Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File:                     CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier:          gEOQE6Y2FvxxYO/eJz+bE9P6RfOBdwu5Itkz/LtK0TQ=
Subject key identifier:   4C:56:F9:3E:A0:FA:37:67:55:03:F5:89:72:6C:C5:47:09:71:EE:66
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer:       /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial:       01A0C2201C13CD6035C45D82AD34A02828D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number:          0EFD
Signing time:             Mon 21 Sep 2026 04:01:19 +0000
Manifest this update:     Mon 21 Sep 2026 04:01:19 +0000
Manifest next update:     Tue 22 Sep 2026 04:01:19 +0000
Files and hashes:         1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: DxfL4tWDNd74NmFSVAnqOB7xjE6/QSh6eQl5eKCT+L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:20:1c:13:cd:60:35:c4:5d:82:ad:34:a0:28:28:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
        Validity
            Not Before: Sep 21 04:01:19 2026 GMT
            Not After : Sep 22 04:01:19 2026 GMT
        Subject: CN=4c56f93ea0fa37675503f589726cc5470971ee66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:06:c4:a5:c7:f2:a1:86:2a:03:8a:4c:b4:
                    3e:c2:73:e9:47:82:44:00:b3:1b:02:e6:ac:50:40:
                    40:46:b9:43:91:ce:30:7d:37:e8:4c:2a:5a:37:5d:
                    2e:48:63:be:1f:a9:29:26:d0:cd:c8:b9:dc:dc:be:
                    ba:a2:b0:0f:0d:5d:1b:22:93:83:1f:9a:f1:c5:7a:
                    f6:8d:4c:bc:f9:91:7f:78:5d:18:e4:bc:19:f7:1c:
                    e6:8b:c8:a6:73:69:87:bc:91:d2:5c:7b:6c:21:71:
                    da:ab:85:18:70:84:64:d7:b8:89:75:de:a2:64:d8:
                    94:79:31:5d:53:a7:cd:51:29:e3:41:90:d6:6c:d3:
                    70:6e:fb:81:5d:6b:fa:43:e2:17:bf:fd:10:ee:37:
                    d7:63:13:65:27:fd:42:db:c7:f4:84:fa:d5:4c:e6:
                    b1:1c:4b:15:40:6d:40:63:99:99:8d:a5:bb:a5:26:
                    18:a9:83:ce:57:44:7f:d4:41:5b:ee:07:04:ac:95:
                    52:cf:f7:15:2f:8d:7e:8f:3a:aa:d8:f2:54:75:a1:
                    b9:15:cf:fd:51:eb:f5:81:1a:42:4b:31:2d:2e:c6:
                    11:01:e1:d3:c8:16:c1:b9:a7:37:eb:4a:69:80:ce:
                    0f:8a:61:17:cb:47:fa:c6:2e:65:ff:16:0a:b3:be:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:56:F9:3E:A0:FA:37:67:55:03:F5:89:72:6C:C5:47:09:71:EE:66
            X509v3 Authority Key Identifier:
                keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:61:4a:91:8b:12:5f:fd:de:ae:6c:9e:7c:18:e4:ba:a8:
         39:6f:b9:7f:3b:b0:59:9d:c2:f1:d5:61:df:6c:ae:f2:70:8d:
         33:07:0f:1f:3d:20:c3:3c:4d:1b:21:dc:4f:ec:13:c9:51:1f:
         59:36:a4:62:3a:5d:32:84:c4:56:ff:13:34:e2:6e:49:62:91:
         24:9e:7e:eb:12:d1:4e:f5:5d:cc:61:d7:b7:28:37:dd:2e:97:
         3f:e3:e8:0e:bf:19:97:39:95:96:31:66:f6:8e:68:6a:94:a6:
         0e:89:72:0b:0f:0f:5e:6c:c0:81:bb:e0:b5:d9:fc:55:ee:4d:
         1d:a0:67:07:b0:b1:b1:91:97:a7:3f:9f:90:e9:78:8f:61:0d:
         20:e3:25:e9:ac:c4:a4:82:89:e1:e0:f1:e9:0e:25:c9:dc:f3:
         c8:3b:39:39:54:91:ff:4b:3e:62:8e:e1:5d:f3:41:d5:4c:f9:
         33:b1:f2:f5:52:14:e2:07:54:9e:7c:57:71:38:d5:52:5f:bc:
         c1:2d:8c:ee:3e:55:a8:3c:ad:41:ba:ae:f0:ce:27:92:02:fc:
         87:90:4b:ff:70:e7:60:93:9d:cd:6b:f7:82:75:00:0d:ed:88:
         65:49:ec:13:d0:45:f5:90:70:ff:38:5a:d3:76:1f:a6:7d:96:
         40:84:ce:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCIBwTzWA1xF2CrTSgKCjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI3ZmRjOTBmODBmODA5NzJjMTI1YmQ0MWVkYjBhZTgz
MzRhYTAwHhcNMjYwOTIxMDQwMTE5WhcNMjYwOTIyMDQwMTE5WjAzMTEwLwYDVQQD
Eyg0YzU2ZjkzZWEwZmEzNzY3NTUwM2Y1ODk3MjZjYzU0NzA5NzFlZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWAGxKXH8qGGKgOKTLQ+wnPpR4JE
ALMbAuasUEBARrlDkc4wfTfoTCpaN10uSGO+H6kpJtDNyLnc3L66orAPDV0bIpOD
H5rxxXr2jUy8+ZF/eF0Y5LwZ9xzmi8imc2mHvJHSXHtsIXHaq4UYcIRk17iJdd6i
ZNiUeTFdU6fNUSnjQZDWbNNwbvuBXWv6Q+IXv/0Q7jfXYxNlJ/1C28f0hPrVTOax
HEsVQG1AY5mZjaW7pSYYqYPOV0R/1EFb7gcErJVSz/cVL41+jzqq2PJUdaG5Fc/9
Uev1gRpCSzEtLsYRAeHTyBbBuac360ppgM4PimEXy0f6xi5l/xYKs77GrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExW+T6g+jdnVQP1iXJsxUcJce5mMB8GA1UdIwQY
MBaAFAjSf9yQ+A+AlywSW9Qe2wroM0qgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYt
OTEwNTQxMTU1ZmVmLzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYtOTEwNTQxMTU1ZmVm
LzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlx1hSpGL
El/93q5snnwY5LqoOW+5fzuwWZ3C8dVh32yu8nCNMwcPHz0gwzxNGyHcT+wTyVEf
WTakYjpdMoTEVv8TNOJuSWKRJJ5+6xLRTvVdzGHXtyg33S6XP+PoDr8ZlzmVljFm
9o5oapSmDolyCw8PXmzAgbvgtdn8Ve5NHaBnB7CxsZGXpz+fkOl4j2ENIOMl6azE
pIKJ4eDx6Q4lydzzyDs5OVSR/0s+Yo7hXfNB1Uz5M7Hy9VIU4gdUnnxXcTjVUl+8
wS2M7j5VqDytQbqu8M4nkgL8h5BL/3DnYJOdzWv3gnUADe2IZUnsE9BF9ZBw/zha
03Yfpn2WQITOuQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:31 2026 by rpki-client