Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          pEm6IHT6rENS4QmzoYQPbRlkhisqDrZvshEAl6ro0sw=
Subject key identifier:   1F:94:48:FE:FA:58:E1:6C:D1:07:BA:96:C5:EB:CE:FC:A7:B4:B4:AB
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019CAEA367A2AEBA1BCD732FD827DF4A0D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          1217
Signing time:             Mon 02 Mar 2026 13:01:10 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:10 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:10 +0000
Files and hashes:         1: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (hash: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: s5rGMRotLnkVKs1PUPmbO6nKmijHpx9VvkNgw6Wiq0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:67:a2:ae:ba:1b:cd:73:2f:d8:27:df:4a:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Mar  2 13:01:10 2026 GMT
            Not After : Mar  3 13:01:10 2026 GMT
        Subject: CN=1f9448fefa58e16cd107ba96c5ebcefca7b4b4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:12:a3:a3:31:3f:b0:f4:13:ff:7d:47:98:
                    e9:00:4e:2b:73:24:ea:2e:52:49:de:3e:e4:28:4b:
                    8f:60:ee:5a:96:ef:4b:0a:9f:d2:49:24:f9:6c:c8:
                    fe:4f:cd:ac:28:3f:92:01:d9:fb:2d:ff:c4:d9:ca:
                    18:58:32:9f:92:bf:48:8f:04:5b:16:f3:12:81:ba:
                    26:53:8a:a0:62:df:6c:35:4d:ea:70:6d:db:1f:14:
                    6e:db:fa:20:5e:3c:e7:75:7a:1b:40:ca:e4:29:18:
                    71:13:58:93:aa:3e:87:bc:b2:17:30:8d:ea:41:de:
                    52:b4:70:3d:fd:68:42:b6:3e:84:a0:39:1f:67:49:
                    a6:2a:14:38:12:2e:42:79:b3:16:08:f3:38:c8:31:
                    1b:c7:8c:04:53:d0:29:3b:7d:5d:f6:c3:e6:c4:61:
                    e8:49:96:af:e1:d4:5c:1f:bd:50:7c:e7:56:42:82:
                    13:c8:8f:a1:35:5b:e9:6e:82:fe:43:9f:c6:45:fc:
                    ba:c2:20:a1:c9:3f:99:45:07:90:9e:5d:b5:cb:86:
                    2a:34:2d:15:cd:9a:60:97:c0:4d:05:34:d2:78:cc:
                    e4:a3:63:3b:9c:39:27:23:af:7f:ce:e8:72:84:55:
                    5e:f1:31:ab:89:60:f0:32:e6:04:c5:b9:02:c4:39:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:48:FE:FA:58:E1:6C:D1:07:BA:96:C5:EB:CE:FC:A7:B4:B4:AB
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:87:a3:54:df:3e:ef:74:09:87:aa:e2:40:69:88:f3:34:af:
         d1:52:27:3a:a5:78:52:d6:0c:32:e8:ca:fa:29:09:1a:2e:73:
         7e:b5:ce:23:5d:82:0d:27:2d:ff:f7:bf:5a:c0:89:b5:cf:a5:
         cb:32:61:4a:9d:00:0b:8a:5c:c7:43:70:10:46:e8:ba:be:36:
         68:7b:fc:ab:1e:f7:69:87:9b:17:e3:b3:5c:e5:8c:ff:b2:20:
         39:7a:3a:72:6f:2c:0d:ad:f2:c3:17:b9:6c:2a:25:7c:36:00:
         1e:d4:65:ac:31:61:be:42:c1:96:c9:59:5b:aa:3a:cc:84:c4:
         04:6f:d0:e8:2d:40:e2:7b:b1:ae:be:de:db:a3:9f:82:9b:44:
         f5:6c:cb:2d:44:87:e9:62:f5:f5:d1:0d:e5:b1:26:a7:db:9d:
         57:19:66:f9:69:17:ec:7b:ea:6d:c4:7f:2f:f4:ac:d5:51:4b:
         8c:9f:7f:2e:a8:bf:7c:0b:bf:7a:90:65:fc:28:74:3a:7e:7c:
         24:b4:12:ee:f6:82:0e:d5:c6:69:4a:cd:00:d4:b8:19:c3:68:
         f7:fc:6b:4f:ae:e5:e2:c7:e4:b6:5f:85:16:b4:c8:ad:63:fe:
         77:ed:1e:5a:29:c3:b4:46:0a:f4:0c:64:9c:cf:15:9c:68:55:
         af:ed:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:50 2026 by rpki-client