Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File:                     CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier:          ivtGeUVc2MPo0AfMFwCrafLCDyVBatHsDl10+TV4mKA=
Subject key identifier:   69:D6:EB:45:1A:2D:85:6B:77:F4:48:BC:A7:4F:09:A1:D0:C2:38:6A
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer:       /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial:       019FA82B19CFA3C5B5564765AD59F501F993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number:          0E6B
Signing time:             Tue 28 Jul 2026 10:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:24 +0000
Files and hashes:         1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: dk0p5o0G12jeGHb9x0+OLYTkNqvk4grCiXEY+KrrlqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:19:cf:a3:c5:b5:56:47:65:ad:59:f5:01:f9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
        Validity
            Not Before: Jul 28 10:00:24 2026 GMT
            Not After : Jul 29 10:00:24 2026 GMT
        Subject: CN=69d6eb451a2d856b77f448bca74f09a1d0c2386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:fa:99:06:7e:d9:d6:a6:4a:24:cd:2c:9c:
                    04:96:78:24:59:da:3c:b7:04:db:7e:52:21:74:57:
                    91:a7:7e:67:5e:c2:c6:8a:b1:1a:a6:cb:1a:d5:4a:
                    6b:cb:40:2a:62:73:39:cc:11:9e:66:83:fc:9d:2e:
                    dc:48:70:06:96:cf:8e:63:57:0b:7b:09:24:ea:ad:
                    94:2c:b4:bb:77:89:14:9c:82:e5:d7:63:56:be:0b:
                    5e:82:93:08:b4:60:14:e3:dd:78:cb:d3:d5:9b:f5:
                    5b:ea:b6:6b:ef:6e:f5:20:64:b5:5a:22:47:46:bd:
                    da:fd:1f:49:f1:38:32:52:10:c3:13:07:63:2f:d5:
                    67:8e:5c:20:4d:dc:32:0f:05:06:db:42:53:75:3e:
                    35:14:ae:06:f4:b2:cc:ee:b6:29:cd:82:cd:be:71:
                    40:cc:6b:59:7e:0d:a7:74:61:1c:88:52:61:8d:c7:
                    4e:1d:d8:8e:6e:36:50:8a:f4:0b:d9:7a:2c:8e:f2:
                    c9:2f:57:e4:74:e7:0f:a6:26:e7:40:b9:77:55:eb:
                    ac:86:02:0c:38:19:84:35:29:cb:02:f7:04:30:02:
                    5e:33:3f:4c:c3:dc:82:41:b9:78:6b:b9:a9:65:f6:
                    da:4f:94:dd:6a:75:60:50:b5:e0:07:43:95:be:95:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:EB:45:1A:2D:85:6B:77:F4:48:BC:A7:4F:09:A1:D0:C2:38:6A
            X509v3 Authority Key Identifier:
                keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:56:9e:19:00:8b:d1:ae:70:7b:13:ab:f0:b2:01:67:2c:
         ee:ec:31:b7:cb:8a:34:f0:3b:60:48:9d:7c:d9:43:93:d8:17:
         7a:12:a9:70:4c:93:01:0e:db:38:d4:5c:30:73:43:96:c1:e6:
         6a:18:d8:66:6a:9e:d8:c7:9c:1a:ae:a4:a5:f4:1c:15:db:6a:
         8c:86:08:18:ff:ed:5a:c1:ae:8d:8b:4d:56:05:5c:44:c6:8d:
         9b:b7:3f:94:af:5b:56:c0:e8:89:1c:be:b3:34:b4:61:b3:21:
         28:fe:4e:5a:60:c7:4a:cf:c5:05:27:2a:5c:c5:e9:6e:4b:4d:
         c0:63:e6:51:b0:9f:d7:e4:9d:85:e4:89:4a:17:04:75:7a:22:
         b6:01:23:e5:f1:d4:4d:e1:4c:e1:a5:36:cc:f2:20:ad:f0:48:
         be:7f:fa:93:1f:13:b4:f7:13:77:59:38:34:a4:3b:ed:89:68:
         d2:53:75:6f:1e:83:0f:eb:78:26:64:8a:1f:f6:3e:7e:38:39:
         5e:b3:da:0b:2a:6a:49:da:de:d7:00:b1:bc:01:e0:93:67:36:
         8a:34:64:dc:cb:8d:0e:57:78:fc:ee:06:08:68:65:03:e4:9b:
         07:97:2f:b4:7c:81:2e:a1:f6:11:5e:c4:8e:f6:34:13:ce:d2:
         6d:9f:fe:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKxnPo8W1VkdlrVn1AfmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI3ZmRjOTBmODBmODA5NzJjMTI1YmQ0MWVkYjBhZTgz
MzRhYTAwHhcNMjYwNzI4MTAwMDI0WhcNMjYwNzI5MTAwMDI0WjAzMTEwLwYDVQQD
Eyg2OWQ2ZWI0NTFhMmQ4NTZiNzdmNDQ4YmNhNzRmMDlhMWQwYzIzODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkf6mQZ+2damSiTNLJwElngkWdo8
twTbflIhdFeRp35nXsLGirEapssa1Upry0AqYnM5zBGeZoP8nS7cSHAGls+OY1cL
ewkk6q2ULLS7d4kUnILl12NWvgtegpMItGAU4914y9PVm/Vb6rZr7271IGS1WiJH
Rr3a/R9J8TgyUhDDEwdjL9VnjlwgTdwyDwUG20JTdT41FK4G9LLM7rYpzYLNvnFA
zGtZfg2ndGEciFJhjcdOHdiObjZQivQL2XosjvLJL1fkdOcPpibnQLl3VeushgIM
OBmENSnLAvcEMAJeMz9Mw9yCQbl4a7mpZfbaT5TdanVgULXgB0OVvpX6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnW60UaLYVrd/RIvKdPCaHQwjhqMB8GA1UdIwQY
MBaAFAjSf9yQ+A+AlywSW9Qe2wroM0qgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYt
OTEwNTQxMTU1ZmVmLzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYtOTEwNTQxMTU1ZmVm
LzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9pWnhkA
i9GucHsTq/CyAWcs7uwxt8uKNPA7YEidfNlDk9gXehKpcEyTAQ7bONRcMHNDlsHm
ahjYZmqe2MecGq6kpfQcFdtqjIYIGP/tWsGujYtNVgVcRMaNm7c/lK9bVsDoiRy+
szS0YbMhKP5OWmDHSs/FBScqXMXpbktNwGPmUbCf1+SdheSJShcEdXoitgEj5fHU
TeFM4aU2zPIgrfBIvn/6kx8TtPcTd1k4NKQ77Ylo0lN1bx6DD+t4JmSKH/Y+fjg5
XrPaCypqSdre1wCxvAHgk2c2ijRk3MuNDld4/O4GCGhlA+SbB5cvtHyBLqH2EV7E
jvY0E87SbZ/+JA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:30 2026 by rpki-client