Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File:                     MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier:          0ntyAwn0x5YjQf5HtJxtNFkf+41KhSfNgxrdfVlYUeg=
Subject key identifier:   27:24:74:4D:89:E4:CF:C9:34:FE:A4:CE:6A:6A:D6:9A:91:AB:33:DB
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer:       /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial:       019D9962A2970A7F9B297C8A536EC302B03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 03:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:11 +0000
Files and hashes:         1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: I1vp0bbVzEiFQo1YKrwJUtbIpbeLl+4V+fTFwXmbv0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:a2:97:0a:7f:9b:29:7c:8a:53:6e:c3:02:b0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
        Validity
            Not Before: Apr 17 03:01:11 2026 GMT
            Not After : Apr 18 03:01:11 2026 GMT
        Subject: CN=2724744d89e4cfc934fea4ce6a6ad69a91ab33db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:e2:85:0b:9a:f7:23:6b:18:f3:2a:2d:f4:
                    c7:6e:cf:b0:b2:ba:6b:3d:d0:cd:c7:16:05:ef:aa:
                    f5:04:fb:b6:b8:ce:b7:cd:95:7d:e0:e6:b8:70:78:
                    b8:b4:76:e0:8e:e6:40:06:f2:c5:72:cf:a1:18:19:
                    45:3c:22:6a:45:9c:b8:7f:8d:0f:41:7e:d1:8e:a8:
                    01:b7:51:93:b1:ee:ff:74:96:c3:67:e6:59:0f:06:
                    e0:7f:2f:18:94:f9:19:73:22:f1:e5:df:91:69:fe:
                    05:d0:1a:6f:74:88:9a:9e:92:51:de:5d:95:54:18:
                    53:48:c4:34:f7:07:14:f4:65:80:6b:50:8d:57:0c:
                    56:73:1f:c6:99:e7:fc:d6:88:76:59:1a:bf:3d:a8:
                    b1:8e:43:36:2d:4c:74:1a:0d:c9:20:c9:61:76:f0:
                    03:c0:16:f6:14:20:99:fb:46:71:06:36:e2:db:51:
                    6f:e8:47:61:db:a6:c7:aa:00:09:41:b6:2b:bb:d3:
                    98:5d:a1:c4:49:44:0f:f7:95:a9:2b:5f:a3:68:5e:
                    6a:02:3b:7a:97:60:a8:d8:b7:67:45:d1:da:0f:fb:
                    2a:a3:92:ea:ca:ea:b1:2d:86:07:17:e6:ca:ed:80:
                    85:92:9b:5d:7e:f2:10:d2:1e:54:87:f5:08:a3:b7:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:24:74:4D:89:E4:CF:C9:34:FE:A4:CE:6A:6A:D6:9A:91:AB:33:DB
            X509v3 Authority Key Identifier:
                keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:3f:96:07:d4:34:a8:ca:05:52:00:a0:98:60:e9:86:36:
         6b:db:20:56:9e:c9:15:88:0a:0e:9f:af:1c:01:4e:9b:00:ff:
         bd:15:0f:a4:1b:5f:9b:a5:52:3d:d3:73:90:6b:90:98:59:35:
         7b:d3:f2:01:dd:29:15:2a:4d:13:11:39:5f:77:54:b3:ac:38:
         39:20:86:60:55:ff:d4:55:5c:cb:82:93:82:17:16:99:00:07:
         d4:2d:63:b9:b3:3a:fa:ad:d6:c1:b7:4c:79:83:10:ec:df:69:
         d3:af:4b:c7:37:d9:d6:41:36:de:5b:4e:83:cf:ea:2b:2d:8f:
         8d:1e:6e:7a:d5:68:8c:20:aa:67:0f:33:27:f5:91:2c:1e:f0:
         c0:ad:51:9d:df:d4:45:ff:7f:1f:7e:fa:cf:32:e9:0f:bb:a2:
         06:27:da:0e:2b:7b:07:ec:4d:fa:70:99:90:54:75:5f:28:ef:
         44:c5:7e:24:f9:e2:1a:03:c2:e1:8a:0d:61:7f:60:7d:ea:b1:
         53:82:c9:2a:6a:8a:41:f8:82:8d:fb:20:6c:62:fa:90:ba:62:
         6e:bc:33:96:78:b4:8e:f7:34:31:e3:db:f6:5e:3c:1c:b1:b3:
         ff:03:9a:90:43:aa:ba:2f:28:72:ed:78:7d:a1:89:74:f7:6b:
         3d:69:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:24 2026 by rpki-client