Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File:                     MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier:          xGnfKB8ReZW2oPnhvyTWdFk6S8wSQPYcrnsfZCisPkw=
Subject key identifier:   EF:7D:B9:91:C4:F0:81:AB:86:B7:D2:F2:D3:C6:68:14:AD:67:0B:6E
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer:       /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial:       0199221F0B433EEE575D17A30BD087A0A050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:01:23 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:23 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:23 +0000
Files and hashes:         1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: GTQVTgo6jMF41GN7+xau2ryv0PLtwtXXvbHKOA6K0ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:0b:43:3e:ee:57:5d:17:a3:0b:d0:87:a0:a0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
        Validity
            Not Before: Sep  7 03:01:23 2025 GMT
            Not After : Sep  8 03:01:23 2025 GMT
        Subject: CN=ef7db991c4f081ab86b7d2f2d3c66814ad670b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:09:e3:77:92:2b:55:58:84:e4:70:06:4d:
                    b7:62:15:a3:e2:2e:47:55:c7:a8:a6:ed:ec:14:92:
                    12:96:0d:b6:df:d8:7f:38:6a:3b:d4:85:09:0c:9c:
                    c4:e8:66:e6:7d:80:05:6d:4d:fb:57:82:86:02:76:
                    37:ce:7a:c8:4f:3e:90:c6:6d:6e:00:d9:18:f7:63:
                    df:b7:15:74:e2:ff:fb:60:1a:ce:05:80:4c:9d:e4:
                    1f:4c:7d:11:09:17:bf:fa:38:b0:9e:43:bc:f6:49:
                    b9:9d:0d:c9:53:13:97:3b:56:ae:3a:6c:85:82:59:
                    9f:61:6a:31:39:d2:b2:6c:30:a1:59:5f:6d:f1:d3:
                    85:4d:69:e2:7d:c4:4e:da:90:ac:bf:56:30:23:be:
                    49:57:47:a5:fd:1e:d4:d6:b5:6f:f6:58:af:c3:f1:
                    37:41:3e:4a:55:f2:10:e5:13:28:22:61:02:c4:8d:
                    3d:b7:1c:2f:06:31:9d:b1:da:a3:3f:df:62:b4:03:
                    af:3e:b8:c0:34:03:86:9b:22:53:ec:d8:c7:7c:70:
                    a1:34:6b:cf:03:9b:bf:1a:9b:f0:81:c5:bc:ea:58:
                    f3:a6:f1:7d:c0:f0:30:e6:cb:7d:49:c9:4a:49:07:
                    ae:b4:4a:78:4a:3e:ce:78:11:0a:05:a1:b5:cb:7c:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7D:B9:91:C4:F0:81:AB:86:B7:D2:F2:D3:C6:68:14:AD:67:0B:6E
            X509v3 Authority Key Identifier:
                keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:bc:9a:f8:56:55:1f:2c:3e:cd:b7:da:53:03:80:2b:1c:9c:
         54:3e:64:79:ce:8e:e0:ce:e4:3a:98:8d:b4:1f:0a:ba:69:86:
         5b:d1:14:99:9f:9d:2a:56:eb:a8:ae:b2:dd:df:35:02:81:03:
         d8:50:47:07:71:8b:39:a6:24:93:ee:c2:30:5b:c7:d8:b7:5e:
         dc:5c:a2:52:ab:dc:7c:91:8f:b8:39:d2:a9:8e:96:0a:1f:a7:
         70:65:e7:e7:e1:81:79:76:0a:23:c0:e3:c8:55:98:35:79:66:
         22:40:de:28:14:4b:95:74:9b:34:51:5f:f4:45:c3:67:54:e9:
         e0:52:17:62:c7:be:55:a4:a8:de:e9:49:d7:60:83:e4:8d:92:
         24:99:00:77:5e:3e:45:c3:6f:2f:07:fa:0e:0c:95:fc:38:90:
         9f:db:e0:a8:6a:e5:91:a5:39:1e:90:b1:e9:e0:fc:df:70:0d:
         05:34:25:44:94:24:0f:a8:a4:7a:6b:d9:14:d4:ef:a5:80:bb:
         05:34:5a:4c:b4:c7:7a:6e:78:00:43:41:31:32:55:7b:f9:e4:
         c1:b7:fe:da:13:d0:14:5e:d5:f6:f7:ba:96:aa:2e:a1:00:28:
         8e:85:75:2a:2a:e0:b0:07:14:80:78:63:3b:41:f1:26:4f:27:
         f0:cf:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:03 2025 by rpki-client