Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File:                     JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier:          wBNfIHf5yTydN5IQDU+/QrbOzJn29nk6qdxMAdoUnlI=
Subject key identifier:   51:E7:F8:76:20:21:F0:4D:3F:81:BE:82:B2:8E:05:74:A1:04:AB:A3
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer:       /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial:       019D270468C3DC1399F80FC3222B81E445AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number:          0BCC
Signing time:             Wed 25 Mar 2026 22:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:33 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:33 +0000
Files and hashes:         1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: 4Q+pjbfBUDXZtUhLgOyWcgHKserDG/iO/LIPbh7WUbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:68:c3:dc:13:99:f8:0f:c3:22:2b:81:e4:45:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
        Validity
            Not Before: Mar 25 22:01:33 2026 GMT
            Not After : Mar 26 22:01:33 2026 GMT
        Subject: CN=51e7f8762021f04d3f81be82b28e0574a104aba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:0c:73:52:bd:c4:b5:d0:81:d7:d5:b3:2e:
                    15:3d:cc:03:d7:41:c3:35:cb:a4:5f:bf:9e:d3:0c:
                    18:85:46:a7:63:8b:18:d4:60:0d:e1:13:83:03:47:
                    6b:61:ea:6e:ca:a7:67:ce:9a:bb:1a:7e:52:3a:5c:
                    ca:99:ae:44:c9:c1:b4:d1:57:9c:bf:e6:72:2e:98:
                    2c:e4:eb:1e:e2:d4:52:91:e5:34:74:d7:c4:78:d3:
                    4c:37:eb:21:73:ae:1b:c8:38:3e:8d:d0:d3:98:c5:
                    f0:c0:f2:c5:14:1e:ae:9f:2a:d8:ac:a7:7f:f3:5c:
                    16:99:d4:6a:c2:4f:e9:b0:d5:e3:2a:1d:5b:10:9b:
                    68:0d:8a:80:f9:8d:d9:ee:cf:65:c7:fc:8e:8b:d0:
                    06:8e:05:14:dd:8a:99:e9:64:86:8e:fa:41:d5:74:
                    1a:2b:8f:d8:d6:db:23:b2:97:68:d7:aa:7d:e3:2f:
                    02:92:01:67:93:27:df:91:a0:b1:5c:c9:15:94:49:
                    f6:3f:7f:82:01:37:02:a6:a4:b6:48:ee:45:78:76:
                    69:50:2a:92:f8:3a:ec:e7:d6:c8:4d:e9:b3:9c:e8:
                    ba:41:c5:62:6c:4a:bf:59:64:66:b2:85:7d:30:c9:
                    77:ca:da:00:d5:10:d5:37:fd:9e:d8:64:79:7b:ea:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:F8:76:20:21:F0:4D:3F:81:BE:82:B2:8E:05:74:A1:04:AB:A3
            X509v3 Authority Key Identifier:
                keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:3b:11:75:f7:e9:20:d2:28:e3:77:85:50:95:6c:eb:4f:
         1a:f9:18:5a:1f:70:53:6a:74:c9:a8:d8:e5:70:80:1d:b3:e3:
         c3:74:a6:73:5f:56:9a:38:02:1d:00:5f:af:5f:1e:37:f2:e0:
         b2:af:6d:bb:32:9b:0f:2f:ea:05:05:92:2f:1a:64:c1:6c:3b:
         4f:42:82:68:41:e6:59:53:f5:31:55:6c:ac:eb:25:f5:9f:94:
         43:3e:8f:5b:e4:74:19:fc:fe:f1:0d:9a:34:23:7f:56:19:67:
         36:ad:e6:09:48:72:b2:7f:c8:58:8b:b2:c4:c0:48:e5:94:1d:
         86:6b:60:2a:3a:7f:57:ae:29:b0:92:a7:fa:80:e2:39:4e:97:
         a5:40:84:dc:3f:08:bb:1b:d8:b2:0e:98:ef:c9:a3:49:99:c5:
         e7:ef:9d:db:19:cd:84:7a:7a:82:58:fd:69:aa:c5:c4:ec:99:
         8b:c0:f5:fd:48:a2:f4:e0:f1:de:bd:6d:a2:78:9e:7b:23:ce:
         9b:36:ad:85:db:0e:13:87:99:d4:7f:8e:0e:15:04:a3:ff:e7:
         47:b6:fd:c5:ed:90:00:3a:d6:ae:0f:c2:c2:95:ba:df:bd:97:
         b1:a7:e4:48:78:14:66:40:07:5e:3a:e2:50:77:1b:8d:77:0c:
         b8:a8:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----