Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File:                     jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier:          ph3yk22mEYZx9DGFDIn9FhITWlXlk5Ow3GrSi3vjHmQ=
Subject key identifier:   F5:A7:A2:73:A9:99:DE:AA:A6:74:D1:41:C3:E3:85:54:70:EA:EC:A8
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer:       /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial:       019F95B746F1C2440728A59F266268B4EB6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number:          131C
Signing time:             Fri 24 Jul 2026 20:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:44 +0000
Files and hashes:         1: 7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa (hash: Z91Be9fMnlCk9EcCA8UjSbIMFHHE/PnW3Mwi2btNcCM=)
                          2: jIeFhJZd4hnKN5qOPFYJyLelG2U.roa (hash: FLT9m7JPrJS5aMnwU7tXsALsvI1wqlNumVY/Ni2QnbM=)
                          3: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: OdHa+1dVQqrtbVkmhY+S9N8LCaGRd5nEJxADHT81hO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:46:f1:c2:44:07:28:a5:9f:26:62:68:b4:eb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
        Validity
            Not Before: Jul 24 20:00:44 2026 GMT
            Not After : Jul 25 20:00:44 2026 GMT
        Subject: CN=f5a7a273a999deaaa674d141c3e3855470eaeca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:3b:1a:8a:f4:ff:f7:ae:30:42:aa:e1:d8:
                    77:4c:fa:bc:8a:21:ec:18:29:19:ce:45:6d:ac:62:
                    7f:56:b5:db:09:b6:ad:3d:13:c5:05:dd:50:9a:9f:
                    57:a5:b8:88:d4:f1:5c:58:46:26:21:ec:76:b5:7a:
                    6c:fc:84:4a:5c:54:86:45:a2:b3:29:fd:de:4e:e0:
                    8a:a7:fa:59:07:3f:65:79:bc:80:cd:c4:70:c2:ba:
                    3f:fb:c3:a2:38:b1:3f:13:40:b1:cf:35:4a:23:e7:
                    7e:be:26:d8:6a:b2:23:7e:91:62:a5:fa:bd:05:b1:
                    a6:92:75:02:55:ea:b3:6f:ab:56:9a:49:1d:d0:8d:
                    6a:c6:1b:37:76:9a:1b:08:38:41:15:9e:57:1e:9a:
                    fb:b2:62:4a:fe:17:ad:7f:9c:c4:a5:fa:d1:ee:f4:
                    08:32:2b:45:34:f2:b8:d4:54:9c:a7:e0:59:7a:a5:
                    82:de:7c:ae:c1:4f:c2:c2:82:63:2f:a6:3e:69:e9:
                    72:f3:4f:b1:f7:8f:bc:d0:f2:dc:f9:9b:cd:0b:54:
                    a0:82:d1:06:db:3d:98:7a:d9:94:2d:80:36:10:d0:
                    00:86:b8:3e:b5:89:cf:be:38:76:9a:37:f0:fb:1c:
                    8b:b1:8c:51:ff:35:2c:08:c3:ea:a0:9a:7b:88:3a:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A7:A2:73:A9:99:DE:AA:A6:74:D1:41:C3:E3:85:54:70:EA:EC:A8
            X509v3 Authority Key Identifier:
                keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:67:b7:30:92:62:04:5b:9d:3d:91:42:2c:18:75:bf:b2:c8:
         1c:c2:fd:e9:4a:92:d4:dc:59:df:67:8b:58:57:fe:51:8f:62:
         16:f5:81:4a:cb:6d:d1:a4:c7:12:aa:e1:63:99:d1:df:09:0b:
         43:24:3f:13:98:d3:8c:09:5b:da:6b:28:aa:ce:36:97:ef:0c:
         ba:49:9c:c7:79:b2:15:e4:47:cd:aa:c0:e0:64:e2:50:f4:36:
         b4:34:45:bd:de:f4:f0:26:40:2c:d0:d1:f5:25:bc:5c:cd:42:
         f5:a8:bc:b5:60:b3:08:cc:5a:da:22:51:ae:d9:f2:ab:5a:05:
         b8:bd:ba:65:ae:d6:49:5a:99:9e:57:d8:d5:09:af:09:32:dc:
         93:21:a6:ff:18:55:02:10:4e:2f:5c:3e:de:b5:3d:06:da:55:
         28:d8:bd:91:c8:e7:00:b8:b5:1c:48:97:a8:37:d2:08:4e:a3:
         9a:70:dc:fe:af:e3:a2:2d:33:4f:41:f4:ac:53:3e:ab:ae:cb:
         26:1a:a3:98:ee:fa:74:a5:33:8c:f5:2d:ff:ee:5b:36:48:96:
         8c:36:18:17:d3:ac:b9:62:33:21:f2:c7:f2:88:eb:32:04:09:
         8f:4a:79:df:2a:f6:27:65:05:e4:ae:24:5c:fb:fe:1f:78:c9:
         ea:15:88:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt0bxwkQHKKWfJmJotOtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjJmODFiOGM0N2MyYjU4OGY0NTFkNDAzN2M2ODM3ODcw
YjM5N2YwHhcNMjYwNzI0MjAwMDQ0WhcNMjYwNzI1MjAwMDQ0WjAzMTEwLwYDVQQD
EyhmNWE3YTI3M2E5OTlkZWFhYTY3NGQxNDFjM2UzODU1NDcwZWFlY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKE7Gor0//euMEKq4dh3TPq8iiHs
GCkZzkVtrGJ/VrXbCbatPRPFBd1Qmp9XpbiI1PFcWEYmIex2tXps/IRKXFSGRaKz
Kf3eTuCKp/pZBz9lebyAzcRwwro/+8OiOLE/E0CxzzVKI+d+vibYarIjfpFipfq9
BbGmknUCVeqzb6tWmkkd0I1qxhs3dpobCDhBFZ5XHpr7smJK/hetf5zEpfrR7vQI
MitFNPK41FScp+BZeqWC3nyuwU/CwoJjL6Y+aely80+x94+80PLc+ZvNC1SggtEG
2z2YetmULYA2ENAAhrg+tYnPvjh2mjfw+xyLsYxR/zUsCMPqoJp7iDpXVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWnonOpmd6qpnTRQcPjhVRw6uyoMB8GA1UdIwQY
MBaAFI6y+BuMR8K1iPRR1AN8aDeHCzl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgt
NDgzZmM5MDcwOGQ1LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85ZTFmNDYtODAyYi00OWQxLTkxYjgtNDgzZmM5MDcwOGQ1
LzEvanJMNEc0eEh3cldJOUZIVUEzeG9ONGNMT1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWe3MJJi
BFudPZFCLBh1v7LIHML96UqS1NxZ32eLWFf+UY9iFvWBSstt0aTHEqrhY5nR3wkL
QyQ/E5jTjAlb2msoqs42l+8Mukmcx3myFeRHzarA4GTiUPQ2tDRFvd708CZALNDR
9SW8XM1C9ai8tWCzCMxa2iJRrtnyq1oFuL26Za7WSVqZnlfY1QmvCTLckyGm/xhV
AhBOL1w+3rU9BtpVKNi9kcjnALi1HEiXqDfSCE6jmnDc/q/joi0zT0H0rFM+q67L
JhqjmO76dKUzjPUt/+5bNkiWjDYYF9OsuWIzIfLH8ojrMgQJj0p53yr2J2UF5K4k
XPv+H3jJ6hWIpw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:10 2026 by rpki-client