Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File:                     jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier:          UYgwEGgpp4hlETtGqRZ38qyFqFyBcyCJUV4QvjhLJ2k=
Subject key identifier:   44:74:3C:69:88:2F:18:38:7A:25:11:93:C0:22:68:A1:CE:12:B6:1B
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer:       /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial:       01974A7B907266F194E62C2FB2ACFA58AA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number:          1286
Signing time:             Sat 07 Jun 2025 13:01:41 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:41 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:41 +0000
Files and hashes:         1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: X6f5EAAp7kBr/cVvafJd+++UFZxPrVhxVvlJdO713IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:90:72:66:f1:94:e6:2c:2f:b2:ac:fa:58:aa:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
        Validity
            Not Before: Jun  7 13:01:41 2025 GMT
            Not After : Jun  8 13:01:41 2025 GMT
        Subject: CN=44743c69882f18387a251193c02268a1ce12b61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:5c:4e:2f:9e:29:df:10:7a:99:b6:36:e0:
                    5f:43:4b:83:c4:65:b1:e7:18:0a:53:1c:d6:af:50:
                    e9:ab:62:80:4f:bd:62:d9:3b:7c:9d:51:74:d6:ff:
                    31:74:20:97:50:60:19:ca:81:e5:71:a9:d4:e3:ab:
                    7a:74:94:2c:a5:fd:83:25:7a:49:39:bf:88:ec:39:
                    54:13:69:94:90:08:88:f4:f3:53:7c:e0:f0:56:3f:
                    db:77:cb:62:5f:c5:04:df:f1:5a:f9:d3:5b:89:ff:
                    56:f5:a3:5c:8c:cb:31:73:53:62:d6:8d:c8:30:58:
                    f1:1e:68:87:0e:08:0e:c6:59:00:cf:a5:dd:b1:b2:
                    35:13:a7:44:e7:2c:29:78:11:e0:c5:b1:54:a5:ab:
                    9d:1c:49:d4:95:eb:c1:48:ce:e4:e7:9f:51:42:36:
                    3e:f3:37:bb:f7:e9:3b:0f:64:fd:b6:e7:9e:72:ec:
                    da:93:b4:08:1d:ae:5b:25:82:e2:0b:db:bd:bc:c3:
                    1b:c5:e0:8c:10:5b:93:81:26:04:9e:28:97:c8:5d:
                    e5:33:92:6c:ab:ea:67:5d:ad:4d:9e:2c:56:e3:f2:
                    e5:fd:81:8b:3d:c9:2b:ca:42:3a:d8:b6:f4:63:e9:
                    99:be:62:c1:0b:d2:9f:d0:55:2c:81:ec:38:33:2d:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:3C:69:88:2F:18:38:7A:25:11:93:C0:22:68:A1:CE:12:B6:1B
            X509v3 Authority Key Identifier:
                keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:58:bb:d3:26:b3:13:28:d6:10:52:8a:f1:fd:20:5c:22:8d:
         c0:e9:79:14:c1:ee:61:8a:42:69:0d:96:f8:1f:37:3a:1c:2a:
         34:fe:d2:69:6a:cd:24:17:6c:95:22:57:ba:a7:09:b4:ac:39:
         50:67:f2:9c:15:b4:6d:51:f5:52:72:b3:b6:92:41:be:7a:51:
         e8:a7:79:70:1c:b3:51:37:d0:c3:00:3e:98:c4:0e:38:7f:cd:
         c9:01:d3:29:12:5b:4b:51:e5:d8:91:08:9c:95:9c:4e:4c:c7:
         14:de:98:97:da:f3:5d:38:66:7a:82:2b:73:73:fa:68:d2:af:
         d8:83:40:d1:50:8b:b3:a5:8b:a6:98:dd:03:ed:45:c6:fd:3a:
         ed:bc:9d:cd:ac:22:fc:21:d7:67:0b:7e:a2:09:e2:9b:fa:9d:
         7a:4f:b4:6e:bf:10:1e:92:f3:5c:01:8b:29:00:79:e2:7e:32:
         45:a8:0f:ea:85:67:81:d0:7c:96:31:99:e7:0c:f4:c1:e0:29:
         7f:83:d8:a3:4a:62:3d:c7:68:cd:08:5a:92:10:54:66:f1:41:
         f3:fd:7c:30:d5:b0:7a:c3:09:4d:4b:cf:f9:18:88:b3:90:1e:
         51:a4:d1:ad:79:17:c1:c6:aa:1a:7f:4e:0d:e2:b5:98:63:1f:
         87:b8:88:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe5ByZvGU5iwvsqz6WKp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMWY5MWE5ZWIzODlhMjY2ODllZjAzNzYzYTFkYmIwOWQ2
ODI1YmYwHhcNMjUwNjA3MTMwMTQxWhcNMjUwNjA4MTMwMTQxWjAzMTEwLwYDVQQD
Eyg0NDc0M2M2OTg4MmYxODM4N2EyNTExOTNjMDIyNjhhMWNlMTJiNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixNcTi+eKd8Qepm2NuBfQ0uDxGWx
5xgKUxzWr1Dpq2KAT71i2Tt8nVF01v8xdCCXUGAZyoHlcanU46t6dJQspf2DJXpJ
Ob+I7DlUE2mUkAiI9PNTfODwVj/bd8tiX8UE3/Fa+dNbif9W9aNcjMsxc1Ni1o3I
MFjxHmiHDggOxlkAz6XdsbI1E6dE5ywpeBHgxbFUpaudHEnUlevBSM7k559RQjY+
8ze79+k7D2T9tueecuzak7QIHa5bJYLiC9u9vMMbxeCMEFuTgSYEniiXyF3lM5Js
q+pnXa1NnixW4/Ll/YGLPckrykI62Lb0Y+mZvmLBC9Kf0FUsgew4My0xuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER0PGmILxg4eiURk8AiaKHOErYbMB8GA1UdIwQY
MBaAFI8fkanrOJomaJ7wN2Oh27CdaCW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvangtUnFlczRtaVpvbnZBM1k2SGJzSjFvSmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YjJiNmEtYjI4YS00NGRmLTkyMmQt
ZjU3ZmMxZmNkMzJlLzEvangtUnFlczRtaVpvbnZBM1k2SGJzSjFvSmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YjJiNmEtYjI4YS00NGRmLTkyMmQtZjU3ZmMxZmNkMzJl
LzEvangtUnFlczRtaVpvbnZBM1k2SGJzSjFvSmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIli70yaz
EyjWEFKK8f0gXCKNwOl5FMHuYYpCaQ2W+B83OhwqNP7SaWrNJBdslSJXuqcJtKw5
UGfynBW0bVH1UnKztpJBvnpR6Kd5cByzUTfQwwA+mMQOOH/NyQHTKRJbS1Hl2JEI
nJWcTkzHFN6Yl9rzXThmeoIrc3P6aNKv2INA0VCLs6WLppjdA+1Fxv067bydzawi
/CHXZwt+ognim/qdek+0br8QHpLzXAGLKQB54n4yRagP6oVngdB8ljGZ5wz0weAp
f4PYo0piPcdozQhakhBUZvFB8/18MNWwesMJTUvP+RiIs5AeUaTRrXkXwcaqGn9O
DeK1mGMfh7iIPw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:42 2025 by rpki-client