Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File:                     _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier:          EvjoUIVZeX5Me7MC6IuwrnitY8If/qOYNT7Ul9FXu1I=
Subject key identifier:   B5:B3:C6:5B:AE:5F:3D:21:F0:AC:5A:12:2B:77:69:D3:9F:B0:F2:BD
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer:       /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial:       019F8F7E130648B6B2C1AC41C52062240A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number:          13A0
Signing time:             Thu 23 Jul 2026 15:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:32 +0000
Files and hashes:         1: 6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa (hash: k9XIzZz2YS/IqcKj1MEO/9AD4eBMuTTQ1lkoUK4El4A=)
                          2: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: EHaQXjAgnc29ZPqn2gLwOb7C+M+mNdA4EF+sSnmz0SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:13:06:48:b6:b2:c1:ac:41:c5:20:62:24:0a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
        Validity
            Not Before: Jul 23 15:00:32 2026 GMT
            Not After : Jul 24 15:00:32 2026 GMT
        Subject: CN=b5b3c65bae5f3d21f0ac5a122b7769d39fb0f2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:1d:e8:a4:bb:07:1f:6b:4d:52:94:f3:c9:
                    71:94:bb:45:f7:8c:03:17:a6:88:6f:5f:6b:6c:9a:
                    73:72:97:e8:b3:27:45:8a:64:b0:01:7e:72:1b:bc:
                    3d:d5:6f:98:82:8d:f5:60:66:cd:46:dc:79:f6:79:
                    fc:d7:2c:c2:4b:ef:3f:66:a0:97:52:b0:92:ba:af:
                    fa:e5:a0:f9:88:45:ad:e0:71:fb:f5:c9:04:9c:24:
                    c5:d7:9e:1c:da:ee:e7:cd:d3:9a:90:04:39:cb:7a:
                    e8:5e:16:1b:c5:c4:44:e1:2e:4b:10:0a:a5:30:01:
                    e3:5c:6e:a9:31:f9:2d:f2:4d:12:ef:d8:43:5e:66:
                    7b:44:5b:53:78:37:50:2a:89:37:12:aa:24:a5:f0:
                    81:a4:8c:76:4f:17:1c:b1:dd:30:b8:e3:bc:10:c4:
                    f1:2d:8a:cc:cf:9d:f1:ed:d4:cd:17:4e:ea:19:4b:
                    39:15:1a:38:34:1b:33:c5:1c:a1:0c:2f:7b:ff:ca:
                    9f:ef:fd:11:8f:72:0f:f0:05:39:de:1c:0c:62:36:
                    2e:d2:08:ee:9c:3b:6b:1e:1b:2f:82:fe:33:81:4c:
                    e8:ae:d7:fb:46:1d:df:a1:c7:a0:78:5d:53:36:9f:
                    d6:9c:5b:85:e6:2b:32:fc:b3:dd:2e:5a:24:d4:bc:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B3:C6:5B:AE:5F:3D:21:F0:AC:5A:12:2B:77:69:D3:9F:B0:F2:BD
            X509v3 Authority Key Identifier:
                keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:d0:57:5e:62:4a:ac:02:03:f1:c7:4d:ea:2b:ae:7d:df:
         fd:7f:c9:9a:a7:1e:ac:f3:3b:6d:7e:85:00:d8:61:e0:83:1b:
         e4:59:44:03:c1:98:8b:05:2f:61:89:83:3e:07:84:5f:f4:ef:
         16:8c:1d:bc:e4:8d:7e:41:b8:12:3e:0d:c6:89:c8:8b:42:ce:
         8b:be:64:3f:80:b6:af:f7:6d:8d:9b:fa:d8:bc:58:6e:3f:06:
         f6:3a:af:df:67:9e:db:76:e1:4f:37:ee:15:8c:5f:09:e3:d4:
         91:34:97:4f:1e:06:12:f2:62:30:d6:cd:40:ae:b6:72:e9:e7:
         5a:41:78:2d:8a:7f:6e:3e:8e:c1:b3:9d:9a:f7:a3:5d:3e:c7:
         e8:f6:5f:74:ec:17:a8:12:ed:a6:1e:20:b2:9f:84:ff:bf:e0:
         78:0a:8c:99:a7:f2:c6:42:74:39:d8:29:7f:f9:da:56:3d:1c:
         79:d3:71:36:a6:08:28:fd:c9:53:23:54:1a:6e:6a:65:d8:c1:
         92:4d:9d:12:49:51:68:79:f5:d2:fa:3f:a8:d5:d4:2e:f5:52:
         cb:c1:68:9b:05:c3:8e:09:7f:7f:6d:91:12:44:e4:15:4c:9c:
         dc:c9:ac:8b:9a:cc:bd:8b:ba:0a:6a:d0:08:fe:d2:6b:16:58:
         4d:0c:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:46 2026 by rpki-client