Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File:                     NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier:          Fe1GpZjlFifngEY2erhn5H5qnMNP9V2wmfPTfWiLWEI=
Subject key identifier:   98:79:76:5A:41:DA:F6:5E:2B:1D:1D:D3:38:6E:86:00:5C:84:37:1D
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer:       /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial:       019CAC47492BC6D8372F104CDC3CDE4D159D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number:          0262
Signing time:             Mon 02 Mar 2026 02:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:18 +0000
Files and hashes:         1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: YUl8FSkEyyYaYz3f178qS9xTZ47lKmwM6xfjZFclfSw=)
                          2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:49:2b:c6:d8:37:2f:10:4c:dc:3c:de:4d:15:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
        Validity
            Not Before: Mar  2 02:01:18 2026 GMT
            Not After : Mar  3 02:01:18 2026 GMT
        Subject: CN=9879765a41daf65e2b1d1dd3386e86005c84371d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:69:9b:97:94:c2:b1:71:c9:2b:f3:7c:17:
                    fc:b6:4f:be:83:0b:ab:22:55:7e:93:05:be:c8:d9:
                    f9:a8:3e:03:14:c7:cc:a1:d8:a7:69:02:04:76:01:
                    ee:d3:f7:0a:13:06:c8:bb:6c:99:a1:86:10:71:42:
                    61:d4:12:f3:fa:e9:3d:0b:0c:d1:d8:e3:2d:8d:9b:
                    f7:24:41:b5:9a:eb:ac:e0:9d:99:d1:8b:63:97:02:
                    5c:c6:df:e2:9e:68:ee:34:2b:76:5f:44:b3:29:8d:
                    97:86:c5:ff:0c:33:77:46:0e:c0:a3:e7:be:5d:53:
                    94:85:6b:43:75:fd:5f:00:6f:5c:ee:76:53:cc:f3:
                    ce:6c:9a:d2:a7:2f:ab:ba:fe:81:04:35:02:53:3b:
                    7b:02:f6:f8:51:af:0f:63:c3:7b:b1:5b:4f:d6:00:
                    42:e5:3c:b9:3b:73:5a:bc:73:fa:c1:cd:fe:7c:25:
                    26:18:00:57:54:c9:32:33:62:0a:80:b1:53:03:32:
                    19:fa:16:eb:87:47:d5:76:bb:9a:0d:e3:5f:f3:de:
                    05:1d:46:53:18:ca:c1:de:5f:c1:56:a5:f8:71:16:
                    fd:4e:4c:98:25:a4:2a:77:d0:c0:16:52:52:4f:2b:
                    a2:f9:7e:d1:6c:d5:ee:88:16:0d:4c:09:2d:1b:93:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:79:76:5A:41:DA:F6:5E:2B:1D:1D:D3:38:6E:86:00:5C:84:37:1D
            X509v3 Authority Key Identifier:
                keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:53:2c:44:05:0a:c5:16:59:25:17:d6:cc:ad:46:92:65:f6:
         06:4f:e6:0c:7f:02:7f:73:d7:f7:55:51:34:87:46:72:b5:f1:
         6a:94:cd:5e:68:41:67:9e:ca:0b:8d:c7:b5:dc:3a:82:f5:84:
         46:06:85:2f:7e:bb:4b:bf:78:e2:9a:08:8e:a2:82:71:db:17:
         10:f9:a8:f1:20:05:14:76:52:ba:da:68:8c:ae:ae:db:97:9e:
         48:67:a3:1c:7b:57:e8:fd:29:46:b5:44:94:86:1c:22:c7:a3:
         70:f3:6a:c1:d5:3d:9d:a3:5b:e4:33:51:40:57:be:28:4f:7e:
         c2:99:fc:0b:5b:15:52:eb:65:c1:2d:dc:b8:88:c4:14:98:8a:
         89:62:83:df:59:20:9e:32:07:cd:e5:87:29:9c:e4:e3:43:9e:
         ea:97:86:b2:3d:e6:e6:41:0b:2a:c3:23:98:cb:4c:f2:b2:ae:
         eb:24:93:d7:20:0d:41:6b:e1:80:b0:d3:5b:c6:c4:d0:ed:65:
         7d:8e:54:ec:37:cd:8b:e0:7c:25:28:ca:4e:03:ec:19:0b:a4:
         40:01:ad:fd:75:a3:96:2a:8f:6a:e1:60:29:7b:5a:9c:19:da:
         c4:2d:2f:a7:22:6b:59:ae:f9:11:ec:73:1b:94:c6:0b:32:05:
         d7:74:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:27 2026 by rpki-client