Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          Nkn4fyeQQWMtsy0CP9gUttd6ICqBOTe+sX1+QEX8slg=
Subject key identifier:   89:E5:E2:AF:9F:95:F1:B1:88:8B:EA:7F:DD:C4:FF:83:A4:49:E6:9A
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       019A4EF4BA6EA2F409A8B57C1CB65C027A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 13:00:52 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:52 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:52 +0000
Files and hashes:         1: YcUFbLW8Ja687zOtqcOEs1JkusI.roa (hash: jVuy+dZTj6fKKPTMd+qmk6LWIWDCVPbDfAfYyWjJE2U=)
                          2: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: eNF09PxwA7dYkgAI2DVQDfIGc6j+ShiO3oUrpOtmhVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:ba:6e:a2:f4:09:a8:b5:7c:1c:b6:5c:02:7a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Nov  4 13:00:52 2025 GMT
            Not After : Nov  5 13:00:52 2025 GMT
        Subject: CN=89e5e2af9f95f1b1888bea7fddc4ff83a449e69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:c7:c0:5f:a9:4b:fc:66:db:26:0e:b5:d8:
                    6b:55:85:4a:3a:7d:2f:39:72:0b:4b:9d:c4:dc:9a:
                    bf:2c:e1:38:21:a8:42:b0:72:85:b8:3c:f1:44:80:
                    72:8f:06:ef:ee:a9:79:2d:0a:84:b2:21:ab:68:1b:
                    cf:3a:49:b0:b1:fb:2b:fc:41:12:50:0b:68:ec:52:
                    0b:4e:78:17:36:51:44:64:ad:96:03:6f:33:33:a2:
                    03:20:e1:c6:0f:08:78:74:ff:28:6e:4b:39:6b:ce:
                    05:fa:be:2c:56:23:30:c6:d2:29:f6:1b:35:23:5d:
                    fc:46:3e:18:7d:0f:52:f9:fb:fa:46:65:4e:59:11:
                    46:05:42:51:d1:9c:d9:38:f7:5b:a2:c3:d6:65:e3:
                    32:19:fd:3d:60:36:ad:13:62:ba:96:83:e1:ff:66:
                    af:81:b9:a6:ee:2c:d1:aa:b0:fa:a2:a5:c9:0e:6d:
                    86:ea:ff:9e:33:d5:59:d3:30:1a:87:d4:a8:35:9f:
                    7d:a0:76:26:a0:27:60:a0:3b:ea:bf:15:60:f1:be:
                    2d:5a:f1:d8:c7:fc:ae:63:97:80:f7:8e:dd:4f:63:
                    e0:7d:2d:0e:27:11:c3:5d:49:9d:84:ba:60:13:55:
                    cc:d7:08:2b:73:14:5d:6a:f6:af:2a:be:a5:e8:ab:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E5:E2:AF:9F:95:F1:B1:88:8B:EA:7F:DD:C4:FF:83:A4:49:E6:9A
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:44:9c:19:08:1a:c2:c5:c7:63:62:06:45:11:85:0f:6d:86:
         0c:69:b0:6e:b0:da:5a:48:95:bc:49:08:c9:22:7d:dd:9c:dc:
         2e:f6:13:ec:96:2c:4d:38:61:24:04:57:9c:11:f6:4b:ee:e4:
         c3:76:ca:3c:6e:40:be:be:1f:46:cc:a2:ab:55:b7:9b:8e:8f:
         db:fc:62:51:df:31:6c:f1:c1:17:a0:50:b0:9a:97:ae:0d:8f:
         f2:a2:e2:7a:48:26:5d:1f:95:c7:5b:d6:90:ab:90:a8:bf:f0:
         ad:b6:38:f8:2f:bd:38:fd:39:05:4e:59:f8:6f:8b:3f:2d:fc:
         9b:d6:fd:aa:70:5f:20:b6:ad:ba:39:9e:6b:b4:5c:1c:75:ff:
         7e:64:51:f7:f6:de:77:51:fe:f2:0f:0c:83:bb:20:dc:23:ba:
         ea:8a:ed:02:48:33:6d:72:2f:f8:7c:ff:3a:fa:b3:a8:94:be:
         5e:a8:53:99:e5:7b:e6:53:a6:4f:80:6f:56:9d:3f:df:ca:13:
         21:a1:92:e5:4e:8e:06:66:68:81:1a:85:60:39:34:8f:25:c2:
         52:dd:b6:21:4d:1d:40:78:74:6a:f5:b3:ad:5f:0d:5c:95:19:
         33:54:d6:60:85:47:54:c5:71:6f:04:14:b9:56:ea:fa:04:1a:
         aa:bc:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:16 2025 by rpki-client