Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          GL03U0D0/EJFEz7NXetdXOHaqUjYYfEET9OlaCJf2Oc=
Subject key identifier:   13:51:1E:1C:89:6E:79:62:61:10:33:38:59:27:6F:67:E0:7B:CA:9F
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019745C275EDC39203BF3066D1FD20A7509B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          0F49
Signing time:             Fri 06 Jun 2025 15:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 15:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 15:01:01 +0000
Files and hashes:         1: A2VCepwS6QjlURI4CoEJ3b6rUYY.roa (hash: HY46ZmOTRPyDPxWp/aE8yepyzS9Dd83zC3fHytSEbfo=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: 8zrh7mVXech8xar45JwDp3Nf38DVdw4JVxRGv9EBrj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:75:ed:c3:92:03:bf:30:66:d1:fd:20:a7:50:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Jun  6 15:01:01 2025 GMT
            Not After : Jun  7 15:01:01 2025 GMT
        Subject: CN=13511e1c896e79626110333859276f67e07bca9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:19:99:02:93:d8:3c:71:90:ed:0d:b1:54:
                    74:51:6b:61:15:09:00:f1:3b:fe:ec:47:b6:a2:6e:
                    0a:5e:7b:3f:a9:eb:10:e5:d6:67:04:2a:2c:d3:0e:
                    3d:a3:8d:09:b2:50:47:c7:04:e2:0b:8b:fe:9d:94:
                    64:ed:d7:f8:ab:c5:70:f7:37:fc:89:09:f9:e9:8c:
                    9d:94:ee:be:02:32:26:57:8f:17:40:e0:9c:86:0c:
                    78:a7:f5:8a:08:48:40:33:39:e8:83:28:0b:3f:9e:
                    99:96:15:9b:2c:99:4c:bd:bd:dd:c8:80:7e:b7:2e:
                    ac:70:b1:30:e3:1a:9f:12:63:1b:c9:36:27:1c:fb:
                    60:45:68:7c:2d:e3:8e:5c:1d:04:d0:36:27:76:12:
                    25:45:6f:9c:e7:a0:70:e3:7f:b3:a7:0e:e5:e2:e5:
                    98:2d:84:9d:2d:85:66:59:94:79:26:1c:42:52:b7:
                    d4:b2:15:b1:81:4a:50:d8:56:3d:5f:ae:d2:2c:f8:
                    03:4f:b6:2a:17:5a:48:6c:5a:4f:d0:14:81:f4:8b:
                    03:8f:20:73:3e:76:21:09:21:06:81:f1:bd:68:24:
                    ee:8e:d8:a3:f7:a3:d7:c5:37:e5:57:24:1b:9c:93:
                    d5:e9:0d:67:53:24:9a:25:91:81:83:a2:05:e0:74:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:1E:1C:89:6E:79:62:61:10:33:38:59:27:6F:67:E0:7B:CA:9F
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:86:4e:b0:9d:36:e7:35:5d:df:83:97:40:5d:15:91:87:
         61:4f:5b:75:70:51:cc:39:88:bf:ce:51:14:cc:41:b4:6e:59:
         1a:ae:2c:f6:c8:06:20:24:68:2a:07:d6:05:6e:73:d4:6f:0d:
         a2:09:b8:79:ab:75:03:f4:e3:17:88:09:a7:5f:fe:69:90:fd:
         c2:55:29:f7:3c:95:d2:02:94:ef:e4:0d:88:55:7a:a7:4a:f8:
         4d:0d:b8:7d:0f:50:ca:40:c4:2a:91:b7:c8:2d:04:b3:23:7e:
         07:81:33:07:cc:8a:7c:6a:64:9c:c6:ad:4e:c3:fa:69:ee:99:
         07:b9:92:65:60:8c:19:6d:ec:40:ea:0b:5b:17:a2:92:72:ff:
         cc:fc:97:96:aa:07:3f:ec:cd:0b:9e:ab:ec:8c:85:bc:ee:6d:
         96:d7:12:4d:28:1b:91:19:e8:31:a2:56:fe:3a:66:47:ff:85:
         32:2a:f5:ad:94:ac:96:cd:bb:b8:da:47:7c:c4:5f:28:18:9e:
         22:5f:12:30:28:f5:f3:d0:02:41:4f:c8:13:0a:d7:e5:7e:7a:
         2c:da:3d:ac:3c:5c:51:c6:69:85:52:a4:d2:dd:0b:90:dc:31:
         fe:db:df:3a:7e:60:5b:9f:36:4e:fe:7a:5d:6e:a4:ff:0f:20:
         05:7c:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:42 2025 by rpki-client