Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          JvRT93oSHFyoG7kMHn4PEmaJoW3MDZ3EQtnhfVEJDnc=
Subject key identifier:   CE:13:CC:60:12:DD:56:64:5E:20:D2:A2:33:6B:62:4B:C4:A3:EC:74
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       019E32CF1C5965413B408F574E9649C751B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          12E0
Signing time:             Sat 16 May 2026 22:01:34 +0000
Manifest this update:     Sat 16 May 2026 22:01:34 +0000
Manifest next update:     Sun 17 May 2026 22:01:34 +0000
Files and hashes:         1: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (hash: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: XFvkcHzYn9uJ1/Nisk5/GncbtTBFtXDbGUHRSggnMAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:cf:1c:59:65:41:3b:40:8f:57:4e:96:49:c7:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: May 16 22:01:34 2026 GMT
            Not After : May 17 22:01:34 2026 GMT
        Subject: CN=ce13cc6012dd56645e20d2a2336b624bc4a3ec74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:29:aa:c3:12:d0:82:6a:d9:db:8c:14:5a:
                    db:61:35:76:86:8c:e4:53:9d:da:bd:86:68:58:1c:
                    d8:a9:98:cd:ab:0f:4f:57:f3:d0:76:1b:c8:24:f3:
                    95:9a:31:7d:85:e5:93:da:86:bd:38:42:b4:b0:6c:
                    70:d2:aa:4f:b6:61:83:f3:42:ce:36:6e:21:af:f6:
                    7f:a4:d0:6e:6a:a5:7a:8d:cd:20:20:95:27:d1:f1:
                    74:d0:c6:1d:d9:81:71:56:ca:6a:8c:7f:30:a6:32:
                    75:a5:5f:2b:d2:83:ff:70:87:f2:ab:5c:5b:f9:b6:
                    b6:84:32:f5:44:e1:2e:9f:a0:dc:94:b4:ad:9e:d2:
                    1d:22:ec:3e:74:e3:3b:2f:ec:27:d1:07:df:77:5b:
                    ec:30:c0:bc:de:d2:0e:f7:3b:c5:3b:0e:bf:f5:de:
                    8b:d7:b5:b7:23:71:b0:01:01:7a:ed:d2:19:91:24:
                    05:3e:dc:10:12:fa:f8:3a:d7:c8:e8:59:71:4f:ed:
                    3c:82:de:cb:d4:29:94:f4:be:61:d7:10:26:58:94:
                    28:6a:ef:a8:a4:3b:6c:8c:2f:28:90:9b:b0:03:97:
                    32:83:9c:37:7c:0e:e8:93:15:93:1a:3b:d5:b1:28:
                    d5:5a:ec:87:7c:42:af:9d:d1:2b:b1:41:d9:61:33:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:CC:60:12:DD:56:64:5E:20:D2:A2:33:6B:62:4B:C4:A3:EC:74
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:ca:0d:6a:09:a9:83:f6:6d:71:20:55:94:1e:80:98:80:
         61:28:1d:5c:fd:0f:c7:bd:7a:ae:d8:e0:29:5e:2b:54:44:b8:
         41:a9:25:20:3a:20:c4:e8:f2:09:5e:11:0b:c5:6a:12:48:e3:
         48:ae:4e:ee:ec:26:bf:3d:49:5a:b1:45:36:a2:a1:53:70:a3:
         23:bf:0a:d9:d2:5f:ca:6f:8e:44:36:e8:d1:02:13:9f:3d:02:
         0d:d8:fc:0a:53:63:5a:c6:ab:d5:9e:71:1d:96:08:50:8b:83:
         3b:3f:55:35:30:13:78:65:3c:b0:83:33:55:e5:d1:cb:b6:cb:
         59:2e:ad:d1:74:11:5a:99:66:43:e1:87:5a:87:4b:90:a9:f0:
         81:5e:c2:91:8d:a2:a0:db:a1:b8:a3:82:e5:83:38:9f:7e:b3:
         81:f6:06:30:7a:56:f4:62:a6:5d:95:13:88:f4:bf:c6:d5:e4:
         63:76:92:e2:a4:0b:ac:e7:37:16:84:41:11:e6:c0:5e:22:e5:
         00:2f:d3:b1:13:29:13:85:b0:02:79:ce:b5:c3:15:f7:21:97:
         dd:3a:74:63:d8:3c:58:c7:7f:7f:86:42:ca:5e:19:1f:87:9e:
         c0:1d:1f:de:1a:88:13:a1:cc:b6:7d:d2:f7:7d:25:32:2d:6f:
         2d:af:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:34 2026 by rpki-client