Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          GVPUGe2PGWsGmU++Z3W+6vzxgNtBRtr3C21W8QNvOrw=
Subject key identifier:   AE:AE:77:31:B2:22:49:C1:4A:B0:0B:35:0C:F9:04:7B:13:0B:4C:69
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       019EA89B8CA1559C11EB8199DDB25AB233C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          1951
Signing time:             Mon 08 Jun 2026 19:00:26 +0000
Manifest this update:     Mon 08 Jun 2026 19:00:26 +0000
Manifest next update:     Tue 09 Jun 2026 19:00:26 +0000
Files and hashes:         1: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: 0YfOl4MLNMsWZJxOhOG/MntreQPgmHvevzsGCIaD8wQ=)
                          2: sp__UWCgdxP7bzoqkk56wrdwFzY.roa (hash: x+RNqXskpD2D4AGv2+Sqx9lS+lyi0Cw+nu+2VioSmmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:a8:9b:8c:a1:55:9c:11:eb:81:99:dd:b2:5a:b2:33:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Jun  8 19:00:26 2026 GMT
            Not After : Jun  9 19:00:26 2026 GMT
        Subject: CN=aeae7731b22249c14ab00b350cf9047b130b4c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:73:92:79:bd:c0:6e:90:26:8c:54:d5:91:79:
                    c7:ec:49:8e:3e:be:46:2f:4a:44:97:45:bd:6a:6d:
                    91:b2:f1:0c:5b:4a:45:a4:f3:7d:6f:0b:b4:f6:9d:
                    6a:8f:90:76:30:d4:99:b6:f9:a7:f2:26:06:df:6d:
                    7b:9f:2a:ae:dc:4b:9e:5c:b0:a4:4f:cd:42:03:9a:
                    fa:a7:d8:27:1b:bc:8e:94:b1:bc:33:b3:3d:ef:0e:
                    8c:11:17:a7:81:32:60:71:61:97:e2:88:bc:ba:e8:
                    87:25:89:21:ed:41:af:f4:28:1e:a5:21:34:e5:69:
                    df:10:52:93:c8:0c:78:58:e0:56:c3:c0:f5:0f:df:
                    bd:24:db:e5:e8:6c:09:e7:ff:50:7a:7b:11:51:bc:
                    13:a5:a6:08:33:c3:a1:d3:f5:98:00:fe:f2:af:b4:
                    90:25:38:5d:84:6e:ed:2d:b5:49:8f:fd:c2:25:a9:
                    57:66:16:8a:cf:ba:a2:9f:03:d7:e3:79:ad:e0:34:
                    46:23:d5:38:dd:cd:42:ae:ad:c9:d5:c9:26:ab:95:
                    31:24:7d:67:e0:b7:c4:5a:bc:9d:8c:3b:d9:ad:ba:
                    4e:d0:79:be:fc:d1:74:ed:2d:2c:af:f8:a2:14:07:
                    a1:a6:bb:55:bc:80:d6:58:f0:6b:c1:f4:60:ec:53:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AE:77:31:B2:22:49:C1:4A:B0:0B:35:0C:F9:04:7B:13:0B:4C:69
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:20:1c:88:3e:56:56:f5:fc:86:c9:41:e1:8d:38:e4:1e:96:
         6f:d5:d9:f9:01:98:bd:31:a9:0c:ab:65:f6:df:a1:06:bb:59:
         24:72:9a:9c:c8:ba:86:20:fc:b0:5d:0f:74:09:08:36:90:3e:
         e9:30:f1:a9:26:e3:4d:37:e7:8b:a7:d3:c9:f5:ee:46:c9:da:
         90:5e:f5:35:c7:09:27:1c:76:fe:4d:09:5a:70:11:d3:bb:a2:
         c1:79:4a:97:2f:08:bc:ea:e1:40:03:c1:d5:a9:d7:20:9a:1f:
         23:77:4b:76:48:22:e4:02:99:ac:89:3c:4b:a4:bf:3e:bb:2a:
         8a:4b:4e:3a:22:d9:79:5a:d9:47:ac:2f:38:5c:0c:70:55:78:
         1b:36:48:f3:dc:6b:61:62:81:0e:7c:83:75:08:aa:a3:d8:89:
         74:17:4a:a2:8e:e9:bc:a0:0a:33:07:a7:9a:04:b2:6f:a3:c5:
         09:b4:0c:db:87:89:b2:11:83:22:56:e7:92:2f:59:46:d2:68:
         3a:6a:6b:f0:bc:f1:22:9c:b1:54:c0:23:6d:76:33:d1:22:58:
         72:dd:59:24:10:2d:a6:c4:b3:f0:59:e8:70:82:63:91:b1:ec:
         a9:0b:28:b9:9a:d7:27:64:a5:f2:12:32:0e:90:6d:96:2b:1d:
         1a:0d:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:25:33 2026 by rpki-client