Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File:                     NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier:          X2CfGQe+bN44hn7jsVmBgaBoAu4qjPlk6Rtyh7fQyiA=
Subject key identifier:   12:91:D5:6F:05:44:CC:09:B4:6A:EA:2A:A1:CE:35:A1:3D:B1:23:9C
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer:       /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial:       019FA71901CBC33005B396FA84BACA16F88E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number:          03ED
Signing time:             Tue 28 Jul 2026 05:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 05:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 05:01:01 +0000
Files and hashes:         1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: MfGI02Rx12hGYa5DPANg1TXzrUZ3fwPyiHzUZElR/bA=)
                          2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:19:01:cb:c3:30:05:b3:96:fa:84:ba:ca:16:f8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
        Validity
            Not Before: Jul 28 05:01:01 2026 GMT
            Not After : Jul 29 05:01:01 2026 GMT
        Subject: CN=1291d56f0544cc09b46aea2aa1ce35a13db1239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:14:6c:da:f4:b3:9e:1b:ca:8e:83:c0:c6:
                    91:7f:d5:ce:98:b9:c2:1e:e5:ee:3a:5e:6e:b8:00:
                    d9:4a:ea:91:c6:a6:b8:1d:68:e7:63:cb:ac:06:40:
                    c2:2b:28:f4:e8:9a:35:c4:39:3a:ca:43:e3:ae:84:
                    7c:b2:5b:a2:30:c6:7f:93:f5:9e:18:d1:38:d3:58:
                    9b:90:8c:b5:61:f5:75:3e:23:ab:ad:45:68:a3:9c:
                    08:de:c8:0e:34:96:58:0e:cf:97:df:f7:06:65:60:
                    db:b5:c3:1a:de:e2:00:8f:03:4a:af:93:b7:92:04:
                    e5:e8:42:bb:e1:c0:5d:cb:9f:72:8e:43:5b:cb:8c:
                    cb:2f:7a:c1:8b:53:4c:f2:2c:43:b4:b6:01:ea:e2:
                    5b:39:99:96:79:74:07:29:88:5d:02:b4:0b:2d:9b:
                    f3:4b:44:85:40:78:9b:f1:88:b6:d1:5e:2a:d1:e3:
                    0c:04:fe:a2:76:8a:e7:52:a1:50:8e:d8:64:08:34:
                    77:8e:cf:e9:ba:43:c5:7b:96:75:a8:43:12:a2:5f:
                    04:1c:a8:ec:86:07:95:94:c9:90:d3:ef:be:61:22:
                    28:fb:18:e6:36:95:6d:50:a2:96:9e:84:fa:b3:51:
                    4f:8e:91:ef:01:30:d6:9a:b2:13:dc:bf:70:b3:7e:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:91:D5:6F:05:44:CC:09:B4:6A:EA:2A:A1:CE:35:A1:3D:B1:23:9C
            X509v3 Authority Key Identifier:
                keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:48:95:fa:cf:87:d3:b8:b7:5e:c3:bf:fb:88:82:5d:0c:76:
         fb:9c:ed:08:0b:8b:d5:3d:9d:70:a2:86:45:dc:29:82:5f:3a:
         fd:f7:32:77:01:0b:0c:ec:d0:eb:f8:1f:37:8e:03:db:37:be:
         31:93:62:fc:a1:12:5e:5d:3c:05:3b:90:cb:87:6c:57:13:ac:
         b2:62:5f:ea:67:c7:0e:49:d0:de:f2:ff:60:01:97:2c:07:85:
         c6:db:e5:3d:eb:8c:d6:7c:ff:41:ce:c0:f8:33:c2:b1:6e:c0:
         7d:44:c1:5a:10:e1:31:91:4e:4e:68:b9:02:f4:e0:ec:3b:11:
         61:a1:42:0c:7b:26:37:cd:16:11:1e:57:88:2c:b1:54:74:f8:
         04:86:22:85:ec:0c:39:8d:8b:7a:1a:70:32:63:0d:56:cd:75:
         26:e4:77:f5:eb:49:a6:46:5f:cb:3c:18:70:03:97:27:d6:64:
         d7:d7:15:9e:12:09:71:0d:fc:91:f8:76:b7:66:28:fd:39:56:
         8b:8e:6e:7b:bf:ad:30:68:f6:85:4b:5d:93:1e:d7:a6:05:de:
         3a:6b:7a:26:5d:b3:e2:78:98:2a:35:ea:e9:e5:13:86:47:39:
         89:fc:73:c0:ee:58:db:6a:f5:e7:d6:2b:85:0b:7e:2a:c2:b1:
         eb:ae:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:10 2026 by rpki-client