b2:ff:ec:4c:88:49:
         07:f0:6c:de:09:bc:d2:5d:00:bf:70:24:63:85:59:55:0d:28:
         a9:3c:3e:1a:a0:ba:e5:66:07:a8:91:91:48:af:29:e1:fc:bd:
         39:3f:34:58:e8:f5:dd:ab:e3:88:a1:7f:6c:0f:79:00:23:f3:
         3f:aa:c7:94:f9:00:6d:0e:8f:2a:2e:e4:5d:74:45:47:e5:f5:
         66:94:8e:ed:33:2d:5e:6f:2e:cc:5b:9e:30:96:1a:37:80:7e:
         76:d8:f2:08:3a:03:80:c5:f0:8a:21:15:18:f1:5a:27:37:79:
         29:7f:a5:bd:c3:56:a5:d0:28:6a:df:dd:a9:23:9c:cf:47:d2:
         f0:99:0d:70:74:e8:b2:fc:09:cb:00:50:58:ae:32:14:dc:42:
         58:d7:ba:e7:5e:d0:4f:39:b7:79:a7:02:5a:75:3d:0e:e6:f7:
         a3:13:a2:89:a3:c0:dd:a3:f9:42:f3:a5:44:16:1a:35:54:f2:
         a7:9e:cc:aa:c9:d6:94:05:d9:5a:c4:74:38:20:0b:a0:d7:a3:
         11:b7:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:30 2026 by rpki-client