Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          l2Qj6XjOljMU4VARPj/IXpaLRGZvL/9x+2beGZgLaeY=
Subject key identifier:   2B:FD:47:A6:02:E8:43:BD:64:F9:06:AE:77:E1:04:45:4A:44:CD:B9
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       019D37C01FE62B733772FF0CE524B47DCA5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:31 +0000
Files and hashes:         1: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: Gq1nO+TNsHSjElkKtvB46F7myGsTpSqP+RQESqgnsfw=)
                          2: sp__UWCgdxP7bzoqkk56wrdwFzY.roa (hash: x+RNqXskpD2D4AGv2+Sqx9lS+lyi0Cw+nu+2VioSmmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:1f:e6:2b:73:37:72:ff:0c:e5:24:b4:7d:ca:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Mar 29 04:00:31 2026 GMT
            Not After : Mar 30 04:00:31 2026 GMT
        Subject: CN=2bfd47a602e843bd64f906ae77e104454a44cdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:61:56:f7:80:11:87:1c:ce:52:c0:ff:c8:
                    51:2a:d0:50:18:fb:15:4a:fa:02:65:09:13:c7:ed:
                    75:c4:83:93:d7:b5:fb:a3:95:59:a2:71:35:a3:8e:
                    99:13:45:98:bf:e2:31:9e:b0:81:ed:c6:75:4a:c2:
                    69:05:19:2f:09:96:25:0a:21:13:53:e0:66:31:a6:
                    f7:da:62:85:65:40:51:ba:cc:95:c7:db:f2:85:5d:
                    d2:e1:6a:87:9e:6c:5c:c5:fb:84:b3:a2:5f:f3:bb:
                    36:19:47:57:77:8d:69:f2:aa:79:db:4e:d0:a4:e1:
                    6d:8e:93:9f:3f:6b:97:45:07:d7:14:37:cf:10:13:
                    f1:f3:27:f7:9b:81:19:c1:68:ca:af:2c:e4:74:5c:
                    71:0f:1d:34:a9:8e:fa:10:bc:7c:df:f5:81:6e:9c:
                    c7:ec:3d:da:3e:02:0b:4c:35:d8:e6:27:a2:cb:67:
                    48:e2:44:ca:a0:90:54:20:f1:30:36:17:17:f7:97:
                    d6:e7:15:ba:c2:d8:4b:d6:fe:6f:6c:09:49:56:83:
                    83:d3:3d:fb:71:59:16:da:31:15:d6:a7:52:fb:8f:
                    96:c4:33:14:59:5f:7d:ec:21:e3:4b:ba:af:81:ae:
                    55:40:42:68:24:d8:16:bb:de:9c:04:74:0b:5d:70:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:47:A6:02:E8:43:BD:64:F9:06:AE:77:E1:04:45:4A:44:CD:B9
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:bf:ec:42:ba:df:12:c4:2a:ae:07:c6:0f:b1:3c:dd:59:
         96:e2:b4:52:93:b3:a1:c9:f3:9b:8d:03:7f:b8:27:a0:1a:da:
         32:98:7d:37:d9:f2:8e:9f:e8:69:21:f7:ef:a2:69:26:7e:43:
         af:21:44:bc:06:d0:0a:b4:d2:a7:fd:b8:c5:b2:f1:aa:f6:60:
         da:a9:7f:10:71:f7:0c:b5:09:4e:3f:65:69:cf:71:68:76:b9:
         0a:d6:d5:5b:63:c0:df:e3:d4:27:55:fd:77:bd:6a:6f:27:a4:
         2f:27:f0:b5:04:f1:69:22:0b:94:f8:be:e3:57:e3:eb:8a:27:
         2f:cb:79:7f:ae:3d:e0:88:92:83:e0:57:a9:79:fa:15:c5:d0:
         0e:50:e3:bc:37:18:16:9f:9b:c5:fc:e2:79:88:e7:af:07:ca:
         c9:32:5c:5e:0e:fd:2a:8d:3c:74:29:a4:e2:42:ec:90:51:29:
         de:58:04:34:6e:63:f3:32:9a:95:50:22:05:7a:e2:a6:9f:44:
         59:c7:a5:dc:c4:65:6c:c6:1f:43:9a:3c:d4:e2:17:67:d6:45:
         0e:54:6b:a3:14:9b:55:7a:ea:1f:a9:cd:86:e1:c5:95:08:5e:
         54:bd:03:ae:cf:f5:35:04:6c:10:ef:02:ef:4d:30:1d:e9:e5:
         4a:58:12:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wB/mK3M3cv8M5SS0fcpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMmM3M2ZhMTcwYzNhYjllYzQzNGQxZjI5ZDNkYmRlNzky
MGJmODgwHhcNMjYwMzI5MDQwMDMxWhcNMjYwMzMwMDQwMDMxWjAzMTEwLwYDVQQD
EygyYmZkNDdhNjAyZTg0M2JkNjRmOTA2YWU3N2UxMDQ0NTRhNDRjZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx9hVveAEYcczlLA/8hRKtBQGPsV
SvoCZQkTx+11xIOT17X7o5VZonE1o46ZE0WYv+IxnrCB7cZ1SsJpBRkvCZYlCiET
U+BmMab32mKFZUBRusyVx9vyhV3S4WqHnmxcxfuEs6Jf87s2GUdXd41p8qp5207Q
pOFtjpOfP2uXRQfXFDfPEBPx8yf3m4EZwWjKryzkdFxxDx00qY76ELx83/WBbpzH
7D3aPgILTDXY5ieiy2dI4kTKoJBUIPEwNhcX95fW5xW6wthL1v5vbAlJVoOD0z37
cVkW2jEV1qdS+4+WxDMUWV997CHjS7qvga5VQEJoJNgWu96cBHQLXXAnmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv9R6YC6EO9ZPkGrnfhBEVKRM25MB8GA1UdIwQY
MBaAFI4sc/oXDDq57ENNHynT2955IL+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMt
ZmVlMTJiZmQzYmQxLzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMtZmVlMTJiZmQzYmQx
LzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecO/7EK6
3xLEKq4Hxg+xPN1ZluK0UpOzocnzm40Df7gnoBraMph9N9nyjp/oaSH376JpJn5D
ryFEvAbQCrTSp/24xbLxqvZg2ql/EHH3DLUJTj9lac9xaHa5CtbVW2PA3+PUJ1X9
d71qbyekLyfwtQTxaSILlPi+41fj64onL8t5f6494IiSg+BXqXn6FcXQDlDjvDcY
Fp+bxfzieYjnrwfKyTJcXg79Ko08dCmk4kLskFEp3lgENG5j8zKalVAiBXripp9E
Wcel3MRlbMYfQ5o81OIXZ9ZFDlRroxSbVXrqH6nNhuHFlQheVL0Drs/1NQRsEO8C
700wHenlSlgSjA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:00 2026 by rpki-client