Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File:                     CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier:          KOn9Kk0kdWhoU663+al9F1jI71FLTYJMZp8AepS5Rps=
Subject key identifier:   9C:7C:53:D7:D7:77:70:F0:06:38:D2:7D:86:31:CD:01:B4:88:50:A4
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer:       /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial:       019F90FEF10A1A2D248F9DC75C75EBB14F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number:          0E5F
Signing time:             Thu 23 Jul 2026 22:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:54 +0000
Files and hashes:         1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: FxdcehjMjM3+mwm68JUv8Np/2axazP1ChSNcrCkhRUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:f1:0a:1a:2d:24:8f:9d:c7:5c:75:eb:b1:4f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
        Validity
            Not Before: Jul 23 22:00:54 2026 GMT
            Not After : Jul 24 22:00:54 2026 GMT
        Subject: CN=9c7c53d7d77770f00638d27d8631cd01b48850a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:1d:3e:84:27:ab:f2:e5:9f:46:ef:1e:ad:
                    1a:53:f7:f1:49:70:ac:6c:ca:a1:88:06:4a:b2:8c:
                    78:f8:dc:c3:59:1a:35:db:e4:31:49:65:0c:71:ee:
                    05:3e:77:61:eb:9b:31:50:3e:4e:3b:24:4a:de:b2:
                    fe:7e:92:a2:16:6c:0a:0a:bb:91:22:9f:a0:c7:4b:
                    4c:5a:ae:f0:5c:ac:5e:ff:be:68:fe:b0:63:d0:18:
                    57:c2:f6:77:5a:7c:03:bc:e1:be:cf:95:c1:fc:1e:
                    ca:d4:f8:71:88:a9:03:b4:53:3e:99:09:5e:84:19:
                    67:ca:38:7a:3f:2f:2a:52:a3:14:56:25:28:53:c0:
                    fd:35:eb:8e:02:00:50:a6:82:df:ac:17:40:af:d9:
                    4e:10:cb:8f:0d:2c:90:3c:d9:8d:5e:ff:51:7c:a8:
                    f7:e2:c5:f5:09:89:5a:53:99:3c:a8:c7:a8:de:34:
                    28:d5:0e:93:cf:3b:c2:f3:2a:44:43:35:86:27:91:
                    c8:e8:45:0c:01:cc:2c:ed:18:34:4d:3e:d9:2d:c0:
                    0b:86:06:04:dd:01:66:22:ff:89:07:7d:79:f8:d9:
                    e9:22:51:24:61:6a:64:0a:ea:54:3f:b7:84:39:f1:
                    27:53:9b:6c:8b:a5:60:fb:12:23:c2:77:2d:8f:35:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7C:53:D7:D7:77:70:F0:06:38:D2:7D:86:31:CD:01:B4:88:50:A4
            X509v3 Authority Key Identifier:
                keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:7e:c7:06:47:80:87:ca:fb:b6:31:86:4c:54:28:a4:60:41:
         d6:f5:ad:86:81:27:e9:54:c6:d8:62:35:37:ba:90:07:d4:38:
         fb:8d:47:d7:cf:03:51:42:f9:f3:ec:f6:4a:5b:39:85:f6:70:
         54:17:18:31:e4:c3:9c:80:0f:7f:4e:c9:83:e9:be:f1:ee:60:
         0c:f7:71:0d:b7:02:57:55:40:c2:b6:b4:ab:b8:bd:7c:3d:0c:
         1d:45:36:8f:9e:e8:28:ef:02:ad:f6:9d:7f:94:d9:79:7f:eb:
         47:85:c2:dc:85:b1:0a:97:ee:72:3f:4f:9d:a4:ed:ba:e6:61:
         59:66:50:37:52:d6:85:7f:97:f9:e7:8c:91:e7:cc:4e:d4:29:
         a1:f3:c0:f1:47:81:cf:b1:3c:7e:6c:64:7a:35:4f:11:23:e6:
         be:75:20:6f:59:ff:f4:cf:06:83:c6:b0:a0:e4:41:a3:ad:44:
         66:5b:2e:12:43:57:f6:7b:77:59:85:aa:10:0d:de:32:56:6c:
         b1:a7:cb:d4:19:4b:55:0d:19:77:98:96:6f:2a:e9:e1:ab:2f:
         8b:1a:1d:be:d8:e5:8f:f7:c5:26:29:43:4c:9c:ec:1a:dc:de:
         bb:a2:48:4c:30:3a:9c:53:1f:bb:21:92:84:e4:b2:3e:b5:7a:
         fa:2c:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:29 2026 by rpki-client