Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          brHrbRWKsObYAP3hIIG0tl72DW/YzLgFRaHj92kEzjw=
Subject key identifier:   53:D7:CC:EA:8D:15:D7:E2:88:48:44:60:9A:4F:AA:F5:2E:FE:5B:12
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019A51F56CDE14B326EA841FF5A1DBEE697D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          10DD
Signing time:             Wed 05 Nov 2025 03:00:29 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:29 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:29 +0000
Files and hashes:         1: A2VCepwS6QjlURI4CoEJ3b6rUYY.roa (hash: HY46ZmOTRPyDPxWp/aE8yepyzS9Dd83zC3fHytSEbfo=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: 07hIciIJpqdfI3I4NL8pHk/FJs5ilhRXJa106w9hq3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:6c:de:14:b3:26:ea:84:1f:f5:a1:db:ee:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Nov  5 03:00:29 2025 GMT
            Not After : Nov  6 03:00:29 2025 GMT
        Subject: CN=53d7ccea8d15d7e2884844609a4faaf52efe5b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:68:54:5b:f7:1f:fb:12:1d:67:86:d7:85:
                    44:57:b6:82:47:0e:2d:a7:70:ae:10:8d:35:c9:a4:
                    83:7a:15:c6:83:82:19:f5:82:84:92:ee:f3:17:5a:
                    f1:27:94:f7:fa:83:81:d5:9d:80:ed:9a:dc:73:c6:
                    fa:dd:d6:22:77:78:84:6f:e8:c4:a2:07:01:6b:68:
                    1d:a8:1e:9e:08:36:89:7a:50:59:82:50:e1:08:07:
                    ba:da:16:3b:f0:2e:1a:72:ad:bb:55:da:eb:64:1b:
                    67:0d:a2:d7:49:0b:22:ee:01:33:ff:13:c7:bd:6a:
                    0d:93:ca:5a:54:fc:a2:76:21:0a:0f:5e:34:0a:d5:
                    cf:80:9f:5d:b6:03:77:d7:0d:8b:65:1a:b9:f4:a2:
                    4d:2c:81:49:38:d2:99:cc:ee:93:68:01:0f:74:c1:
                    67:fd:c4:38:ef:e1:87:ec:a4:2e:ef:a1:87:e7:f4:
                    2d:e1:d5:9d:8b:1b:0b:01:3c:6c:88:02:90:9a:45:
                    8d:61:4b:26:05:a6:85:64:e1:f8:5e:90:7c:7c:e1:
                    a0:f5:8b:6e:bd:78:24:44:e1:4b:58:71:97:a0:c2:
                    3d:ee:65:54:52:31:dc:c1:96:94:5f:9f:f4:ca:0a:
                    c3:ec:cd:ed:a4:05:4e:85:6f:72:86:ab:c7:cd:64:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D7:CC:EA:8D:15:D7:E2:88:48:44:60:9A:4F:AA:F5:2E:FE:5B:12
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:05:1e:ee:21:84:52:dd:ae:1c:bd:55:03:51:38:6a:e3:
         e2:80:88:ad:09:91:f4:3e:e2:42:21:2a:04:59:f5:50:2e:35:
         3e:32:b0:23:8b:81:d4:c9:de:d2:86:5b:12:12:18:60:e1:7f:
         90:e2:ea:3c:e0:ed:50:b3:df:bf:03:6f:65:79:47:0e:9e:fe:
         c0:d7:cf:49:7a:9a:e2:8a:6e:59:db:75:80:b1:fc:30:dc:5f:
         2a:72:62:b6:f0:20:59:17:a5:b2:a7:68:40:ff:76:63:3e:36:
         5b:7a:48:52:c6:0c:12:07:27:ea:9e:29:1f:e8:4c:57:f8:c1:
         42:08:06:a0:55:53:f2:b4:b5:61:58:1d:a3:1f:ad:ef:37:26:
         60:85:ca:4e:96:6c:b3:6b:d9:93:2a:e6:da:1e:27:bc:b8:d2:
         4f:a4:6d:f1:c8:99:fb:33:44:df:ca:f7:6c:8b:12:f2:0f:57:
         d6:84:51:f3:b2:12:8c:f3:df:1a:7b:93:8b:90:93:5d:13:09:
         9c:ba:32:5d:81:5f:b0:c4:45:3b:e1:0d:92:c3:72:98:8a:3c:
         82:ad:dd:ef:5a:13:9c:ce:7e:94:db:f9:01:69:2f:11:37:0c:
         ef:71:f7:98:a5:bb:39:57:6c:44:c2:10:9c:24:3b:26:ac:68:
         f8:2a:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:40:12 2025 by rpki-client