Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File:                     ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier:          8+zhmkfYW0kJGqUV6yREOkumHDBJflo1+eG+N/QP/7s=
Subject key identifier:   B8:6B:D4:4D:06:A7:98:4F:2A:FE:DC:1C:3F:FA:0A:49:8E:98:EB:8E
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer:       /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial:       0196C12627252E822B959FAE59CB54E17AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number:          0A68
Signing time:             Sun 11 May 2025 21:00:25 +0000
Manifest this update:     Sun 11 May 2025 21:00:25 +0000
Manifest next update:     Mon 12 May 2025 21:00:25 +0000
Files and hashes:         1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
                          2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: dp/FZEBKuUZds2snGcDeEUb33Yk2Dw8zyBmKzfIf474=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:27:25:2e:82:2b:95:9f:ae:59:cb:54:e1:7a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
        Validity
            Not Before: May 11 21:00:25 2025 GMT
            Not After : May 12 21:00:25 2025 GMT
        Subject: CN=b86bd44d06a7984f2afedc1c3ffa0a498e98eb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8b:3a:fe:c9:89:25:14:84:33:88:12:63:b3:
                    eb:65:3c:69:52:eb:b2:0e:11:2b:90:d4:94:8f:f1:
                    28:58:52:7f:d1:4f:40:51:99:72:75:2b:70:02:58:
                    a9:11:85:62:0c:de:82:5e:db:b9:36:75:74:71:94:
                    e4:28:b1:ed:22:8c:93:24:18:45:e8:27:4d:42:ca:
                    42:1a:de:32:c0:d8:fe:f0:c4:20:c1:a0:f6:8f:c7:
                    f5:88:01:d3:50:e6:cd:58:6a:a8:4f:66:3a:e5:38:
                    5b:ae:0f:07:35:76:d6:61:da:ee:40:68:59:68:66:
                    de:ca:1e:8e:58:36:f7:7a:fe:f0:b7:20:a4:19:85:
                    c0:93:72:4d:dd:27:1e:ac:b1:8f:d7:ea:5b:5f:81:
                    d8:98:34:06:13:46:2c:19:15:e0:a2:3c:5b:74:cc:
                    a0:9c:5a:ad:e3:22:66:26:50:60:31:78:a9:8a:73:
                    47:e2:9d:83:26:44:a7:a6:9c:51:4e:57:6f:29:14:
                    49:88:9b:7c:3e:2f:d2:59:ef:b0:91:53:66:fb:0d:
                    2f:37:25:14:af:33:01:e8:af:9c:df:e9:ae:86:09:
                    83:34:1c:0c:05:82:59:3a:e3:a3:db:bc:70:fa:ba:
                    37:6a:da:18:3d:e4:97:f2:10:59:a4:f6:5c:f7:30:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:D4:4D:06:A7:98:4F:2A:FE:DC:1C:3F:FA:0A:49:8E:98:EB:8E
            X509v3 Authority Key Identifier:
                keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:6a:06:dd:f5:64:4c:85:6e:4f:a1:67:4c:48:f0:37:fc:
         4e:3f:7c:73:10:f2:12:7a:18:cb:a2:1b:6f:3f:aa:1d:76:ea:
         fd:b3:b6:fb:0f:46:1d:aa:a9:74:c3:21:20:5a:2f:7d:7a:5d:
         ad:f9:1b:40:73:28:3a:34:cc:f7:8a:40:37:5f:0e:18:b3:80:
         db:52:5c:25:5d:a2:c5:4e:88:85:36:7c:bc:73:e9:d5:e8:7f:
         10:6f:e1:e0:08:87:19:57:4f:02:85:15:e5:0f:88:53:33:70:
         f2:c3:c6:0f:7d:65:04:3f:0e:72:3d:c6:5e:8b:09:70:cb:63:
         f3:fa:85:29:6c:5a:dd:49:e1:ff:e9:ab:6f:d5:70:83:2b:ca:
         ba:e0:c4:9a:1f:31:55:e8:60:4b:da:5a:7b:7b:5b:13:83:d1:
         78:33:fc:a9:12:98:57:3a:1c:74:91:d8:bf:7e:bf:23:34:43:
         cf:9a:75:89:55:1d:9c:49:87:83:b9:23:82:1b:89:84:2e:6b:
         6a:57:14:26:43:ed:9b:8e:a4:73:b8:b0:f7:16:a2:c4:8f:8a:
         31:5d:d9:b1:f6:e6:6e:d0:00:e0:c0:b7:23:35:0d:a1:22:7b:
         3a:00:98:d8:0e:bf:c3:05:f0:ad:60:03:d1:1b:e8:7f:a1:d6:
         c0:2e:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:14 2025 by rpki-client