Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File:                     iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier:          s5Lr/n+zD50ndYe6sOgVYqiznk3y8gxDJJIdkATn7r4=
Subject key identifier:   A6:0E:B6:F3:45:0D:00:59:37:B9:84:26:C0:EA:0F:82:79:7E:32:CE
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer:       /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial:       0198D54DC4A7DBD1A8C774736077273F56A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number:          0438
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: 0aPhXVyce0SICbpq9bOaehiO5Pw.roa (hash: QZjecyF8WoZMTAQ+88px6Agq67hFp09iHfOWPO4elas=)
                          2: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
                          3: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: Rul2zc/YE6iNUeVoTbu/OH6fEG1ffTfuX5pqPxgWoto=)
                          4: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c4:a7:db:d1:a8:c7:74:73:60:77:27:3f:56:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=a60eb6f3450d005937b98426c0ea0f82797e32ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:0e:8c:31:bc:41:68:fc:6d:f0:17:7f:0d:
                    53:41:dc:1e:75:3a:d7:9f:38:e3:9b:e2:f5:47:37:
                    90:12:b9:69:3f:e9:b6:2c:87:ae:c6:75:09:1b:8a:
                    28:70:5d:7d:89:d7:c5:ed:6c:e1:9d:b3:35:0e:60:
                    b2:ff:e8:41:e6:d0:0a:48:9e:29:6d:1f:75:70:58:
                    b0:67:99:6b:b0:b1:fb:19:a8:2f:6d:09:3d:ea:5b:
                    06:8a:19:45:96:54:4c:ab:8d:55:8b:06:73:81:d2:
                    6e:c4:42:80:41:5a:0a:9c:2f:7e:f7:39:ae:90:6b:
                    93:d5:73:47:83:87:99:1c:41:de:4b:96:fa:dd:c8:
                    de:a1:a3:86:68:cd:92:7b:a3:a6:16:e1:7d:57:43:
                    f8:c4:60:93:42:b4:d0:ea:ac:71:e4:f8:3b:0e:66:
                    52:b7:a6:9b:ce:09:d9:ab:6e:35:a4:62:b4:b2:1e:
                    e2:0d:19:31:4c:3b:ce:9e:9a:c3:57:d4:b8:c1:56:
                    82:43:18:b8:72:49:17:a8:7f:94:96:00:cf:ff:7c:
                    db:8e:76:ae:a6:ac:60:68:6b:2f:1d:30:3b:61:80:
                    e0:12:fc:d0:d0:d9:ea:0c:71:17:b6:2a:50:29:30:
                    78:fd:2c:13:fe:da:63:96:6e:40:33:57:a7:bf:2b:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:B6:F3:45:0D:00:59:37:B9:84:26:C0:EA:0F:82:79:7E:32:CE
            X509v3 Authority Key Identifier:
                keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:b9:bc:bf:b1:5c:fe:2a:3e:4d:be:04:74:df:64:7b:30:
         d8:f5:f5:19:98:31:fd:a9:bf:bc:8b:c2:9c:93:0e:72:0a:e3:
         cf:4f:73:b0:90:e5:9b:20:e1:8d:c9:73:64:98:a9:27:e8:96:
         a4:bb:a4:77:20:c9:af:97:af:b5:4b:37:30:1f:3e:71:c7:5f:
         f4:2e:b7:c9:1f:5e:62:e5:f3:ea:32:f3:78:7a:08:d7:31:f0:
         36:56:d4:13:2c:4d:63:bf:4c:8f:90:62:a1:c7:3e:a0:e6:c8:
         f9:bc:58:b8:bb:b8:e3:e7:28:3a:a8:90:48:20:96:50:a2:59:
         ba:f8:11:f1:16:15:31:83:34:b3:3c:7a:b4:83:02:21:71:c5:
         40:45:e8:18:00:c8:ee:5b:e4:6c:18:a7:fd:4e:64:93:3b:9e:
         2d:dd:37:6e:ad:ba:75:68:de:4e:1a:e4:9e:b4:07:28:55:33:
         15:36:cb:15:79:93:b1:ab:9e:83:af:3c:a4:22:49:ef:ab:f5:
         8d:59:40:f2:91:1e:53:e5:ad:9b:ab:a2:26:54:ee:96:bb:2c:
         49:7a:e2:85:de:36:cf:9c:24:11:c1:94:f8:da:f9:52:24:23:
         8a:22:c2:67:5f:65:73:55:eb:3d:6d:ec:e8:e0:60:6d:3c:60:
         d1:1d:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:39 2025 by rpki-client