Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File:                     jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier:          1IO7TaFZfa7eCKAKrIeFbjhBF6hdxCCnbZatFHbpJQc=
Subject key identifier:   B4:57:3D:AA:AA:60:E3:B7:84:45:B7:D3:CC:CD:05:C8:0E:F2:77:25
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer:       /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial:       0198D65F5FB4C5603600815BF6DA87296655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number:          1353
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: H4yZXieM9qk6qswTZMwqXbTHHyeX72VThfVvSSD+MJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:5f:b4:c5:60:36:00:81:5b:f6:da:87:29:66:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=b4573daaaa60e3b78445b7d3cccd05c80ef27725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:99:a8:67:e6:f5:1d:df:22:20:e4:c6:df:
                    be:6f:48:53:8f:9b:87:db:c5:0c:5e:0b:cc:96:e6:
                    a8:4a:7c:93:e8:86:ec:cc:68:eb:6c:8a:3b:f9:d0:
                    13:30:bf:02:71:97:b0:46:d6:5b:c7:7d:88:84:4f:
                    32:ef:31:44:2b:93:12:3e:35:bf:ed:11:8d:99:e4:
                    81:99:6e:a4:cd:8a:f9:13:d7:eb:1a:89:c0:5f:aa:
                    18:f1:6e:87:98:18:79:dd:11:5c:c9:65:72:f2:b6:
                    5c:04:36:eb:ba:c2:45:17:23:e8:27:bd:10:ac:00:
                    cb:36:11:73:fc:95:33:0a:71:1d:60:6b:45:c5:97:
                    51:6b:6c:12:86:ed:fb:ec:94:da:9c:c1:f7:33:4e:
                    26:58:9d:0f:d5:fe:c1:d4:94:b8:d6:54:b9:1d:28:
                    af:ce:f8:8e:86:41:02:ce:47:9f:7b:82:d3:d1:08:
                    78:fc:99:e7:b4:d1:91:7a:60:19:01:14:32:b6:03:
                    01:67:06:3d:f1:a2:b0:5b:8c:02:f5:aa:87:21:ff:
                    a0:fc:53:db:ec:40:37:3b:57:86:4e:af:2d:0f:ca:
                    83:f2:d1:fb:fa:e9:32:b4:8f:7d:e0:99:cc:a2:7e:
                    ed:be:96:7c:de:24:4a:8f:30:63:f1:31:f3:f3:90:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:57:3D:AA:AA:60:E3:B7:84:45:B7:D3:CC:CD:05:C8:0E:F2:77:25
            X509v3 Authority Key Identifier:
                keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:84:b9:43:2c:4d:1e:f2:9f:b4:e5:e5:83:eb:50:5b:88:
         2c:9e:1a:41:9b:b0:45:33:4d:22:be:1f:87:a2:8e:78:73:d9:
         4d:8d:1f:62:52:ff:a5:da:eb:e6:ba:a2:46:14:81:49:f4:bc:
         0c:17:68:03:c2:8f:01:e8:01:10:49:c4:2b:50:d3:3e:75:a9:
         8b:a7:41:e4:95:92:f7:b4:cf:64:85:32:03:ad:54:a1:92:64:
         36:f6:aa:f1:35:b3:6d:36:fa:cc:e4:bc:0f:f5:cb:de:c1:f7:
         7a:cf:1e:d7:49:61:df:c9:fd:db:7c:08:6f:67:64:32:9d:91:
         c1:8b:8f:47:80:88:48:40:b0:37:17:1b:26:d1:88:93:dc:8b:
         ce:dd:47:99:c6:fb:d7:47:81:55:79:a5:f0:da:a1:5c:75:76:
         a4:44:31:88:a2:6e:34:6d:c5:3b:eb:ab:87:5f:aa:bf:48:d5:
         8d:82:c1:8e:ed:3d:81:28:23:f9:d0:38:a5:d8:4c:d2:07:bf:
         ef:06:35:f6:20:67:b7:92:f5:06:5a:e8:2a:12:d7:73:01:d7:
         57:08:57:63:85:bc:ed:ca:c4:bf:31:85:64:fe:e1:ba:5a:21:
         01:55:cd:e5:6a:ec:83:db:82:64:04:6e:38:7b:94:09:91:c4:
         1d:99:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:26 2025 by rpki-client