Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File:                     NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier:          iz/P7NLONW3vOn4ClvN7Dk3t71n7kmt/OvSlzYVuXZk=
Subject key identifier:   3E:5B:8E:C2:8E:5E:F7:06:C4:1D:81:AD:26:BB:22:B7:F0:1D:74:AB
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer:       /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial:       019EBF5ADF51858E1F23C78F636E1934B13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number:          0375
Signing time:             Sat 13 Jun 2026 05:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:04 +0000
Files and hashes:         1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: MqaBxptFxPZUYKSM+qOPiUWWgrDcUx7CuOug2wDYP/4=)
                          2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:df:51:85:8e:1f:23:c7:8f:63:6e:19:34:b1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
        Validity
            Not Before: Jun 13 05:01:04 2026 GMT
            Not After : Jun 14 05:01:04 2026 GMT
        Subject: CN=3e5b8ec28e5ef706c41d81ad26bb22b7f01d74ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:bc:7b:dc:ae:6e:68:eb:5c:ff:0f:e8:61:
                    6e:24:c8:97:3d:4f:fe:e9:e3:18:ee:72:fe:70:20:
                    85:25:f3:14:69:bc:ea:dd:42:19:ba:5b:27:78:3c:
                    09:fe:19:b7:26:d4:ea:3c:a4:ad:5a:e0:c7:f1:85:
                    6f:97:c7:20:4a:23:a0:f3:16:06:b0:10:4f:68:ed:
                    53:c7:56:5e:f7:26:d5:07:0a:07:98:c9:34:c6:1d:
                    c2:f7:b4:47:52:b3:16:c9:06:fc:aa:21:9e:67:41:
                    ab:11:1f:e5:64:8e:c7:91:15:9b:b4:5c:55:84:51:
                    a9:58:66:ea:4e:56:7a:64:69:93:99:16:6e:62:87:
                    b1:ca:38:d2:9d:52:80:2b:d2:84:42:40:d7:34:9f:
                    6a:0a:80:58:85:ef:75:96:24:04:f0:99:96:91:ef:
                    d7:4e:f3:f9:1e:57:0c:f9:74:37:51:86:80:92:c9:
                    bd:60:f0:d1:ba:1e:79:72:59:cf:67:a2:76:4c:21:
                    3c:bb:5f:7c:1c:8e:48:85:bc:b3:d5:87:fe:60:92:
                    34:a8:70:6a:ce:a3:d2:be:ae:e1:ba:e4:7f:63:19:
                    57:10:69:9e:3e:50:16:0b:a1:28:ca:41:18:42:df:
                    aa:7a:96:06:5f:c5:d8:b4:b9:df:47:10:5d:df:33:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:8E:C2:8E:5E:F7:06:C4:1D:81:AD:26:BB:22:B7:F0:1D:74:AB
            X509v3 Authority Key Identifier:
                keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e0:59:2a:d2:2a:be:36:d7:3f:b3:4c:88:7a:73:45:7f:4d:
         64:33:2c:a1:92:12:88:08:ca:7d:a2:01:04:8c:9d:fd:1a:f9:
         eb:6a:29:67:d4:c3:96:84:62:c3:dc:54:0e:01:cb:ca:95:25:
         30:1a:fb:e6:de:bc:42:07:74:a6:15:60:93:de:1d:23:9b:a0:
         a6:12:c4:a6:77:42:88:e2:47:fd:b3:ae:4d:29:d9:2c:85:0c:
         15:f3:81:d5:d2:d1:8d:5d:82:09:97:8e:c4:ba:fb:c9:83:e1:
         92:28:dd:68:71:a5:c7:e3:bd:b2:0d:8e:29:65:3f:e0:d6:68:
         5d:c7:56:53:de:a1:fc:15:bd:70:da:98:4c:01:5b:c4:97:60:
         b4:1f:2c:d1:3e:43:5a:27:e5:29:82:f4:73:cc:99:1b:a4:4d:
         90:c1:81:ef:6a:d5:ae:d7:62:40:ec:70:e1:a8:26:83:b5:fb:
         91:20:8f:f5:6d:09:c1:b6:1d:6d:c6:95:bc:da:c7:68:33:e7:
         b8:db:27:5c:a6:bc:ee:7f:68:b3:41:3d:59:ab:85:dc:c2:cc:
         46:1e:df:13:ae:c6:c1:98:ab:77:4b:b9:c6:7e:96:70:27:d5:
         49:b4:c0:42:d2:f8:c6:90:56:7a:5e:fe:00:b8:ca:05:db:08:
         e2:35:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:47 2026 by rpki-client