Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          Qhvniw68XJquRnvm9lSsz6NHqcoFFrVsHXJtK3i4Lm4=
Subject key identifier:   4A:13:5E:12:3D:5F:22:7D:3A:28:CD:B6:6C:5D:9B:D2:5B:27:6D:76
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       019A0B5D14E4E893C5286386AA49D380E1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          16ED
Signing time:             Wed 22 Oct 2025 10:00:40 +0000
Manifest this update:     Wed 22 Oct 2025 10:00:40 +0000
Manifest next update:     Thu 23 Oct 2025 10:00:40 +0000
Files and hashes:         1: YcUFbLW8Ja687zOtqcOEs1JkusI.roa (hash: jVuy+dZTj6fKKPTMd+qmk6LWIWDCVPbDfAfYyWjJE2U=)
                          2: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: g6s8yXXlMb0CM3ekG/jH/pTYtnZt8o5OpAqbnC1ic14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0b:5d:14:e4:e8:93:c5:28:63:86:aa:49:d3:80:e1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Oct 22 10:00:40 2025 GMT
            Not After : Oct 23 10:00:40 2025 GMT
        Subject: CN=4a135e123d5f227d3a28cdb66c5d9bd25b276d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:4e:8f:6e:75:af:56:c4:53:42:fc:46:76:
                    69:15:10:22:d9:b3:4a:5c:bb:65:5a:44:57:78:b2:
                    76:c7:36:d1:6e:6f:12:62:77:db:82:1d:c9:89:15:
                    cc:d6:9d:d1:9f:cb:26:76:d4:58:42:23:2e:23:2e:
                    70:4f:ea:b6:94:d9:33:7c:55:bf:2f:82:ac:1f:ae:
                    27:3d:fb:2b:87:0f:5e:9b:8b:af:ae:01:bc:54:f2:
                    85:7c:52:6b:f0:ad:bf:9a:35:d2:b7:99:31:c0:97:
                    6d:36:ec:81:3f:dd:a9:06:d6:bc:44:6b:0b:19:d4:
                    fd:e6:82:51:40:e5:96:db:11:92:f4:55:62:ab:2f:
                    13:38:f0:b0:62:c6:10:33:f1:f5:ee:e7:5b:fa:f0:
                    bd:03:eb:50:d5:b1:e2:50:d5:9d:79:28:0a:89:6a:
                    58:96:fd:dd:1e:3e:2f:85:c3:cb:5f:ff:51:eb:b6:
                    da:74:37:07:7b:ac:7b:d7:5f:9f:70:24:9c:25:e6:
                    7c:6e:ff:4f:a5:55:6b:b1:8a:6f:65:6b:c2:fd:4b:
                    a6:d5:5d:39:8d:f2:f4:b6:47:14:7d:5c:4c:a2:4d:
                    85:4d:3c:15:7e:bb:59:30:b1:53:65:3e:81:9a:ac:
                    6e:fa:0c:e6:07:8f:7e:56:c0:cc:d1:d7:3a:26:de:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:5E:12:3D:5F:22:7D:3A:28:CD:B6:6C:5D:9B:D2:5B:27:6D:76
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:70:4d:6f:9e:b4:a4:bf:ac:cf:f8:5d:bd:fa:7d:4d:bd:c3:
         4f:2d:dc:80:f0:4c:d3:a6:6c:f0:fc:6a:00:c4:37:73:87:9f:
         a1:cd:fc:0e:a9:eb:e8:b6:bb:1e:14:0b:39:22:e9:da:30:ad:
         0a:29:35:ad:a0:a6:31:63:31:27:d9:35:56:b2:c7:d4:25:ad:
         85:ca:69:0a:7e:b3:c7:98:5b:b2:49:6e:2d:1e:78:7f:25:cf:
         6e:4d:f3:e2:c7:91:1f:2e:00:63:cc:37:32:ea:77:6f:46:85:
         03:40:fd:1a:f4:95:85:4c:4e:24:01:95:88:45:48:98:0b:cf:
         e7:c4:42:f3:57:67:0e:85:e8:2c:3a:53:fb:df:1f:c4:86:ab:
         91:93:53:53:20:ce:7f:91:6d:ae:97:14:bf:1d:a9:cb:c1:f9:
         9f:80:2c:38:49:c0:7a:39:0b:0f:f0:61:14:dc:7e:89:ec:81:
         6e:f5:8d:a0:1c:8e:25:3d:ad:5f:1d:8f:90:b2:53:c3:50:5c:
         bf:44:83:ed:8e:31:95:f3:bb:4d:38:d0:25:e1:83:45:f0:e3:
         60:5b:8d:43:67:80:f6:33:bd:01:d6:d3:7e:ea:ac:96:0c:6e:
         6d:09:6e:35:81:de:35:ea:e3:ef:38:a6:5d:15:1c:76:5d:39:
         9a:37:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:10:03 2025 by rpki-client