Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File:                     jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier:          LVMa+kUis+WIWWIj8cz4q4SgXphiAXlebIWAPjFs0X0=
Subject key identifier:   4E:CD:A9:64:EE:AA:2B:94:B6:D9:7E:DE:FE:B2:03:3D:E1:F6:DA:59
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer:       /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial:       019923A0D9A3150B0958128620532C504DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number:          137B
Signing time:             Sun 07 Sep 2025 10:02:47 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:47 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:47 +0000
Files and hashes:         1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: 4dwuoiYodmgAXtHYGnreyNz9sMkfC2jyceQXSOsUSjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:d9:a3:15:0b:09:58:12:86:20:53:2c:50:4d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
        Validity
            Not Before: Sep  7 10:02:47 2025 GMT
            Not After : Sep  8 10:02:47 2025 GMT
        Subject: CN=4ecda964eeaa2b94b6d97edefeb2033de1f6da59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:b5:ab:20:ce:7e:6d:0f:af:c2:1b:dd:34:
                    74:37:1e:93:2e:e1:da:b2:ae:04:36:cb:ee:54:a1:
                    e7:0a:40:a2:fa:94:6e:93:37:61:58:61:46:20:ae:
                    74:cb:eb:98:00:a8:99:3f:a2:11:69:f6:b4:59:20:
                    c9:0e:44:cf:81:20:a7:b2:d1:4c:5d:52:ed:31:bd:
                    50:36:e3:52:63:b9:13:9d:6a:76:a1:df:12:31:50:
                    44:53:51:e6:f8:0c:d5:5d:f0:ca:d4:e0:42:8d:e8:
                    8d:7b:c5:39:77:41:ae:3e:76:ed:e6:cd:1c:9d:e8:
                    0a:14:af:71:d1:6f:96:1e:b4:6a:83:97:31:79:d5:
                    33:73:cc:d4:5c:f4:05:b9:74:28:e1:22:13:5d:9a:
                    d3:d1:58:7a:63:fa:7f:f2:ea:80:1d:6d:81:60:d7:
                    23:ab:82:d4:8a:26:f5:32:4b:51:a7:34:df:df:cb:
                    b2:c8:2e:99:4b:2e:51:48:8e:88:ba:41:07:27:bd:
                    56:e3:11:57:98:b2:0d:57:df:6c:d1:00:79:a4:e2:
                    e5:cb:26:26:fb:06:b7:b4:90:ac:f3:bf:d2:ea:8c:
                    f2:a8:52:7f:44:4d:de:a2:d8:d6:fd:76:94:90:aa:
                    56:91:98:a6:9f:45:b5:8f:ee:3a:97:c0:0b:7c:40:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:A9:64:EE:AA:2B:94:B6:D9:7E:DE:FE:B2:03:3D:E1:F6:DA:59
            X509v3 Authority Key Identifier:
                keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:75:64:15:c1:70:4e:19:63:a3:65:c0:bc:a4:39:ca:f0:
         e3:32:83:f7:da:33:b2:82:0f:75:26:83:a9:95:ae:92:79:23:
         1b:d6:b5:32:12:34:5e:49:fd:2b:6b:0b:69:56:a7:5c:ba:30:
         b6:2b:f5:db:39:10:18:49:91:5a:c9:95:23:6b:13:17:eb:e6:
         8a:f6:a4:b2:60:b8:21:29:4d:21:0a:a6:92:13:2b:89:19:00:
         52:75:63:05:76:3b:00:65:e1:ac:50:18:43:e9:42:b8:bd:5c:
         02:f6:a3:98:ac:3b:ec:60:b9:bc:ce:85:35:d2:f5:37:cb:33:
         8f:7d:b5:ae:b4:6c:b8:a0:01:4e:87:9c:1b:c1:e8:0c:f1:93:
         c9:b1:9e:be:5e:d1:05:02:35:42:ca:57:a9:7e:1d:c8:44:df:
         4f:7f:6a:9d:45:95:06:65:a7:8c:b9:95:b2:dc:ea:3c:ee:2c:
         6a:d3:06:d0:f9:9a:f8:c6:d1:fe:7e:12:da:13:08:1a:22:13:
         81:f1:48:75:a8:d0:26:a4:ea:ef:4b:da:77:d0:08:7d:73:08:
         b5:8a:a8:f4:4b:97:97:1f:39:8a:28:52:26:fd:6e:fa:91:bc:
         05:a8:88:34:a0:12:c0:c7:0b:10:50:3f:8a:7d:b9:a4:55:4b:
         3a:ae:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:07 2025 by rpki-client