Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          OUZeuuyG25alKctYC9xQ8JePhP94G+30bNm0h45i/FA=
Subject key identifier:   79:C7:91:40:94:C4:12:39:D5:04:5E:E4:7B:8A:00:34:A1:60:4F:B2
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       019CAAC60ECF14F733DEE890E45C12A51D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 19:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:32 +0000
Files and hashes:         1: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: wMmg7Kr7M64qGlRKGzfaH9PlWA7FPdSAqW63S4WnaCI=)
                          2: sp__UWCgdxP7bzoqkk56wrdwFzY.roa (hash: x+RNqXskpD2D4AGv2+Sqx9lS+lyi0Cw+nu+2VioSmmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:0e:cf:14:f7:33:de:e8:90:e4:5c:12:a5:1d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Mar  1 19:00:32 2026 GMT
            Not After : Mar  2 19:00:32 2026 GMT
        Subject: CN=79c7914094c41239d5045ee47b8a0034a1604fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:93:1f:ee:fd:d9:29:bd:78:27:65:65:3a:
                    b9:31:9e:86:8a:2e:df:6e:0c:ec:86:c9:b7:63:7b:
                    ca:3d:91:d5:0f:14:5a:01:6f:4d:de:f4:ad:31:da:
                    58:7d:10:8e:be:d0:86:18:d4:d9:81:65:66:b8:10:
                    7a:44:8f:6b:9b:09:a4:3b:9c:45:89:c7:0c:d7:05:
                    09:0c:4b:cb:fa:97:23:98:c2:2a:d4:a7:f6:45:45:
                    78:65:7d:88:35:6b:b3:00:43:98:67:41:07:d2:66:
                    cb:b1:6e:d6:f9:c5:e5:c0:ac:8f:fc:da:3c:c0:47:
                    ce:82:12:fc:85:00:5b:87:ff:43:72:ca:20:6a:fa:
                    97:ac:10:50:a6:2f:36:82:8d:e7:79:97:9a:ac:d0:
                    5f:32:1d:cc:54:1e:95:33:fc:d6:5e:63:26:59:d2:
                    63:9a:01:70:44:e8:65:4a:df:9c:04:68:93:1f:9c:
                    1b:21:6b:5b:1e:65:00:68:7c:1d:78:bd:9d:32:fc:
                    48:2f:55:83:27:aa:93:80:d5:80:aa:71:22:8b:60:
                    f0:54:84:5a:d2:ed:40:d7:cc:47:b2:da:e1:54:93:
                    b1:d9:a2:96:30:7d:21:5b:2f:de:88:c4:87:a2:74:
                    3f:25:3d:9d:fc:45:41:a2:de:65:b6:ce:15:01:35:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C7:91:40:94:C4:12:39:D5:04:5E:E4:7B:8A:00:34:A1:60:4F:B2
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:30:e7:94:42:ae:f9:55:25:d1:9f:3d:7e:36:98:54:7b:
         46:f7:cb:78:e1:2a:de:a5:93:9a:21:55:4c:2a:a0:a8:d8:de:
         e4:b5:2d:49:12:1a:cd:dd:8f:45:44:f1:d0:0e:7d:09:d7:16:
         83:73:56:f6:e0:fd:39:e4:c3:5f:f6:d2:65:32:f4:73:e8:a5:
         62:bb:b3:c4:80:14:7a:37:00:34:a6:02:fa:62:cf:3f:d4:ed:
         3b:8d:b5:1c:26:18:99:12:0e:60:a6:b2:78:cc:46:02:91:c7:
         23:f6:95:35:02:6f:26:f0:d5:8d:a0:30:9b:b8:d0:d4:d3:45:
         2e:50:6e:a5:4a:aa:5f:21:cb:6c:40:95:6a:c5:1c:57:17:72:
         41:d0:8f:74:68:df:93:fc:2f:fe:c3:77:2c:8f:29:2d:99:1d:
         84:94:ed:37:64:9f:e0:3e:3b:61:b8:47:f4:d7:11:c9:41:18:
         e3:7e:ee:6f:1f:a3:9a:35:19:22:83:db:2b:e6:0c:b4:e9:bb:
         e2:90:dc:64:0f:f6:6e:8f:5d:be:69:80:bc:65:c6:46:24:90:
         66:8b:2e:7b:b9:14:b3:30:23:d6:3c:c4:45:88:88:5b:13:7c:
         35:6b:01:52:b2:18:c9:35:9c:f9:9b:a2:c9:40:c7:a3:37:52:
         03:e7:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:58 2026 by rpki-client