Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File:                     iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier:          XrTphvhzfY/SfMQ54OMstNHZdGYj6T6FU2xfHp9oDrQ=
Subject key identifier:   E1:34:35:08:DA:C0:21:A6:52:2D:78:DA:07:32:DE:CF:88:18:02:1C
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer:       /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial:       019931FF4AE2148A31EE356861CBB4B97041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number:          0468
Signing time:             Wed 10 Sep 2025 05:00:38 +0000
Manifest this update:     Wed 10 Sep 2025 05:00:38 +0000
Manifest next update:     Thu 11 Sep 2025 05:00:38 +0000
Files and hashes:         1: 0aPhXVyce0SICbpq9bOaehiO5Pw.roa (hash: QZjecyF8WoZMTAQ+88px6Agq67hFp09iHfOWPO4elas=)
                          2: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
                          3: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: YWDc/lAJwRw8Xd4uqp7LfnDqQlNQtbO9ef47OTvaees=)
                          4: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:ff:4a:e2:14:8a:31:ee:35:68:61:cb:b4:b9:70:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
        Validity
            Not Before: Sep 10 05:00:38 2025 GMT
            Not After : Sep 11 05:00:38 2025 GMT
        Subject: CN=e1343508dac021a6522d78da0732decf8818021c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:70:54:30:88:78:8f:d9:25:97:06:a8:f6:
                    9f:84:dc:86:62:f2:1b:6c:1f:80:47:81:cf:f0:35:
                    d4:4c:a4:cd:3b:4d:1d:13:51:7a:5a:76:b8:13:f4:
                    d9:be:41:01:5d:88:6d:d4:48:55:fc:f6:4a:b9:66:
                    8c:ea:f0:6b:89:8c:b3:3c:83:ca:77:26:b0:f8:66:
                    db:9c:b6:70:7a:be:6e:dc:98:04:f2:7b:90:bd:78:
                    e5:32:5e:ae:8f:2a:9e:58:71:c9:d6:6c:b2:aa:c2:
                    93:0b:f2:46:6b:f4:fe:71:66:e3:a5:d4:9a:b8:d7:
                    f6:18:83:9a:1a:6a:f7:d3:00:92:f2:46:2a:34:ae:
                    a1:6b:ef:86:e8:2b:62:21:18:3b:fb:ff:16:4a:56:
                    d5:14:79:64:9f:4e:cf:75:c2:9b:06:f3:08:01:d1:
                    d4:80:74:c9:23:24:dc:2b:11:73:6c:26:69:4d:4b:
                    3f:35:09:31:09:cc:22:15:4a:c7:55:dc:21:4f:d6:
                    c6:91:e4:45:6e:c9:2d:9d:d8:76:32:4d:55:28:61:
                    0c:e2:84:30:6c:01:91:29:50:16:a3:d9:d1:26:64:
                    4a:fb:9b:bc:59:83:59:40:86:26:13:58:1b:a8:30:
                    40:c5:f0:0b:87:d0:ab:ee:11:5d:63:9a:c6:ab:2d:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:35:08:DA:C0:21:A6:52:2D:78:DA:07:32:DE:CF:88:18:02:1C
            X509v3 Authority Key Identifier:
                keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:80:13:6c:eb:c4:a8:96:82:5b:4c:a5:13:5e:21:40:75:
         ed:32:67:fa:58:12:48:ea:fe:50:11:5a:05:f6:dc:10:cc:30:
         20:73:d8:a4:66:ec:b9:a3:09:c1:3d:2f:1f:69:36:1f:47:f3:
         b6:5d:94:69:16:79:d3:14:7c:ef:2d:11:2f:94:3f:0c:c9:4c:
         62:f6:0a:09:5d:ee:5e:84:1f:b5:6f:91:0d:b2:84:e5:30:d5:
         69:94:5e:b4:dd:25:2b:bc:47:a0:ef:59:71:5e:53:bf:3a:41:
         10:a5:77:78:33:98:fe:86:1e:a7:0c:05:66:2c:4f:b3:e8:84:
         fd:7f:82:7c:ce:a1:9a:96:e7:10:79:64:50:1d:33:65:3b:a9:
         26:d3:de:a1:51:7e:61:9a:ee:f1:ac:bc:92:4d:8f:07:43:5d:
         9e:f8:03:e4:ac:c4:d7:ba:8b:27:86:1c:86:f6:06:3c:c0:60:
         f7:3c:65:ef:4e:fd:c4:41:0f:02:f0:20:71:54:74:97:84:92:
         c9:1f:e6:a6:b5:ae:9a:e1:ee:da:96:88:78:3c:c1:72:cd:b2:
         53:4b:72:01:37:73:f1:de:e9:60:44:2d:03:60:4a:b6:40:5f:
         53:2c:5c:86:55:02:38:f5:8b:d2:2d:d1:43:cb:6a:a6:c5:f4:
         4a:7a:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:31:01 2025 by rpki-client