Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File:                     iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier:          A2fFMaeA7apocgBu9dzRWV3aZL6rMFNFa5N4sU3h3eA=
Subject key identifier:   1C:79:45:1E:51:40:DD:61:BE:BB:66:1E:32:D5:57:16:8E:53:29:7F
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer:       /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial:       0199FAA101CB269A67F86A4FBB54F04E45AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number:          04D0
Signing time:             Sun 19 Oct 2025 04:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:19 +0000
Files and hashes:         1: 0aPhXVyce0SICbpq9bOaehiO5Pw.roa (hash: QZjecyF8WoZMTAQ+88px6Agq67hFp09iHfOWPO4elas=)
                          2: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
                          3: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: /dzx7zMhwmQMoxkzXweMODw3CwMHmEmY8r0zLjjVHjE=)
                          4: mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa (hash: cvp5yOj8Ixek1gITTHoV35TmSlVgKcQg6j0GCNNS5mI=)
                          5: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:01:cb:26:9a:67:f8:6a:4f:bb:54:f0:4e:45:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
        Validity
            Not Before: Oct 19 04:01:19 2025 GMT
            Not After : Oct 20 04:01:19 2025 GMT
        Subject: CN=1c79451e5140dd61bebb661e32d557168e53297f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:c8:32:fe:13:dd:97:f9:cd:f3:75:4e:3a:
                    fc:8b:8a:89:eb:c1:17:c1:71:03:f7:60:1a:36:0a:
                    2f:6a:dc:31:cd:de:2f:08:47:31:33:bc:a3:17:02:
                    d8:f4:35:e5:7b:16:75:a1:32:b8:5b:39:d3:a3:89:
                    e0:12:33:77:3f:44:e4:8e:fe:13:ae:a0:39:5b:ff:
                    dc:7d:57:d4:75:c9:7b:60:f7:78:f3:08:9e:54:d1:
                    ec:cf:df:d5:a6:b3:ee:4b:38:f5:a3:5b:58:c4:67:
                    0a:bd:d7:53:36:9d:09:ea:3d:a8:0d:5b:df:9a:67:
                    4e:b2:bc:b1:3b:fc:c8:af:b9:ac:ca:a2:bb:a1:a3:
                    b8:f5:62:40:f0:99:1a:6f:6c:d3:47:07:0d:cc:46:
                    92:60:2e:14:de:f5:35:03:b9:1a:a2:f5:79:f1:4e:
                    22:87:e5:c7:a2:20:c1:13:41:57:79:37:87:58:e6:
                    59:10:de:e9:b9:f1:42:59:0c:fe:78:ec:0c:4e:bd:
                    42:44:44:3d:66:4f:8b:8e:38:ef:d7:ff:92:cc:c1:
                    c8:a8:96:c3:0e:f7:74:a0:4e:b3:31:24:4c:f5:6b:
                    bd:e5:c6:7e:99:d2:db:e2:30:70:ef:8a:15:d2:95:
                    28:e6:8b:25:e1:63:08:5a:8a:5f:6c:98:79:bc:61:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:45:1E:51:40:DD:61:BE:BB:66:1E:32:D5:57:16:8E:53:29:7F
            X509v3 Authority Key Identifier:
                keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:19:cf:69:f1:47:6f:4e:ed:88:b9:0b:25:00:1f:4b:4d:
         ff:b0:57:34:48:be:ae:77:48:d0:71:f5:0c:d8:93:0e:44:85:
         98:1f:58:6d:d7:b6:bc:a6:d8:13:02:bf:e2:30:0e:5d:06:92:
         7c:03:94:c3:c7:df:c9:f5:2e:b5:31:da:8c:c7:4e:79:34:49:
         d4:de:4c:3b:7b:6d:9d:cc:21:6a:81:dd:82:e3:ca:5f:83:5a:
         45:e2:65:79:1c:53:d1:9a:1a:a6:f4:52:17:65:a1:cc:59:ea:
         72:67:2f:e0:2f:e8:2f:62:60:8f:c3:4b:2f:e7:17:85:bc:d8:
         4b:61:d6:35:70:f6:8d:68:1f:ee:fb:f3:c5:11:89:db:f2:cc:
         5d:41:64:84:1d:8f:f0:42:a5:bf:1a:f1:3e:c9:25:2c:0f:4b:
         4a:85:d3:ac:b8:a7:ae:17:0e:0c:11:c5:2c:2c:cc:8a:4e:25:
         7a:50:15:fa:f8:10:c2:7c:a4:72:b4:a0:be:43:f7:c7:6f:1c:
         6f:6b:b6:07:a2:79:31:d1:1d:0d:19:31:62:96:4d:ec:c5:92:
         3b:48:ef:fe:68:ae:79:a3:65:3d:06:32:8e:50:f0:8c:b7:53:
         1c:67:da:81:ed:7b:ad:7c:83:83:8c:7f:9b:93:ff:f4:bd:35:
         7c:c7:1e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oQHLJppn+GpPu1TwTkWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjhmZjMxMGRhN2RmODMwOWNmYWI0ZGNmOWEyMzU4NDJi
NjA4NzIwHhcNMjUxMDE5MDQwMTE5WhcNMjUxMDIwMDQwMTE5WjAzMTEwLwYDVQQD
EygxYzc5NDUxZTUxNDBkZDYxYmViYjY2MWUzMmQ1NTcxNjhlNTMyOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc/IMv4T3Zf5zfN1Tjr8i4qJ68EX
wXED92AaNgovatwxzd4vCEcxM7yjFwLY9DXlexZ1oTK4WznTo4ngEjN3P0Tkjv4T
rqA5W//cfVfUdcl7YPd48wieVNHsz9/VprPuSzj1o1tYxGcKvddTNp0J6j2oDVvf
mmdOsryxO/zIr7msyqK7oaO49WJA8Jkab2zTRwcNzEaSYC4U3vU1A7kaovV58U4i
h+XHoiDBE0FXeTeHWOZZEN7pufFCWQz+eOwMTr1CREQ9Zk+Ljjjv1/+SzMHIqJbD
Dvd0oE6zMSRM9Wu95cZ+mdLb4jBw74oV0pUo5osl4WMIWopfbJh5vGE62QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx5RR5RQN1hvrtmHjLVVxaOUyl/MB8GA1UdIwQY
MBaAFIoo/zENp9+DCc+rTc+aI1hCtghyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQt
MjRjZjhhNjFkN2U4LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQtMjRjZjhhNjFkN2U4
LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm0Zz2nx
R29O7Yi5CyUAH0tN/7BXNEi+rndI0HH1DNiTDkSFmB9Ybde2vKbYEwK/4jAOXQaS
fAOUw8ffyfUutTHajMdOeTRJ1N5MO3ttncwhaoHdguPKX4NaReJleRxT0ZoapvRS
F2WhzFnqcmcv4C/oL2Jgj8NLL+cXhbzYS2HWNXD2jWgf7vvzxRGJ2/LMXUFkhB2P
8EKlvxrxPsklLA9LSoXTrLinrhcODBHFLCzMik4lelAV+vgQwnykcrSgvkP3x28c
b2u2B6J5MdEdDRkxYpZN7MWSO0jv/miueaNlPQYyjlDwjLdTHGfage17rXyDg4x/
m5P/9L01fMceVA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:11 2025 by rpki-client