Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          j87CAFDsWPr8mDOksv1Eo8FBDMogD8BjLZSlG9dfSgE=
Subject key identifier:   DE:BD:21:B9:2F:B9:C9:6A:53:52:D6:47:D8:EB:56:4A:F0:FF:9F:8A
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019D9C2C8E88B5B35EBF978C0209084F6A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          1292
Signing time:             Fri 17 Apr 2026 16:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:58 +0000
Files and hashes:         1: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (hash: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: hJsAOSgHANVTubc9eqAnrhGCkX8SLf8CH9evD9J94hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:8e:88:b5:b3:5e:bf:97:8c:02:09:08:4f:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Apr 17 16:00:58 2026 GMT
            Not After : Apr 18 16:00:58 2026 GMT
        Subject: CN=debd21b92fb9c96a5352d647d8eb564af0ff9f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:73:70:3b:a7:12:e7:bd:d7:95:ad:ad:a1:
                    62:71:3c:f0:7d:9f:78:79:da:24:22:bf:d3:75:11:
                    21:a0:78:c9:4c:19:04:9f:5d:08:f6:36:95:82:a2:
                    1f:2d:99:3d:2b:8d:43:cc:aa:89:1e:90:3d:be:74:
                    45:f3:3b:bc:32:d3:db:24:2e:82:cd:16:c5:fc:41:
                    4f:05:97:8a:f9:d4:80:ff:43:c1:05:e6:d6:db:41:
                    34:3d:89:4b:8f:c2:0e:24:d5:f9:c4:9f:97:54:6c:
                    c9:88:ed:90:6b:12:cc:89:e5:e8:4b:6d:7f:35:57:
                    98:09:80:61:f5:77:1b:49:c9:bc:9f:d1:51:21:3f:
                    0f:c9:ac:da:65:d4:71:ae:47:81:ed:5f:18:a2:7c:
                    78:f6:75:36:2f:19:16:c1:b7:29:bf:ff:b5:bd:6c:
                    3e:38:01:7c:ae:a4:4b:b1:46:f1:47:c8:89:b5:e7:
                    31:3b:63:d8:cb:3a:41:ca:9b:78:1d:e9:25:91:7f:
                    27:59:e8:2a:b9:87:ef:e6:ce:a0:50:54:5a:0f:96:
                    fe:4b:f1:58:ce:39:da:1d:5f:f6:f5:d5:77:b0:58:
                    04:d9:6a:c1:6a:a8:aa:ca:88:2e:cc:b8:bc:92:2d:
                    3b:b5:3c:c4:45:ff:33:ed:68:c1:a9:26:b1:56:90:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BD:21:B9:2F:B9:C9:6A:53:52:D6:47:D8:EB:56:4A:F0:FF:9F:8A
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:80:18:d2:3b:c9:81:4b:f7:76:12:b0:9c:99:bb:86:8d:0a:
         5d:3e:57:c6:df:6d:d8:9e:1c:b1:7b:63:24:08:e4:f8:e5:83:
         62:9e:9a:44:ab:bb:56:28:a8:1a:b7:f9:be:d2:2a:dd:78:be:
         10:2a:d8:62:e5:1b:60:f1:b1:0e:02:16:d0:b2:e1:49:2f:0a:
         4a:dc:3d:d4:45:52:21:07:cb:13:61:9a:f9:c5:1b:9c:e7:21:
         13:eb:7f:8d:ed:51:de:dd:e2:c3:ac:43:f2:02:fb:6c:24:16:
         55:31:f0:d3:97:c9:05:cf:fc:8d:fb:3d:df:92:47:9a:28:86:
         8d:af:a4:4c:cc:b4:e6:9c:a6:bf:d4:60:6e:2a:4f:27:fa:3d:
         9e:96:17:6a:33:cf:59:25:c3:0a:6b:43:93:f1:54:6d:07:48:
         74:29:a8:a5:58:4a:3f:cc:4b:df:3f:6c:e6:7a:eb:c4:41:e0:
         01:ae:b1:d6:c3:a5:68:e2:17:3b:2a:d5:14:0f:6d:d2:d9:22:
         a4:fa:82:97:de:b5:25:b0:5f:66:d6:38:9b:ca:26:2b:4d:a3:
         c4:be:ab:20:59:c7:01:d0:4d:45:c4:2b:81:61:7f:dd:72:d1:
         0c:2e:f4:b2:29:d7:0d:01:64:8b:6f:b0:21:95:f3:25:dc:bc:
         65:59:14:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:18 2026 by rpki-client