Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          Qc8oTQOfuNfAIH+ofPAe+sb6p0FFok2PZIw5EgaQ9r0=
Subject key identifier:   10:73:BA:24:00:E7:7A:DC:77:40:29:F5:4D:B1:6F:6D:77:2B:27:15
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       0197BA7EC4FA8A165C62875B2D3F49CB9D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          15BA
Signing time:             Sun 29 Jun 2025 07:02:39 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:39 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:39 +0000
Files and hashes:         1: YcUFbLW8Ja687zOtqcOEs1JkusI.roa (hash: jVuy+dZTj6fKKPTMd+qmk6LWIWDCVPbDfAfYyWjJE2U=)
                          2: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: GEeHKVT0Z79YDcpPGupNQ5xN2jbQ1wWaGVsF2ZBCsGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:c4:fa:8a:16:5c:62:87:5b:2d:3f:49:cb:9d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Jun 29 07:02:39 2025 GMT
            Not After : Jun 30 07:02:39 2025 GMT
        Subject: CN=1073ba2400e77adc774029f54db16f6d772b2715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:f9:42:0a:95:17:eb:30:30:53:89:10:3c:
                    3f:b1:b9:ed:19:78:ee:a5:b9:9d:3e:e3:c1:f2:34:
                    ab:3e:47:ba:27:5f:9f:7c:b2:64:15:f9:20:80:73:
                    7a:85:2a:bd:8b:be:2a:41:7f:5c:e2:86:b0:76:58:
                    f2:de:6e:3c:9b:a9:5b:19:fe:80:bc:3e:5b:79:d1:
                    7c:0d:16:4f:25:24:ce:d8:dd:d2:14:f6:ba:44:88:
                    3d:b2:71:c9:d9:76:a3:c6:50:a7:88:1d:cd:f3:c9:
                    cc:55:ed:37:f0:1e:7d:37:eb:cf:54:4f:8e:b4:4b:
                    44:04:f3:a3:ea:7e:cf:51:bd:5a:58:cd:db:b4:07:
                    ee:3c:94:3e:a9:a5:9f:bc:2f:21:1f:78:2e:9c:8e:
                    83:67:8e:c1:27:c3:03:57:a0:be:48:65:96:f7:1a:
                    88:e3:be:82:4a:d3:cd:54:77:ad:68:77:20:e6:3d:
                    8f:b9:e4:7b:27:09:a0:54:53:94:b6:78:05:14:51:
                    38:eb:5a:7f:99:ed:91:ca:73:4d:0a:8c:45:b2:71:
                    a7:01:51:3b:b7:75:0a:c6:d3:ff:19:23:7c:86:09:
                    58:1d:b8:1e:6c:9c:fe:1d:9f:45:d7:ec:a5:c0:f7:
                    dd:2c:7a:eb:09:5e:71:d9:83:3c:92:d2:16:52:79:
                    92:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:BA:24:00:E7:7A:DC:77:40:29:F5:4D:B1:6F:6D:77:2B:27:15
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:55:4a:3d:33:02:ec:3b:87:2d:a9:3b:d4:2b:45:fc:38:fe:
         73:55:63:55:cb:49:98:23:ed:5f:7c:0a:ce:97:f8:63:48:60:
         4a:4d:f6:28:3e:96:56:14:b5:a6:87:33:56:e8:e5:3d:95:d2:
         9b:5d:7e:73:72:ef:91:5d:42:a0:93:15:12:de:d6:b2:26:be:
         8b:91:5b:ca:ff:08:56:d6:5a:8b:9c:43:2d:e3:ba:cb:d3:b0:
         e7:14:4d:99:85:05:6e:d6:3b:13:78:3a:c0:5b:17:17:7c:92:
         c8:2e:6c:c2:f1:d7:6a:bb:62:88:46:96:62:df:e2:43:78:b3:
         5b:6b:17:31:69:30:df:06:ac:7a:f8:4a:bc:b1:0e:d4:e7:00:
         76:9b:24:63:e4:85:58:a6:97:fb:9f:ce:cc:da:ae:ba:a8:4d:
         1f:ce:1b:4d:ee:1c:3c:7e:1e:d5:b8:bf:91:3d:27:1f:f8:27:
         37:f6:c4:6a:45:5d:94:7f:1e:29:27:50:ae:d1:19:24:a6:7e:
         ff:26:ab:31:6a:02:90:4f:d9:4b:2e:ae:3b:75:36:c9:90:84:
         2f:a1:ea:47:b1:cf:b9:cb:f0:82:d3:cf:3b:01:7a:7e:b0:3c:
         f8:3e:0c:18:c0:f0:57:50:d7:00:55:34:5a:5c:3a:69:3a:e0:
         a3:cd:6e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:26:11 2025 by rpki-client