Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File:                     jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier:          5w+dy2GC80wbKtvO9TjBfaNULqztqHVio+4GAMdA09E=
Subject key identifier:   0E:08:5C:B3:2D:53:75:F2:93:D7:AA:12:7A:6C:40:67:CD:DA:38:BD
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer:       /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial:       019CAB6B38CE4628AEAF1CA1DF6807251E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number:          154F
Signing time:             Sun 01 Mar 2026 22:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:56 +0000
Files and hashes:         1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: OB486NumwnKho8b9lEi4o08Utfu4uslnXUWgUhdUhas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:38:ce:46:28:ae:af:1c:a1:df:68:07:25:1e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
        Validity
            Not Before: Mar  1 22:00:56 2026 GMT
            Not After : Mar  2 22:00:56 2026 GMT
        Subject: CN=0e085cb32d5375f293d7aa127a6c4067cdda38bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:b5:b8:0f:d8:ff:e2:4c:d8:b1:2e:57:32:
                    52:11:3c:9f:08:8a:48:db:b0:19:2a:01:dd:3d:59:
                    8c:6a:01:25:38:a5:2e:ab:45:4c:b4:60:44:95:98:
                    3b:e1:eb:a1:8d:d4:d7:ae:12:87:ad:ab:a1:f9:48:
                    94:54:49:fe:5e:da:f9:99:a0:e2:f2:3e:ca:12:90:
                    d9:53:34:21:34:58:2a:a3:e2:df:5d:7c:11:9a:f6:
                    10:48:92:6c:63:3b:3e:ac:7e:3f:99:b0:d7:61:e0:
                    90:22:66:bd:e6:a4:f8:95:d2:c7:a8:b8:db:65:da:
                    3c:06:97:a9:85:30:34:5d:94:f4:ae:87:a7:a2:f6:
                    bf:02:cd:05:fe:f2:62:58:a0:d6:74:b3:c7:fa:ac:
                    a9:b2:99:fe:42:67:d0:3a:20:f2:c9:48:35:fa:00:
                    b8:6d:c0:5e:20:3e:bb:01:c0:fe:e0:80:39:f5:ed:
                    9d:87:10:32:c0:10:9f:bf:8a:f9:39:74:c3:b5:0f:
                    d9:97:12:b9:86:ba:a8:5c:a7:ca:26:61:90:87:80:
                    16:bb:f7:68:81:9d:78:bc:f5:ba:80:33:36:93:00:
                    8a:d3:ba:8d:a9:9a:16:a7:44:b4:b9:25:1a:32:7a:
                    ea:ee:1e:66:81:bb:38:ff:5a:31:e0:a8:76:bb:d9:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:5C:B3:2D:53:75:F2:93:D7:AA:12:7A:6C:40:67:CD:DA:38:BD
            X509v3 Authority Key Identifier:
                keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:dd:e2:6a:7c:7c:42:a6:46:2c:41:03:5e:af:9f:5c:d7:
         b0:47:66:05:4e:95:f9:a1:14:57:4c:98:f1:4d:38:9c:7b:1e:
         1c:86:42:9e:34:1a:46:14:c6:d5:ff:33:07:48:7a:d0:da:37:
         3e:ec:40:b2:a1:c2:fb:88:7c:0b:48:0f:71:dc:c3:ac:33:4f:
         f1:27:91:97:5f:02:6c:68:db:04:03:3c:2e:21:96:09:58:ea:
         fc:5c:2c:be:99:53:5e:40:60:de:1b:6c:55:c1:ab:bc:45:2b:
         fc:42:ae:62:a8:6e:ca:04:b0:9d:4b:02:01:c9:0a:a3:76:b7:
         4c:01:6b:bd:d9:27:8a:25:e0:4c:5b:bc:eb:3f:2b:c0:e8:a1:
         aa:1e:7d:5a:d8:97:f0:ca:a2:f6:fb:21:ad:23:ee:1e:85:aa:
         6c:a2:d9:04:f2:b0:bb:6f:b1:a9:86:aa:fa:d3:54:2e:0b:c0:
         2a:d7:16:3e:34:b0:8c:d4:9e:05:93:b1:92:fa:4f:28:c8:6a:
         ba:00:91:60:b7:be:ee:87:20:69:a0:26:99:5d:8f:81:b7:17:
         5a:cb:6f:b2:9c:0a:c6:a5:65:72:be:fe:62:42:85:67:9c:b5:
         a9:8f:e5:c2:b1:45:66:69:21:7c:e2:ce:a1:ab:f6:75:74:c0:
         03:cb:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:34 2026 by rpki-client