Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
File:                     _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json)
Hash identifier:          DmMuDIW+bo1dU6wEgG91vwm0Ha8AYnNAPIe6dUipTPI=
Subject key identifier:   62:68:5C:B1:3D:2B:4B:35:CE:5A:D3:CD:F4:2E:A9:C2:2E:2B:72:95
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Certificate issuer:       /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial:       0199FB462FB7EBDFFCD6388BF7E0D8F8A68A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
Manifest number:          10BC
Signing time:             Sun 19 Oct 2025 07:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:44 +0000
Files and hashes:         1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: A3q4tssr09wNrP8U73InXlrMyDpg0aDGYQfmwU4MSLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:2f:b7:eb:df:fc:d6:38:8b:f7:e0:d8:f8:a6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
        Validity
            Not Before: Oct 19 07:01:44 2025 GMT
            Not After : Oct 20 07:01:44 2025 GMT
        Subject: CN=62685cb13d2b4b35ce5ad3cdf42ea9c22e2b7295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6a:e5:49:89:1e:f1:32:58:89:a8:4f:f5:49:
                    75:9a:52:3e:b2:94:0f:f7:9c:28:7d:15:e3:cb:21:
                    1d:2f:e7:52:64:03:86:26:a9:57:79:84:a8:58:ca:
                    8c:c3:2b:46:e6:83:55:28:8d:cf:c5:15:5b:f6:d1:
                    f7:88:2a:c9:c4:2d:63:e4:92:92:10:17:5e:e8:72:
                    48:1e:ca:8e:7d:65:51:eb:cb:5d:85:61:d3:81:66:
                    ce:a6:d7:ec:af:54:8d:16:11:a2:8a:9b:89:75:ca:
                    bc:31:28:9d:80:aa:5c:0f:0a:01:27:6c:76:b5:fa:
                    0c:ee:8d:5d:52:fa:37:04:0d:e5:b1:fd:ba:06:1d:
                    c6:fe:39:9d:d8:da:4b:7d:83:02:9b:e0:ac:87:46:
                    6e:27:51:92:aa:7b:7b:4d:b9:34:60:82:ca:fd:c9:
                    16:4f:49:00:c1:33:f3:12:88:39:34:ea:c4:7e:a4:
                    87:af:98:cf:e8:75:41:27:15:74:2a:f1:fe:f5:75:
                    55:18:c3:0a:cd:18:4b:72:a1:7e:83:3d:86:c2:3b:
                    09:66:33:36:5d:fe:02:c7:10:bf:f1:a7:e3:e7:c2:
                    b2:e5:d0:b6:3f:e1:c8:f9:35:77:24:7e:71:9f:28:
                    35:d8:d5:ef:41:48:b5:19:b7:a9:e5:03:f5:40:cd:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:68:5C:B1:3D:2B:4B:35:CE:5A:D3:CD:F4:2E:A9:C2:2E:2B:72:95
            X509v3 Authority Key Identifier:
                keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:6b:8a:9b:88:4d:2c:e4:96:54:04:42:ea:ef:13:42:d0:
         5c:0c:e1:09:88:50:72:2f:a8:04:bc:ad:78:6e:00:3f:97:d5:
         a7:35:9d:6f:db:0d:d0:3e:0f:ef:96:5a:a9:68:6a:4d:6f:01:
         b2:65:3b:37:5a:59:38:43:fc:de:1d:ad:03:50:b3:21:d7:c8:
         b3:b0:da:16:69:05:52:fa:7e:4c:dc:3c:d6:da:29:0e:fc:0e:
         b3:65:11:72:44:8f:93:1d:3e:d1:93:4e:a3:dc:ef:af:4d:9f:
         8e:5c:03:f5:0b:97:58:1b:9d:68:97:5a:36:28:47:45:a9:63:
         af:62:b9:d4:0d:41:1f:6a:82:d8:91:2d:c2:72:cc:ef:a1:ce:
         da:8d:25:2c:72:8a:05:4c:69:6d:79:f7:47:cf:c9:00:ec:f7:
         fc:10:1c:68:28:dc:78:bb:ea:3c:09:85:11:63:7f:43:d1:1e:
         8d:a6:02:3e:7a:4f:f6:05:52:a0:85:09:8c:09:e0:4c:0f:c7:
         9d:25:71:86:2f:ed:1a:a7:df:a3:fb:26:c6:b7:af:8e:bf:a4:
         60:44:67:1f:c9:43:a6:f1:1b:10:6e:c8:cd:0b:6d:e4:8e:bd:
         17:54:c1:aa:b9:1e:db:02:f8:8e:ad:2b:7d:14:b5:41:dd:81:
         09:3e:ff:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Ri+369/81jiL9+DY+KaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2I1ZmUzN2Q4NTExZjY3YTYwNTMxNmViMDk1MzUzOGZj
ZmU5ZTcwHhcNMjUxMDE5MDcwMTQ0WhcNMjUxMDIwMDcwMTQ0WjAzMTEwLwYDVQQD
Eyg2MjY4NWNiMTNkMmI0YjM1Y2U1YWQzY2RmNDJlYTljMjJlMmI3Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWrlSYke8TJYiahP9Ul1mlI+spQP
95wofRXjyyEdL+dSZAOGJqlXeYSoWMqMwytG5oNVKI3PxRVb9tH3iCrJxC1j5JKS
EBde6HJIHsqOfWVR68tdhWHTgWbOptfsr1SNFhGiipuJdcq8MSidgKpcDwoBJ2x2
tfoM7o1dUvo3BA3lsf26Bh3G/jmd2NpLfYMCm+Csh0ZuJ1GSqnt7Tbk0YILK/ckW
T0kAwTPzEog5NOrEfqSHr5jP6HVBJxV0KvH+9XVVGMMKzRhLcqF+gz2GwjsJZjM2
Xf4CxxC/8afj58Ky5dC2P+HI+TV3JH5xnyg12NXvQUi1Gbep5QP1QM1ZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJoXLE9K0s1zlrTzfQuqcIuK3KVMB8GA1UdIwQY
MBaAFP7LX+N9hRH2emBTFusJU1OPz+nnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMt
YzI1NzYwNzMxN2YzLzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMtYzI1NzYwNzMxN2Yz
LzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsi1ripuI
TSzkllQEQurvE0LQXAzhCYhQci+oBLyteG4AP5fVpzWdb9sN0D4P75ZaqWhqTW8B
smU7N1pZOEP83h2tA1CzIdfIs7DaFmkFUvp+TNw81topDvwOs2URckSPkx0+0ZNO
o9zvr02fjlwD9QuXWBudaJdaNihHRaljr2K51A1BH2qC2JEtwnLM76HO2o0lLHKK
BUxpbXn3R8/JAOz3/BAcaCjceLvqPAmFEWN/Q9EejaYCPnpP9gVSoIUJjAngTA/H
nSVxhi/tGqffo/smxrevjr+kYERnH8lDpvEbEG7IzQtt5I69F1TBqrke2wL4jq0r
fRS1Qd2BCT7/sA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:00 2025 by rpki-client