Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File:                     iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier:          I5jFpCt21ZtqKNwHEI6JXMEoADidoEwrBKYXjNNbfx4=
Subject key identifier:   54:3D:73:A8:DA:0D:59:12:84:3A:29:AA:6A:5A:B6:66:7C:09:B2:A6
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer:       /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial:       019F8F7F902838A8A463AF15CBFECB24359D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number:          07B9
Signing time:             Thu 23 Jul 2026 15:02:09 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:09 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:09 +0000
Files and hashes:         1: PMVxDduYgQJ0BG5nMLjgUjPq-Fo.roa (hash: 8MELFyGN82m0iqvP/pWKQ/F8wrQUyEvQTg8CFQeMMOw=)
                          2: Uj5ULHb6pyjQ0Dae7foiE-ljxJs.roa (hash: L/jRLCYGvoP3gC9D3+3HlVqnaf/R9WFuYfVBfpOL8qA=)
                          3: b4P6uJV_tR2qUGlhC9Hs8qU1KGE.roa (hash: 7a7tARiHKyAffGP3ypjihG7k7EOkwFefwGd/57t0gnI=)
                          4: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: OUMAUdlCmraTkVvS8lNWigznoBNFxZIvBVWMwJsKzPE=)
                          5: kFp7wvP0ODCJK7vo0Vmb1UsfAnI.roa (hash: r4fhrXelWzWE5kdbDKL+JQJ2IM+WiqgDjI7e9dKaNQg=)
                          6: zhAOUDPsimKbNDw9REBFzxOXvAg.asa (hash: BAoiUcDbbzAQk/giYWae8rYu4mp3xPfBmklUKb9Lgbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:90:28:38:a8:a4:63:af:15:cb:fe:cb:24:35:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
        Validity
            Not Before: Jul 23 15:02:09 2026 GMT
            Not After : Jul 24 15:02:09 2026 GMT
        Subject: CN=543d73a8da0d5912843a29aa6a5ab6667c09b2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:a4:a2:81:ab:49:82:b2:68:bd:55:24:7f:
                    ed:f5:f7:28:5f:fb:de:e2:45:7e:6a:00:7f:b2:b7:
                    86:cf:b3:a0:1b:36:2a:25:de:06:ac:9a:63:75:cc:
                    fa:7e:a6:08:7c:cd:03:c2:d9:af:fa:93:c1:3c:a0:
                    b0:ac:19:f3:b5:19:18:a6:da:bb:e9:69:23:f4:d6:
                    58:4e:1b:22:14:e1:60:ab:98:5b:d5:1f:71:9c:b5:
                    59:89:c4:5a:6f:c1:88:2b:b4:37:3d:77:45:54:71:
                    a7:d1:61:b8:02:8a:fa:b1:b3:d9:3d:06:29:3e:90:
                    be:c9:f9:75:0c:32:5b:69:95:16:e7:a2:2b:9f:82:
                    57:0e:95:e0:9e:1c:20:45:92:e5:b3:84:e8:ae:86:
                    2a:31:65:bb:35:37:4b:73:f0:ce:fe:ef:80:83:74:
                    d6:4b:34:3f:d2:51:d2:58:61:28:98:b0:96:8c:89:
                    b2:e5:5e:b5:ee:1d:80:7d:e3:57:ee:5e:6a:82:84:
                    e7:b1:9a:fa:51:3d:c5:c1:57:7d:28:12:91:99:2f:
                    23:26:af:d5:a8:cc:72:ce:00:05:ce:bd:8e:70:e1:
                    fd:6e:14:75:29:99:7d:11:b3:18:5d:b0:6a:1c:ee:
                    1b:5f:56:02:4d:4c:90:86:19:96:05:55:65:d8:49:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:73:A8:DA:0D:59:12:84:3A:29:AA:6A:5A:B6:66:7C:09:B2:A6
            X509v3 Authority Key Identifier:
                keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:ff:41:ce:16:f1:40:e5:1b:e6:54:d8:00:27:b3:b4:ba:
         82:aa:7a:4e:05:21:e5:89:88:d0:ad:8b:4a:f4:14:2b:cf:3b:
         0e:22:17:d2:a0:87:73:1a:82:5d:3f:56:8d:f9:06:9e:55:a0:
         05:80:81:26:a0:3c:1f:c5:1d:74:b7:0e:7d:40:d3:5d:51:21:
         d8:58:88:17:75:02:91:5a:ba:d3:3a:03:c7:05:d1:03:ba:02:
         5c:3e:d1:b6:f9:0e:e7:20:a6:fd:a7:a9:d7:2f:5e:5f:bf:83:
         08:d5:8d:af:7f:4f:3a:66:4e:f2:1f:58:a1:61:13:a8:9d:58:
         26:46:a0:75:b6:cc:4d:cd:b8:b5:a4:ff:d0:fe:81:a9:38:f6:
         4b:71:03:39:92:e8:46:3b:27:73:b3:17:3b:17:e2:fd:f0:b6:
         0b:83:7e:c3:bd:be:8f:29:12:e4:14:cf:57:73:a7:95:1b:cb:
         1f:f2:c5:8d:1b:17:05:5f:80:3a:8f:16:91:fb:c7:c9:f9:27:
         93:32:b9:48:48:48:06:42:66:65:46:ae:2a:77:63:f0:ab:93:
         44:09:c3:54:9a:25:8d:7a:e6:ca:20:74:df:07:57:59:35:45:
         0b:2d:8f:d3:31:37:c7:25:99:a1:c4:d1:41:47:ae:62:65:9a:
         9a:73:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:08 2026 by rpki-client