Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File:                     ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier:          bp4X1tLrbmpWNrjeZhCOtuklqMfbxH9/Vo1LoX7A3fk=
Subject key identifier:   D6:B7:F8:7B:ED:50:43:83:00:8C:24:F6:CE:92:9C:07:F8:3E:D7:5A
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer:       /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial:       0198A04D335AB0B56917B35EDD33F5F78C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number:          0B60
Signing time:             Tue 12 Aug 2025 22:01:10 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:10 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:10 +0000
Files and hashes:         1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
                          2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: aK7ap0Ltw8A06CVIKBg9iqKFVMMT/tZfhyFKNx/iyok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:33:5a:b0:b5:69:17:b3:5e:dd:33:f5:f7:8c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
        Validity
            Not Before: Aug 12 22:01:10 2025 GMT
            Not After : Aug 13 22:01:10 2025 GMT
        Subject: CN=d6b7f87bed504383008c24f6ce929c07f83ed75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:a9:10:08:28:f0:61:7a:73:ba:53:d3:15:
                    14:3e:01:fe:bc:bb:15:9e:1a:00:2f:78:74:4d:77:
                    21:8a:97:5c:e6:54:87:32:ef:30:94:8a:7a:70:45:
                    dd:7a:a7:14:f4:d1:11:b0:76:de:fa:0a:1b:c2:aa:
                    81:ce:da:b4:17:ab:89:34:3e:9b:e7:d1:ca:ac:ee:
                    d1:be:aa:0e:50:c8:a0:7b:21:e0:c4:59:d9:3e:44:
                    e5:46:41:11:58:1c:74:98:8b:26:4c:f8:29:f7:ba:
                    6e:d1:94:0a:2c:92:26:c0:73:18:2d:ea:c6:3f:84:
                    eb:4a:ef:6b:20:60:a5:f7:69:ef:e7:6e:52:68:ab:
                    97:93:cb:95:66:46:18:7a:07:8f:b7:ba:39:b2:bd:
                    a0:78:c0:33:4d:8d:2d:a3:73:f2:e4:89:16:b3:14:
                    e4:9b:76:9d:cc:84:c3:23:24:06:94:5c:34:26:cd:
                    9c:65:c7:1f:51:49:26:87:95:1a:9f:43:e3:37:87:
                    11:d1:7c:88:b8:77:08:7d:54:fc:c9:0b:e4:21:b6:
                    70:2f:11:65:78:34:02:dc:e4:83:68:99:6f:14:21:
                    2a:18:ac:2c:aa:2c:36:7a:a3:f8:23:f4:14:07:c1:
                    0d:8f:70:27:9b:3a:29:12:fd:be:72:34:81:27:aa:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B7:F8:7B:ED:50:43:83:00:8C:24:F6:CE:92:9C:07:F8:3E:D7:5A
            X509v3 Authority Key Identifier:
                keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:40:c8:c2:da:10:ea:16:e0:17:2c:77:41:4b:3c:ac:f8:16:
         47:85:a0:7d:6e:49:d9:07:ca:c9:dd:68:83:39:61:2e:f1:18:
         e6:43:f2:7f:d9:73:43:cd:cf:44:a3:cf:25:fa:86:de:64:fd:
         5f:8b:d9:70:7a:54:b2:1c:f9:fd:ca:c8:56:a0:bd:e0:94:6c:
         0e:cc:6a:d8:19:f2:b2:48:28:93:71:4c:78:ac:5a:17:a5:d6:
         2d:ef:b2:88:5b:15:c8:35:6b:b4:e5:89:54:92:ee:04:c3:3b:
         86:03:3d:1c:dc:a7:56:14:68:16:4c:34:b8:25:37:91:02:cc:
         d8:c7:d4:da:45:ff:6d:29:ac:bc:b0:c9:5d:8d:da:a5:d4:79:
         22:2f:74:b4:70:39:2b:f7:e2:23:c7:e3:1d:70:67:e2:cc:d2:
         12:8f:12:b3:81:b4:d9:b1:c5:bd:1e:78:fa:f3:d9:de:05:af:
         5f:f3:35:c0:38:8c:ac:0c:2e:b5:68:05:43:fb:ac:13:1a:be:
         d2:56:d3:8d:83:e4:04:74:b9:f1:c3:93:a1:da:25:a5:c1:5c:
         76:93:be:82:1b:80:09:36:86:d2:3a:e3:22:81:c2:79:66:d4:
         d5:67:3d:56:6d:3f:c1:99:0e:26:52:cc:17:d6:f6:3d:21:41:
         9c:df:ab:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTTNasLVpF7Ne3TP194xMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1
OWY0YmYwHhcNMjUwODEyMjIwMTEwWhcNMjUwODEzMjIwMTEwWjAzMTEwLwYDVQQD
EyhkNmI3Zjg3YmVkNTA0MzgzMDA4YzI0ZjZjZTkyOWMwN2Y4M2VkNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc+pEAgo8GF6c7pT0xUUPgH+vLsV
nhoAL3h0TXchipdc5lSHMu8wlIp6cEXdeqcU9NERsHbe+gobwqqBztq0F6uJND6b
59HKrO7RvqoOUMigeyHgxFnZPkTlRkERWBx0mIsmTPgp97pu0ZQKLJImwHMYLerG
P4TrSu9rIGCl92nv525SaKuXk8uVZkYYegePt7o5sr2geMAzTY0to3Py5IkWsxTk
m3adzITDIyQGlFw0Js2cZccfUUkmh5Uan0PjN4cR0XyIuHcIfVT8yQvkIbZwLxFl
eDQC3OSDaJlvFCEqGKwsqiw2eqP4I/QUB8ENj3AnmzopEv2+cjSBJ6pzlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa3+HvtUEODAIwk9s6SnAf4PtdaMB8GA1UdIwQY
MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt
NjcxYTFmMGFmMDU5LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5
LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkDIwtoQ
6hbgFyx3QUs8rPgWR4WgfW5J2QfKyd1ogzlhLvEY5kPyf9lzQ83PRKPPJfqG3mT9
X4vZcHpUshz5/crIVqC94JRsDsxq2Bnyskgok3FMeKxaF6XWLe+yiFsVyDVrtOWJ
VJLuBMM7hgM9HNynVhRoFkw0uCU3kQLM2MfU2kX/bSmsvLDJXY3apdR5Ii90tHA5
K/fiI8fjHXBn4szSEo8Ss4G02bHFvR54+vPZ3gWvX/M1wDiMrAwutWgFQ/usExq+
0lbTjYPkBHS58cOTodolpcFcdpO+ghuACTaG0jrjIoHCeWbU1Wc9Vm0/wZkOJlLM
F9b2PSFBnN+rhw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:35 2025 by rpki-client