Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File:                     MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier:          qEkx24RVD8c0+/Fdph7MJ/H1vwJaCyX7B+Q3UDceNz0=
Subject key identifier:   41:3E:1B:9D:C2:63:B2:54:C7:14:6C:44:0C:AC:30:32:E9:54:DD:9D
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer:       /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial:       019D38D3D6BBE854D711B1EB03904BAE39F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 09:01:40 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:40 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:40 +0000
Files and hashes:         1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: P78s/PgoyPkgrkZhubwRlGikCeZ1HXVxryALe+/6rsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:d6:bb:e8:54:d7:11:b1:eb:03:90:4b:ae:39:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
        Validity
            Not Before: Mar 29 09:01:40 2026 GMT
            Not After : Mar 30 09:01:40 2026 GMT
        Subject: CN=413e1b9dc263b254c7146c440cac3032e954dd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:48:16:b6:e5:06:42:03:33:33:b4:59:63:
                    96:70:83:2f:6d:b0:18:a6:2f:93:4e:24:46:e1:20:
                    48:8a:cc:b0:b4:30:83:ad:24:e5:7b:3a:0c:21:9a:
                    6b:52:b1:2b:93:e7:12:0a:70:6b:a2:0a:86:f8:65:
                    6e:29:66:7e:31:e6:e6:63:3c:92:43:be:a9:2c:3c:
                    b9:3b:cb:5a:13:a2:c4:ee:e3:78:b5:bf:e2:27:8a:
                    0e:b4:56:24:ee:fb:07:2e:52:60:7f:1b:d8:89:b0:
                    7e:0c:e8:5e:a4:82:28:06:3d:c9:50:2d:68:fb:9c:
                    7f:6d:d6:e2:1d:60:eb:0b:01:39:c9:68:3b:1e:a7:
                    b5:cd:f6:c8:7b:2d:90:de:cd:82:00:cc:0a:da:c8:
                    5b:31:62:8e:c5:1a:ca:40:97:11:a9:7e:65:f8:22:
                    4c:be:23:91:c2:e6:c6:80:ff:ec:b1:0a:cb:01:6c:
                    2c:68:34:99:ed:a9:70:9c:3f:70:6e:3b:b9:85:f7:
                    7a:17:8a:1f:e9:9e:f3:2f:bf:8a:96:04:fa:17:bf:
                    f3:45:ce:0f:a3:7d:77:dd:d6:8c:78:61:ff:d4:ef:
                    6a:2f:17:87:28:20:6d:ff:fa:e1:69:f3:1e:34:e4:
                    42:09:3e:b0:d5:c3:aa:8c:92:52:cb:a6:5f:85:55:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:1B:9D:C2:63:B2:54:C7:14:6C:44:0C:AC:30:32:E9:54:DD:9D
            X509v3 Authority Key Identifier:
                keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:c5:c4:51:ec:80:18:b1:4c:5a:38:48:fa:e7:0f:f8:61:
         f1:d5:f1:b4:fe:86:9d:01:59:ae:ac:52:eb:bb:94:ee:45:cb:
         df:59:09:25:ce:dd:da:28:91:25:f4:72:3c:f4:6e:2b:7b:1a:
         3e:9e:c9:b3:0f:5a:5b:84:19:2a:44:99:95:8a:20:82:0e:c8:
         28:83:52:d4:15:ee:95:2b:42:a9:d8:c1:a4:bf:da:a0:0a:d7:
         4b:6d:2e:a7:93:5b:45:5f:1b:86:f4:19:ec:5b:5d:b4:86:86:
         97:77:81:92:ce:2b:9a:38:6d:d6:e7:1e:92:7a:98:74:27:46:
         06:fd:6f:c6:65:b7:df:87:8e:4b:91:eb:29:64:54:51:20:d5:
         39:06:5d:5d:0f:49:ef:b4:ec:49:d8:4c:e2:01:4f:fb:58:79:
         57:21:35:08:39:0d:dd:5c:a1:25:3f:28:b8:4e:31:69:81:79:
         a5:a5:7c:8d:94:69:75:c8:19:37:e3:b3:6a:e5:b5:f2:66:bd:
         f5:e1:bb:0a:9b:08:7c:47:20:a9:48:e6:91:d4:2e:57:f7:00:
         69:aa:95:df:6d:48:3c:0e:ca:8d:d9:1e:48:67:1f:54:d0:55:
         bf:1d:89:c1:21:38:2f:ee:ec:e3:c2:74:46:b6:e8:bd:ef:f9:
         67:c5:6d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409a76FTXEbHrA5BLrjnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw
NWY5YjMwHhcNMjYwMzI5MDkwMTQwWhcNMjYwMzMwMDkwMTQwWjAzMTEwLwYDVQQD
Eyg0MTNlMWI5ZGMyNjNiMjU0YzcxNDZjNDQwY2FjMzAzMmU5NTRkZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulNIFrblBkIDMzO0WWOWcIMvbbAY
pi+TTiRG4SBIisywtDCDrSTlezoMIZprUrErk+cSCnBrogqG+GVuKWZ+MebmYzyS
Q76pLDy5O8taE6LE7uN4tb/iJ4oOtFYk7vsHLlJgfxvYibB+DOhepIIoBj3JUC1o
+5x/bdbiHWDrCwE5yWg7Hqe1zfbIey2Q3s2CAMwK2shbMWKOxRrKQJcRqX5l+CJM
viORwubGgP/ssQrLAWwsaDSZ7alwnD9wbju5hfd6F4of6Z7zL7+KlgT6F7/zRc4P
o3133daMeGH/1O9qLxeHKCBt//rhafMeNORCCT6w1cOqjJJSy6ZfhVW+lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE+G53CY7JUxxRsRAysMDLpVN2dMB8GA1UdIwQY
MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt
MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1
LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcfFxFHs
gBixTFo4SPrnD/hh8dXxtP6GnQFZrqxS67uU7kXL31kJJc7d2iiRJfRyPPRuK3sa
Pp7Jsw9aW4QZKkSZlYoggg7IKINS1BXulStCqdjBpL/aoArXS20up5NbRV8bhvQZ
7FtdtIaGl3eBks4rmjht1uceknqYdCdGBv1vxmW334eOS5HrKWRUUSDVOQZdXQ9J
77TsSdhM4gFP+1h5VyE1CDkN3VyhJT8ouE4xaYF5paV8jZRpdcgZN+OzauW18ma9
9eG7CpsIfEcgqUjmkdQuV/cAaaqV321IPA7KjdkeSGcfVNBVvx2JwSE4L+7s48J0
Rrbove/5Z8Vt7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:55 2026 by rpki-client