Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File:                     _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier:          xyeDviz1QL+XPEjKLpQ38d/kadt/zNqTm005FzPfkFE=
Subject key identifier:   3B:E3:88:91:76:3C:47:63:98:47:81:CF:12:07:DE:74:74:3D:B3:DB
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer:       /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial:       019EB733ACD6C2F687A3E2ECF7C8C3EDD3CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number:          1330
Signing time:             Thu 11 Jun 2026 15:01:17 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:17 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:17 +0000
Files and hashes:         1: 6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa (hash: k9XIzZz2YS/IqcKj1MEO/9AD4eBMuTTQ1lkoUK4El4A=)
                          2: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: CLodM71pcfHY+Hj2iLd5p608I6Xe7uIDw6GsLULKwBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:ac:d6:c2:f6:87:a3:e2:ec:f7:c8:c3:ed:d3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
        Validity
            Not Before: Jun 11 15:01:17 2026 GMT
            Not After : Jun 12 15:01:17 2026 GMT
        Subject: CN=3be38891763c4763984781cf1207de74743db3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:d1:a7:4e:e4:50:69:53:62:28:84:3f:e7:
                    6f:b3:c2:9f:72:37:c1:22:5f:02:e2:28:2d:67:47:
                    1b:66:59:a6:5f:d8:90:f1:8b:d2:55:77:0e:7c:2d:
                    5a:8c:77:e1:79:18:17:3c:0b:24:ac:67:e9:73:8a:
                    13:dd:6f:d1:f7:e8:22:a3:61:00:eb:b8:26:cf:da:
                    4c:c0:9c:5b:31:b4:74:5c:2b:eb:48:e8:76:21:e1:
                    7b:1f:e2:f5:0d:86:71:5c:03:69:33:0f:a9:54:20:
                    8d:4a:bb:d6:d6:01:4a:3a:79:30:25:6e:85:9f:ba:
                    06:a7:44:4d:a8:99:2a:bd:6c:32:c1:ee:cc:6e:41:
                    4d:1c:f6:75:01:44:9d:fc:58:a9:65:1e:78:54:84:
                    0c:a2:05:c8:db:10:6f:72:27:5d:51:19:5c:99:b9:
                    ad:b8:bb:50:7d:bb:bf:7f:5e:e9:6a:a6:2f:e4:2e:
                    38:89:7b:fa:10:a2:33:40:ea:60:bc:46:e6:71:83:
                    82:36:d1:1c:5c:df:38:db:f2:b1:af:ee:95:85:02:
                    23:a0:ff:af:3d:6a:72:08:85:a9:55:73:12:c0:28:
                    52:ce:88:0c:e5:5b:e1:fe:3f:c3:99:d5:1f:09:19:
                    e4:aa:66:d5:93:17:1a:73:58:0c:89:ee:cd:2d:d0:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E3:88:91:76:3C:47:63:98:47:81:CF:12:07:DE:74:74:3D:B3:DB
            X509v3 Authority Key Identifier:
                keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:00:3d:f5:17:5e:84:c8:e6:2b:a5:83:f9:11:f2:b7:fa:cb:
         6e:5d:95:45:12:ca:ff:00:6a:78:95:eb:46:66:e4:8a:f9:c5:
         be:0d:a3:4c:3a:97:a8:0b:6f:80:30:27:a5:65:41:a6:69:9f:
         c7:e7:6c:21:60:ad:5b:c8:e6:94:03:0b:7f:b8:2c:33:62:a1:
         12:c7:46:61:6f:48:59:23:0b:da:51:ad:af:00:28:4f:0d:84:
         f0:74:81:e4:21:6e:4d:32:52:4d:f2:07:e7:79:6e:05:6c:e1:
         71:b7:33:8f:e8:89:6f:6d:35:c6:d4:6e:12:3c:c9:bb:11:5e:
         54:90:fe:a9:de:63:7f:b3:df:11:10:10:31:0d:5d:ae:e4:96:
         f8:e1:bb:f5:b2:38:73:01:1c:1a:c7:eb:34:f9:f0:5e:d5:f8:
         7e:0e:60:a7:ae:1a:0d:bd:00:bb:70:8b:46:40:10:66:b2:c4:
         2e:a5:e3:4a:61:78:8d:a5:00:ec:b0:e9:2b:09:e9:6d:1f:93:
         f2:3d:a4:ff:a4:72:b7:a7:f6:bd:79:50:c9:df:e8:e4:15:d8:
         ac:71:c4:b1:cc:20:0d:ef:db:2a:5f:02:33:36:70:af:70:5a:
         15:76:3e:20:a0:fb:5e:a4:ab:64:7a:8a:ef:e0:26:3a:b0:f3:
         8d:9b:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:08:54 2026 by rpki-client