Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File:                     iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier:          r2h1jl0QqkDZIRio5N39EtxCoUIF9T0PHU+5XQ0X5wU=
Subject key identifier:   94:0D:90:81:88:B7:9F:0F:56:C2:B4:96:81:79:DC:D4:B4:65:82:C4
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer:       /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial:       01A1DE70E067D3282381EB67E206E14BD946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number:          08EB
Signing time:             Sun 15 Nov 2026 09:01:41 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:41 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:41 +0000
Files and hashes:         1: PMVxDduYgQJ0BG5nMLjgUjPq-Fo.roa (hash: 8MELFyGN82m0iqvP/pWKQ/F8wrQUyEvQTg8CFQeMMOw=)
                          2: Uj5ULHb6pyjQ0Dae7foiE-ljxJs.roa (hash: L/jRLCYGvoP3gC9D3+3HlVqnaf/R9WFuYfVBfpOL8qA=)
                          3: b4P6uJV_tR2qUGlhC9Hs8qU1KGE.roa (hash: 7a7tARiHKyAffGP3ypjihG7k7EOkwFefwGd/57t0gnI=)
                          4: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: +8BH+6aEwqGZTwk+IEgSY3pziCY7BWxQN3I1KcIg0+8=)
                          5: kFp7wvP0ODCJK7vo0Vmb1UsfAnI.roa (hash: r4fhrXelWzWE5kdbDKL+JQJ2IM+WiqgDjI7e9dKaNQg=)
                          6: zhAOUDPsimKbNDw9REBFzxOXvAg.asa (hash: BAoiUcDbbzAQk/giYWae8rYu4mp3xPfBmklUKb9Lgbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:e0:67:d3:28:23:81:eb:67:e2:06:e1:4b:d9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
        Validity
            Not Before: Nov 15 09:01:41 2026 GMT
            Not After : Nov 16 09:01:41 2026 GMT
        Subject: CN=940d908188b79f0f56c2b4968179dcd4b46582c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:db:eb:b8:e4:03:d7:ca:15:9a:72:40:40:
                    77:1c:45:36:4c:1b:13:40:89:c5:92:ca:ae:b2:1b:
                    2b:fb:0e:26:aa:29:a8:f2:d6:fb:80:dc:a9:76:0b:
                    04:4e:9b:fd:8b:b1:a7:1a:1e:52:2b:b6:fe:4b:86:
                    c5:3c:cc:42:57:02:2e:3b:a0:0f:7b:1a:e2:7c:1e:
                    ee:d9:be:c3:c4:27:9b:7a:c9:7c:b7:3d:91:79:82:
                    21:80:43:42:9a:05:65:b3:e3:43:68:f6:fb:2b:b4:
                    59:e1:ec:4d:cb:1d:82:b0:ee:3e:ff:94:66:b8:3f:
                    81:40:cc:86:ef:5e:9d:07:15:e1:5f:dc:3f:02:fd:
                    f4:79:9f:f3:63:82:dc:61:34:63:b6:00:44:fd:ec:
                    ce:be:2d:c2:71:c3:72:df:b5:84:96:64:50:07:9c:
                    17:93:eb:3b:98:68:c2:54:f0:44:b3:3f:4e:b3:cd:
                    45:c0:28:ba:68:f9:6e:83:41:f2:20:f1:14:1b:2b:
                    d6:33:0a:9e:22:e5:7a:a5:aa:46:7c:73:c1:b6:67:
                    0e:62:04:00:ad:e9:c7:30:c0:b0:3b:f3:f6:68:3b:
