Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File:                     43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier:          3GLvEgApZc+bWNi9MOoIhRYzDGfzT3IsaK2rcwhGQW0=
Subject key identifier:   6B:67:0C:09:B2:3C:32:84:87:5D:7A:D7:89:15:B5:0A:6E:A1:67:EB
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer:       /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial:       0198D85091F2F9DC868F176E2CA8BA6BAC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number:          12AE
Signing time:             Sat 23 Aug 2025 19:03:35 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:35 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:35 +0000
Files and hashes:         1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: cwVy0fkpz8AOWIWNLmcOr9vMZc+N5f7bzHRegoRH1sg=)
                          2: 9PUwFWX6MI5zmQ2Oq6gL-_qhrj0.roa (hash: 3b0NbUCvSpLrWF4vh/o6Yjp7ddJczpbBr1onafxnYgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:91:f2:f9:dc:86:8f:17:6e:2c:a8:ba:6b:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
        Validity
            Not Before: Aug 23 19:03:35 2025 GMT
            Not After : Aug 24 19:03:35 2025 GMT
        Subject: CN=6b670c09b23c3284875d7ad78915b50a6ea167eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:97:2f:59:4a:c3:f8:b4:9f:bc:3d:89:6d:
                    02:d2:a6:48:e4:7d:8e:49:e3:36:10:00:a2:77:37:
                    1f:f3:fb:a3:fa:0d:e8:b9:ea:9f:d1:ff:a6:be:c6:
                    0e:6d:2e:e6:92:37:74:22:c3:0b:31:85:ae:75:2c:
                    b0:1f:20:b3:10:7e:f2:b4:dd:55:88:2e:b8:d9:2c:
                    5b:0c:b5:96:c1:aa:4d:ca:b6:1f:79:87:d9:57:49:
                    4e:a8:73:04:05:aa:fc:7d:b6:4a:c9:9b:b4:35:35:
                    b2:46:a7:7b:7f:46:96:23:39:8a:d0:96:bb:ef:11:
                    fb:75:ca:be:47:7b:59:6b:f7:1c:db:3e:40:ba:d5:
                    ff:0a:06:f2:e9:a8:9d:02:2b:46:d0:a6:fe:0d:73:
                    70:62:41:c5:f5:dd:01:db:0d:a0:70:39:a7:bf:f7:
                    f6:5f:ff:52:77:d2:45:ec:54:82:32:96:2b:09:f9:
                    d8:2a:1a:c8:99:2e:b3:aa:7f:cc:46:88:75:34:05:
                    3e:9c:60:2e:c1:89:6a:04:cb:32:75:8c:96:d6:4d:
                    18:ac:93:61:cf:d5:b8:4d:4e:f8:5f:c4:88:21:66:
                    78:38:09:da:7f:f9:64:ac:e4:4b:01:ef:b1:d0:4a:
                    31:c9:23:11:68:f0:67:39:9c:66:cd:69:a9:3f:eb:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:67:0C:09:B2:3C:32:84:87:5D:7A:D7:89:15:B5:0A:6E:A1:67:EB
            X509v3 Authority Key Identifier:
                keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:05:77:fb:2e:03:c1:1b:1f:36:04:63:f1:f0:eb:b0:14:5e:
         fd:fb:3a:86:ba:d8:3f:10:67:d0:82:21:c0:db:aa:72:e9:ea:
         dc:fc:c0:9f:19:2e:ad:88:c6:4e:a7:d9:7a:3d:c9:35:87:79:
         01:5e:d5:cf:46:65:96:33:77:22:a9:db:27:e1:9f:93:87:cb:
         31:65:40:f3:61:b4:5f:e2:bb:c1:79:f0:4e:87:b1:76:c8:81:
         be:cb:fe:e6:39:40:73:ce:66:a1:d8:11:e9:68:20:62:45:91:
         6e:c2:06:53:7b:ce:db:08:7c:ab:36:bf:d0:24:ff:bf:36:3b:
         f0:c8:e8:ac:c5:26:07:e2:b4:0b:e0:ac:76:4b:79:f8:f3:15:
         90:b1:4a:a6:21:ac:73:82:70:3b:a6:40:d8:be:e0:f1:3f:60:
         fe:98:d0:75:47:da:88:5c:f1:49:43:91:e5:64:7f:ca:0d:7e:
         60:6e:f7:b1:52:06:1d:f0:8f:08:bc:c7:3c:df:ec:ca:e2:8d:
         a1:01:76:e4:15:73:71:fb:2f:f4:74:b7:e3:2b:4d:72:5c:3c:
         10:3c:43:5a:eb:6f:4e:cd:81:2c:a5:31:64:58:ed:e0:51:2d:
         58:8f:36:64:a6:53:b3:81:fc:93:6e:9e:df:eb:f3:43:c7:ae:
         cd:2f:31:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUJHy+dyGjxduLKi6a6x1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4
YzdkNGEwHhcNMjUwODIzMTkwMzM1WhcNMjUwODI0MTkwMzM1WjAzMTEwLwYDVQQD
Eyg2YjY3MGMwOWIyM2MzMjg0ODc1ZDdhZDc4OTE1YjUwYTZlYTE2N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gKXL1lKw/i0n7w9iW0C0qZI5H2O
SeM2EACidzcf8/uj+g3oueqf0f+mvsYObS7mkjd0IsMLMYWudSywHyCzEH7ytN1V
iC642SxbDLWWwapNyrYfeYfZV0lOqHMEBar8fbZKyZu0NTWyRqd7f0aWIzmK0Ja7
7xH7dcq+R3tZa/cc2z5AutX/Cgby6aidAitG0Kb+DXNwYkHF9d0B2w2gcDmnv/f2
X/9Sd9JF7FSCMpYrCfnYKhrImS6zqn/MRoh1NAU+nGAuwYlqBMsydYyW1k0YrJNh
z9W4TU74X8SIIWZ4OAnaf/lkrORLAe+x0EoxySMRaPBnOZxmzWmpP+t3twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtnDAmyPDKEh11614kVtQpuoWfrMB8GA1UdIwQY
MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt
NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1
LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQV3+y4D
wRsfNgRj8fDrsBRe/fs6hrrYPxBn0IIhwNuqcunq3PzAnxkurYjGTqfZej3JNYd5
AV7Vz0ZlljN3IqnbJ+Gfk4fLMWVA82G0X+K7wXnwToexdsiBvsv+5jlAc85modgR
6WggYkWRbsIGU3vO2wh8qza/0CT/vzY78MjorMUmB+K0C+Csdkt5+PMVkLFKpiGs
c4JwO6ZA2L7g8T9g/pjQdUfaiFzxSUOR5WR/yg1+YG73sVIGHfCPCLzHPN/syuKN
oQF25BVzcfsv9HS34ytNclw8EDxDWutvTs2BLKUxZFjt4FEtWI82ZKZTs4H8k26e
3+vzQ8euzS8x5g==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:11 2025 by rpki-client