Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          FJFMo+Ot1evrLwaHeAPsCBXv3eSK+qL/EDliID02Yig=
Subject key identifier:   70:0E:6E:F5:20:87:A0:D0:15:A3:9E:97:48:D8:01:4F:BE:69:50:C6
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019CACB47A6935BB092BEA505830EDA9CA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          1216
Signing time:             Mon 02 Mar 2026 04:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:34 +0000
Files and hashes:         1: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (hash: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: g8H+kbMbKDz0u4HDjOg71iYgmWhntZKIEFaFkm1tVWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:7a:69:35:bb:09:2b:ea:50:58:30:ed:a9:ca:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Mar  2 04:00:34 2026 GMT
            Not After : Mar  3 04:00:34 2026 GMT
        Subject: CN=700e6ef52087a0d015a39e9748d8014fbe6950c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:73:38:1f:2e:aa:a0:c7:ee:1c:bd:70:1b:
                    b4:f4:89:e0:34:6a:ce:5f:c5:b2:d9:7c:97:01:4f:
                    67:61:6d:df:bf:83:a0:c7:d6:23:72:14:5b:fe:85:
                    7d:aa:46:ea:4d:54:f7:24:14:d7:83:52:bb:0b:a6:
                    70:a4:ce:fc:d9:c9:4b:5b:8d:a5:4f:32:a8:77:48:
                    ec:41:76:6c:90:f4:4f:25:99:dc:42:61:1b:bd:d7:
                    e6:66:59:01:93:bf:af:04:ec:cd:6c:c6:41:4f:06:
                    c9:9e:64:97:a8:f2:2b:ae:04:c1:26:57:b7:30:ca:
                    9f:47:df:a3:11:6c:25:b9:c1:a7:87:65:0d:47:c1:
                    e5:8b:27:c3:67:c2:a1:ea:d3:12:fa:bb:c4:54:08:
                    5f:fa:b8:85:27:02:57:0f:11:e3:5e:ee:d7:d6:89:
                    c2:b0:57:21:9e:e3:40:e6:40:ad:22:3c:d7:59:ab:
                    69:10:62:ce:c8:f5:b5:3f:2c:1d:2e:f2:92:89:92:
                    26:77:6a:36:fa:21:6f:1a:fb:6c:61:cc:39:87:6c:
                    ab:82:0d:28:c8:84:79:a0:a7:a2:be:b8:ae:f9:43:
                    b1:d6:d8:8f:d9:82:a8:66:c3:43:a7:95:15:1c:73:
                    72:f3:41:63:06:0d:77:94:b7:f2:a1:8a:d6:c5:19:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:6E:F5:20:87:A0:D0:15:A3:9E:97:48:D8:01:4F:BE:69:50:C6
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:57:be:3d:68:af:4d:93:b7:7c:ce:59:92:05:35:93:9d:4a:
         15:72:1c:2f:32:55:00:e3:c1:f1:65:e1:57:57:34:31:66:f1:
         f4:af:f6:17:ae:24:76:51:ca:08:44:ed:50:17:f3:a6:3f:7a:
         bf:81:8f:af:c7:7f:41:34:a0:59:1f:35:00:90:64:93:7e:6b:
         99:e4:c8:53:a1:c9:d4:08:73:ef:25:02:3a:1c:1d:5c:5b:6f:
         69:cf:dc:82:1f:be:36:62:96:48:8c:9d:91:bc:63:38:ae:0b:
         02:4a:f3:0b:25:b3:9a:c4:b8:d5:98:80:7e:54:3f:92:5e:e3:
         66:66:a5:f6:e9:b9:9b:50:33:90:1e:8d:c6:28:33:d7:c0:b2:
         e0:4b:a4:9c:e7:bd:95:61:20:a0:d6:24:a3:5e:f6:5e:f9:30:
         9d:b7:b0:85:6c:2b:4e:21:b0:89:e9:d5:c4:08:65:7d:0a:49:
         24:e8:28:c3:bc:35:b5:10:c5:b4:f2:48:5b:6c:a8:34:8f:4d:
         51:12:e9:3d:ef:41:a6:bf:b9:24:03:46:04:1e:74:7b:f8:18:
         53:d1:91:cd:50:ec:1c:ff:5b:0d:58:1d:50:f4:a5:73:e4:96:
         6c:8f:87:40:18:3d:0a:c9:bb:b0:06:41:ff:7c:97:f6:69:ff:
         d9:47:7c:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystHppNbsJK+pQWDDtqcpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOWY4OThjZjc1ZGFmNjgwMDA5M2YyNTY3YWFmNzJhYTk4
NmUyOWMwHhcNMjYwMzAyMDQwMDM0WhcNMjYwMzAzMDQwMDM0WjAzMTEwLwYDVQQD
Eyg3MDBlNmVmNTIwODdhMGQwMTVhMzllOTc0OGQ4MDE0ZmJlNjk1MGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpxzOB8uqqDH7hy9cBu09IngNGrO
X8Wy2XyXAU9nYW3fv4Ogx9YjchRb/oV9qkbqTVT3JBTXg1K7C6ZwpM782clLW42l
TzKod0jsQXZskPRPJZncQmEbvdfmZlkBk7+vBOzNbMZBTwbJnmSXqPIrrgTBJle3
MMqfR9+jEWwlucGnh2UNR8HliyfDZ8Kh6tMS+rvEVAhf+riFJwJXDxHjXu7X1onC
sFchnuNA5kCtIjzXWatpEGLOyPW1PywdLvKSiZImd2o2+iFvGvtsYcw5h2yrgg0o
yIR5oKeivriu+UOx1tiP2YKoZsNDp5UVHHNy80FjBg13lLfyoYrWxRnSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAObvUgh6DQFaOel0jYAU++aVDGMB8GA1UdIwQY
MBaAFI6fiYz3Xa9oAAk/JWeq9yqphuKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQt
YjNjZWM5ZDEwNjExLzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQtYjNjZWM5ZDEwNjEx
LzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Fe+PWiv
TZO3fM5ZkgU1k51KFXIcLzJVAOPB8WXhV1c0MWbx9K/2F64kdlHKCETtUBfzpj96
v4GPr8d/QTSgWR81AJBkk35rmeTIU6HJ1Ahz7yUCOhwdXFtvac/cgh++NmKWSIyd
kbxjOK4LAkrzCyWzmsS41ZiAflQ/kl7jZmal9um5m1AzkB6Nxigz18Cy4EuknOe9
lWEgoNYko172XvkwnbewhWwrTiGwienVxAhlfQpJJOgow7w1tRDFtPJIW2yoNI9N
URLpPe9Bpr+5JANGBB50e/gYU9GRzVDsHP9bDVgdUPSlc+SWbI+HQBg9Csm7sAZB
/3yX9mn/2Ud8lQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:19 2026 by rpki-client