Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File:                     stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier:          nKODXH7PJQ4AglGuwBUy1a+L6Zjg8uZtZCO2/hewNe4=
Subject key identifier:   96:86:71:96:65:53:52:77:C8:6F:97:4E:20:B8:65:10:27:C5:A3:20
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer:       /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial:       0199FE1012A84066323BE6630E9DF4F0DC81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number:          11D2
Signing time:             Sun 19 Oct 2025 20:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:30 +0000
Files and hashes:         1: i-DPtzOhX1UrAwvJvp6e_VFBpfU.roa (hash: b0DJ4Ik9RBvNDvd/V/+wWQQR6BcIK0SHDpRuzhlzJ6o=)
                          2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: zr/F+nqLpAh7OpPjA3I2AC2RNvFy9doXuDLrJnV5zJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:12:a8:40:66:32:3b:e6:63:0e:9d:f4:f0:dc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
        Validity
            Not Before: Oct 19 20:01:30 2025 GMT
            Not After : Oct 20 20:01:30 2025 GMT
        Subject: CN=9686719665535277c86f974e20b8651027c5a320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:f3:74:f7:20:e6:79:96:77:5f:e6:b6:eb:
                    0c:85:66:4b:44:df:c1:e0:ac:1e:f3:51:62:04:86:
                    8e:bd:ab:93:49:f5:31:19:30:e1:a1:6b:b2:42:f5:
                    a8:16:d3:a7:14:10:61:3b:13:de:0b:ff:b6:3a:d9:
                    cc:3c:8f:bd:12:f9:48:f3:7b:51:65:f9:d8:3d:fe:
                    57:1b:17:d9:58:9f:24:79:95:9c:ce:7c:f4:ea:61:
                    4c:46:53:05:3b:e3:e5:a9:cd:16:5f:ac:c2:49:86:
                    58:75:c5:87:1d:90:64:4d:39:b8:42:0a:a6:37:de:
                    a1:5f:fd:07:dd:70:5f:f5:da:55:c7:c0:db:14:c1:
                    05:5d:a5:5b:fc:88:ff:78:b0:d6:27:64:83:dd:98:
                    f5:40:38:81:45:63:27:93:ce:ff:01:ff:d0:a3:54:
                    5d:88:24:05:01:3e:5b:e6:d7:2d:37:ff:79:71:49:
                    80:0c:e8:a8:c6:e7:44:a1:7c:91:00:9f:74:a3:be:
                    47:86:92:50:a0:a5:70:c6:00:07:ef:b4:77:f5:0c:
                    22:9c:22:b3:14:28:c4:ae:26:bb:9d:cd:fe:77:a0:
                    eb:67:83:c6:c3:1f:71:2b:dc:0a:fb:37:98:65:90:
                    94:ef:15:30:1b:9b:61:2b:a4:8e:7a:ac:fb:14:92:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:86:71:96:65:53:52:77:C8:6F:97:4E:20:B8:65:10:27:C5:A3:20
            X509v3 Authority Key Identifier:
                keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:00:91:4d:dc:f6:46:7b:3c:68:d4:eb:49:bd:1c:b7:81:
         95:60:68:5a:96:41:b1:64:c3:13:4f:42:ca:b9:75:36:cf:a2:
         55:8c:88:37:05:b7:c6:7f:89:18:06:e7:34:11:8f:d0:ee:94:
         e0:cf:0b:e4:48:0f:cf:f7:b8:59:8c:b9:5c:d0:ba:4d:3d:05:
         8f:92:b8:3a:4e:67:03:3c:61:fb:b8:d7:27:1d:4a:99:fe:91:
         98:16:a3:ad:a0:3c:f0:5e:e6:66:4c:06:a5:e5:47:5a:69:ee:
         a0:73:a3:a3:49:fe:51:bc:2e:b9:2a:c7:c2:f5:62:88:07:ca:
         01:29:a6:ae:36:89:9e:00:1e:a0:53:8c:11:a3:4e:73:c1:8b:
         8a:65:83:a9:05:84:8a:b3:64:2c:a6:17:41:d9:55:d8:b4:ee:
         8f:88:0f:a0:8c:a3:89:e7:f7:43:b0:e1:94:94:04:e1:35:c4:
         3f:6c:84:70:88:59:b3:fb:26:1c:26:72:59:65:67:4f:17:a4:
         77:3c:8d:aa:57:9f:9c:9d:d5:f9:e1:f6:f3:dc:55:f3:68:1f:
         cc:d2:ee:2a:38:89:2e:f4:7e:e3:ed:66:e9:b6:ac:06:41:4d:
         48:d6:ac:ff:71:a6:f9:a6:78:d3:57:7f:a2:c2:03:12:91:7f:
         41:0c:1e:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EBKoQGYyO+ZjDp308NyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDdmOTk5ODM4YWExNjNiZjM0NGZjNjk5MTdiYjYwZDEy
ZmRmYzMwHhcNMjUxMDE5MjAwMTMwWhcNMjUxMDIwMjAwMTMwWjAzMTEwLwYDVQQD
Eyg5Njg2NzE5NjY1NTM1Mjc3Yzg2Zjk3NGUyMGI4NjUxMDI3YzVhMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOnzdPcg5nmWd1/mtusMhWZLRN/B
4Kwe81FiBIaOvauTSfUxGTDhoWuyQvWoFtOnFBBhOxPeC/+2OtnMPI+9EvlI83tR
ZfnYPf5XGxfZWJ8keZWcznz06mFMRlMFO+Plqc0WX6zCSYZYdcWHHZBkTTm4Qgqm
N96hX/0H3XBf9dpVx8DbFMEFXaVb/Ij/eLDWJ2SD3Zj1QDiBRWMnk87/Af/Qo1Rd
iCQFAT5b5tctN/95cUmADOioxudEoXyRAJ90o75HhpJQoKVwxgAH77R39QwinCKz
FCjEria7nc3+d6DrZ4PGwx9xK9wK+zeYZZCU7xUwG5thK6SOeqz7FJIXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaGcZZlU1J3yG+XTiC4ZRAnxaMgMB8GA1UdIwQY
MBaAFLLX+ZmDiqFjvzRPxpkXu2DRL9/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgt
N2NlYzJkNTM0NWI0LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgtN2NlYzJkNTM0NWI0
LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRMAkU3c
9kZ7PGjU60m9HLeBlWBoWpZBsWTDE09Cyrl1Ns+iVYyINwW3xn+JGAbnNBGP0O6U
4M8L5EgPz/e4WYy5XNC6TT0Fj5K4Ok5nAzxh+7jXJx1Kmf6RmBajraA88F7mZkwG
peVHWmnuoHOjo0n+UbwuuSrHwvViiAfKASmmrjaJngAeoFOMEaNOc8GLimWDqQWE
irNkLKYXQdlV2LTuj4gPoIyjief3Q7DhlJQE4TXEP2yEcIhZs/smHCZyWWVnTxek
dzyNqlefnJ3V+eH289xV82gfzNLuKjiJLvR+4+1m6basBkFNSNas/3Gm+aZ401d/
osIDEpF/QQwe7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:16 2025 by rpki-client