Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
File:                     jp-JjPddr2gACT8lZ6r3KqmG4pw.mft (raw, json)
Hash identifier:          2eVkqblUsFgzS04Dz7M/6OTMaRm/8WQKpMc4Ryco6OM=
Subject key identifier:   34:FA:D5:95:17:9B:AE:2F:95:B7:9C:B5:29:71:C5:EE:2E:0C:F5:EF
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Certificate issuer:       /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial:       01A188650DC39C4D15A721CEF9689D4C8A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
Manifest number:          149A
Signing time:             Thu 29 Oct 2026 16:01:26 +0000
Manifest this update:     Thu 29 Oct 2026 16:01:26 +0000
Manifest next update:     Fri 30 Oct 2026 16:01:26 +0000
Files and hashes:         1: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (hash: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w=)
                          2: jp-JjPddr2gACT8lZ6r3KqmG4pw.crl (hash: +TVMDsLwYS5Y+zB+meeR6ixPndBiV0+f8R8eos8oKEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:88:65:0d:c3:9c:4d:15:a7:21:ce:f9:68:9d:4c:8a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
        Validity
            Not Before: Oct 29 16:01:26 2026 GMT
            Not After : Oct 30 16:01:26 2026 GMT
        Subject: CN=34fad595179bae2f95b79cb52971c5ee2e0cf5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:ce:89:41:5e:97:dc:da:b2:d2:40:fa:31:
                    a9:dc:72:39:58:14:49:54:5c:4e:f5:bc:40:02:fb:
                    ef:f2:a4:f4:4f:a9:cc:eb:d6:55:d2:f4:e6:19:b6:
                    66:4d:cf:1b:20:07:8e:f6:2f:1d:9a:c1:4f:51:61:
                    87:6b:4c:8e:e3:f8:2c:a9:0f:b4:19:86:40:41:2a:
                    4e:e8:d4:5e:52:98:9c:58:1d:54:ab:a9:9a:d9:a4:
                    29:8b:f0:00:a9:31:72:ac:ce:6d:bd:ba:c3:58:04:
                    19:52:11:c7:3a:6b:c2:ef:03:be:f8:c9:ec:c8:d4:
                    92:39:63:81:9e:e3:32:2d:e5:c0:39:06:ef:da:40:
                    2d:e5:a2:aa:9c:ab:ed:69:fe:56:c4:4a:cc:0a:7d:
                    4b:a0:47:a1:d6:ef:f4:4c:b2:5f:f5:fb:96:3f:fa:
                    20:21:d5:21:39:ff:3c:1c:cc:5b:4d:bb:a1:52:bf:
                    eb:c9:56:4b:09:37:64:b8:16:dd:5f:dc:ff:0d:46:
                    3c:88:83:93:14:1e:e0:85:56:ab:95:c1:8d:1f:51:
                    ff:c0:57:d3:ce:fc:94:6e:a0:b3:33:40:1b:46:c8:
                    2d:23:e2:6b:44:3d:c0:26:07:3a:62:71:89:b6:2c:
                    46:b1:fa:fb:d6:3a:2c:27:92:5e:d5:31:d9:ff:ae:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:D5:95:17:9B:AE:2F:95:B7:9C:B5:29:71:C5:EE:2E:0C:F5:EF
            X509v3 Authority Key Identifier:
                keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:f7:8d:03:f9:1c:6f:20:01:ed:e5:40:79:ea:c6:f4:80:
         0d:66:d5:a3:96:3e:69:70:5c:25:93:fc:11:c7:d2:ff:dd:3c:
         51:06:c7:55:2b:27:5c:92:da:55:ca:e4:2a:87:04:5f:c5:57:
         27:85:92:3b:5d:b9:3d:36:fc:02:e3:eb:24:ca:a7:26:28:7a:
         c3:3b:32:50:04:81:69:c3:6b:60:fa:97:06:db:00:4f:94:67:
         e8:71:25:ad:31:68:c0:4f:b0:26:6a:b3:b0:9a:31:12:14:a9:
         2c:6f:a1:be:3f:01:2b:ba:90:41:0e:b0:b2:f7:c7:42:b3:0b:
         5d:e6:60:49:0f:18:01:8b:91:34:c9:92:b2:79:c6:71:2d:8f:
         16:9a:3a:41:2a:da:6f:21:19:c2:05:06:0b:0c:68:b1:a5:f5:
         5c:c5:7f:a0:37:2a:81:4c:7f:27:c7:af:a5:ae:ec:7f:a9:b9:
         9c:7c:33:d3:96:af:a5:f1:88:1f:56:e4:8b:9a:74:ef:89:df:
         a6:c1:54:b1:31:c3:e4:11:dd:9d:50:c8:48:a5:28:3f:97:60:
         8d:34:5b:1d:be:7c:c4:20:e0:42:4a:9a:8a:8d:d0:4b:f4:a5:
         e6:5c:8e:4e:84:ae:b4:c6:81:aa:4a:1d:89:72:32:8e:02:3b:
         f5:40:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:30:45 2026 by rpki-client