Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
File:                     nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json)
Hash identifier:          9Qo2c8S/6BYqrei7bKSVzY+x5ku9j/Izwy/6po7759o=
Subject key identifier:   EA:FC:AF:57:75:F8:52:C3:86:87:37:E8:AE:28:D7:57:F4:C6:FE:B5
Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51
Certificate issuer:       /CN=9e9842fe5472e6277e792076c7d3877002e2e251
Certificate serial:       019D27A8ADA5E23FFFBEED040F4FD9BFB709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
Manifest number:          0385
Signing time:             Thu 26 Mar 2026 01:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:58 +0000
Files and hashes:         1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: KOOMuRu9oeHidjt64ZKg8HTSwAurEFnPmi4dZadYr3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:ad:a5:e2:3f:ff:be:ed:04:0f:4f:d9:bf:b7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251
        Validity
            Not Before: Mar 26 01:00:58 2026 GMT
            Not After : Mar 27 01:00:58 2026 GMT
        Subject: CN=eafcaf5775f852c3868737e8ae28d757f4c6feb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:bc:d9:51:47:08:16:b7:1e:ed:7a:50:f0:
                    5d:89:69:af:e8:51:64:6b:c3:11:f8:32:6e:e5:db:
                    2e:66:1c:88:bc:d8:a5:80:a0:c0:00:2f:78:f8:e7:
                    71:a8:c0:1e:93:c0:1a:f0:f2:f2:44:93:54:97:68:
                    b4:3a:d5:ba:39:8f:e6:15:98:11:a9:38:74:05:a4:
                    98:a0:ba:1d:7e:1f:39:9e:ea:ba:17:e3:6f:76:db:
                    98:0d:96:c4:47:1e:ce:c1:7b:ba:31:4f:4f:b2:f5:
                    76:e8:c5:bd:ee:ce:6e:95:01:fb:e6:14:40:40:a8:
                    4c:33:55:57:db:2a:ad:aa:02:96:eb:97:29:14:20:
                    3c:c0:65:ab:4c:a4:c0:cb:25:9a:bd:31:c0:e3:df:
                    db:2a:ac:c1:00:db:01:2c:b7:dc:f2:c3:d3:ab:01:
                    12:21:ab:d0:bf:4f:cf:19:0c:58:9d:4c:6b:57:69:
                    65:28:37:f0:b8:21:aa:1a:bc:0c:21:a4:ad:aa:42:
                    83:55:3e:15:96:7d:62:c2:1b:79:ec:8d:0c:83:fd:
                    d2:56:79:ca:46:97:95:f0:8e:1d:1e:9b:33:44:23:
                    53:e2:52:aa:83:63:d2:72:85:9e:38:13:63:22:b4:
                    a6:a2:60:c5:b0:49:48:e2:ff:5b:98:13:57:1b:6e:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FC:AF:57:75:F8:52:C3:86:87:37:E8:AE:28:D7:57:F4:C6:FE:B5
            X509v3 Authority Key Identifier:
                keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:5c:9d:6b:2c:1f:e6:cb:f5:f8:32:10:5b:ec:31:57:be:
         15:0b:a2:94:90:3c:2b:f5:e4:7e:03:e9:4b:40:5b:36:73:2e:
         dc:72:9b:65:42:f5:d8:2b:bd:13:b2:a8:53:09:57:f1:66:b5:
         73:7c:f5:6b:b1:d5:12:bb:e2:64:61:75:d3:50:81:54:26:9e:
         92:38:6e:1d:cb:d0:40:10:47:58:65:28:43:f5:d2:38:1b:72:
         e9:c4:62:ed:26:e1:a3:50:3e:2c:74:f7:8a:e9:d5:1c:9f:00:
         8d:77:13:28:54:fb:d4:e8:07:c6:a2:cc:74:67:96:68:56:89:
         ca:53:88:7d:2d:67:c0:1f:a8:6c:46:54:14:2d:f6:a7:cb:8b:
         8b:15:97:ba:5c:a5:89:77:13:98:1b:64:e0:3d:ff:2e:f6:4c:
         1f:b2:d9:b2:fb:ff:bd:01:33:5a:6e:4d:57:12:c3:4c:c1:85:
         47:14:7f:d3:33:86:91:27:ca:4b:36:a4:f6:11:ea:10:99:90:
         94:da:bc:c4:72:31:f5:da:07:78:c9:19:24:f0:87:e9:6f:f0:
         bd:56:17:5c:b5:43:5f:3b:8f:da:ab:77:19:0a:4e:c2:48:77:
         62:38:1d:2a:8f:fc:62:b0:33:44:ed:2f:44:70:f8:1a:2f:8f:
         d3:47:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----