                    4d:eb:44:1b:a0:a6:a7:74:c2:b7:ae:53:52:82:ca:
                    67:65:e5:f3:35:cb:03:97:f7:3b:c8:3e:3d:68:86:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0D:90:81:88:B7:9F:0F:56:C2:B4:96:81:79:DC:D4:B4:65:82:C4
            X509v3 Authority Key Identifier:
                keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:d5:fe:28:98:8c:07:7e:22:c1:b6:90:15:2d:ef:02:0c:
         c5:37:76:b1:00:91:5f:6e:f9:f2:4c:33:34:3c:91:05:17:8e:
         a7:59:a0:ea:b7:ea:84:90:86:e8:66:e7:b1:f3:f0:a6:7f:f2:
         35:b4:e7:2b:44:61:bc:13:ba:bb:84:90:19:a6:b2:11:bc:00:
         0e:57:60:a7:0d:60:d4:7d:18:83:7f:30:50:c0:92:ff:3d:13:
         0d:9c:40:fc:07:61:8a:47:8a:76:2a:7f:b1:d7:93:d9:51:9b:
         66:e5:51:dd:1f:f8:ba:39:e2:64:3a:f6:8c:2c:f1:e4:b4:a9:
         95:ee:1f:b9:42:f7:b8:3b:9a:74:ab:5b:04:06:78:35:82:d0:
         d9:7f:83:12:2c:5e:90:0b:e0:7d:02:27:d6:fd:fb:34:92:73:
         17:5e:a9:0c:75:d5:62:aa:80:8b:6e:4c:b7:50:c6:04:f3:3c:
         8d:34:28:e8:92:76:f6:60:4d:f0:7c:bd:b1:cc:e0:08:84:a9:
         99:e2:4b:fa:e2:f7:03:88:21:fd:fa:a9:78:55:0c:29:a7:2b:
         b4:f9:87:5a:94:4b:1e:f2:56:be:4f:73:f5:96:a8:fe:54:fb:
         5e:49:dd:6c:42:a5:75:c5:b2:1c:92:41:a2:80:a6:b0:68:05:
         c2:47:d1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecOBn0ygjgetn4gbhS9lGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjhmZjMxMGRhN2RmODMwOWNmYWI0ZGNmOWEyMzU4NDJi
NjA4NzIwHhcNMjYxMTE1MDkwMTQxWhcNMjYxMTE2MDkwMTQxWjAzMTEwLwYDVQQD
Eyg5NDBkOTA4MTg4Yjc5ZjBmNTZjMmI0OTY4MTc5ZGNkNGI0NjU4MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCjb67jkA9fKFZpyQEB3HEU2TBsT
QInFksqushsr+w4mqimo8tb7gNypdgsETpv9i7GnGh5SK7b+S4bFPMxCVwIuO6AP
exrifB7u2b7DxCebesl8tz2ReYIhgENCmgVls+NDaPb7K7RZ4exNyx2CsO4+/5Rm
uD+BQMyG716dBxXhX9w/Av30eZ/zY4LcYTRjtgBE/ezOvi3CccNy37WElmRQB5wX
k+s7mGjCVPBEsz9Os81FwCi6aPlug0HyIPEUGyvWMwqeIuV6papGfHPBtmcOYgQA
renHMMCwO/P2aDtN60QboKandMK3rlNSgspnZeXzNcsDl/c7yD49aIYScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQNkIGIt58PVsK0loF53NS0ZYLEMB8GA1UdIwQY
MBaAFIoo/zENp9+DCc+rTc+aI1hCtghyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQt
MjRjZjhhNjFkN2U4LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQtMjRjZjhhNjFkN2U4
LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWszV/iiY
jAd+IsG2kBUt7wIMxTd2sQCRX2758kwzNDyRBReOp1mg6rfqhJCG6GbnsfPwpn/y
NbTnK0RhvBO6u4SQGaayEbwADldgpw1g1H0Yg38wUMCS/z0TDZxA/AdhikeKdip/
sdeT2VGbZuVR3R/4ujniZDr2jCzx5LSple4fuUL3uDuadKtbBAZ4NYLQ2X+DEixe
kAvgfQIn1v37NJJzF16pDHXVYqqAi25Mt1DGBPM8jTQo6JJ29mBN8Hy9sczgCISp
meJL+uL3A4gh/fqpeFUMKacrtPmHWpRLHvJWvk9z9Zao/lT7XkndbEKldcWyHJJB
ooCmsGgFwkfRVQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:54 2026 by rpki-client