Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File:                     43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier:          EXUjYE2F6dQ+9/hZ/S3exauXAY33Al7WRQmMb5IfVpQ=
Subject key identifier:   6E:70:30:AF:3B:07:40:F0:22:42:67:40:36:40:E6:A4:77:6E:BD:0C
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer:       /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial:       019F90915E1DF4E7EAE3E3C4BB09299115EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number:          1629
Signing time:             Thu 23 Jul 2026 20:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:13 +0000
Files and hashes:         1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: F2I7JbpcAojb1/jdKf9DFkbIHZZ6Nvq1BXB0J4oTLwg=)
                          2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:5e:1d:f4:e7:ea:e3:e3:c4:bb:09:29:91:15:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
        Validity
            Not Before: Jul 23 20:01:13 2026 GMT
            Not After : Jul 24 20:01:13 2026 GMT
        Subject: CN=6e7030af3b0740f0224267403640e6a4776ebd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:23:ed:a4:9f:fe:7c:4d:8c:7b:b0:6e:a2:
                    c1:d9:db:1f:42:b1:65:1d:41:b0:4b:54:ec:d4:d6:
                    ef:ef:29:a9:e0:d0:90:64:2a:6c:8b:b4:08:f9:0d:
                    00:1d:ac:90:6f:73:11:72:50:0d:08:06:50:51:62:
                    cd:c9:0f:25:6c:7c:4e:7a:5a:6d:dc:48:79:18:08:
                    a5:e3:65:69:37:a4:33:fa:eb:42:4f:6f:ed:33:b9:
                    de:57:63:e9:7d:31:3d:7b:d3:70:b4:e8:12:11:da:
                    ff:2d:5c:5c:41:a8:9c:be:b0:5b:63:48:ce:70:95:
                    5b:fc:b7:d1:ce:c0:3d:e8:b0:b3:00:e1:ed:46:5a:
                    34:f5:0b:2d:c2:2b:c6:af:80:60:a7:de:16:b9:46:
                    4a:75:04:5a:11:fb:31:97:e1:20:34:95:5e:97:2c:
                    95:f8:77:e9:cd:b8:e2:ad:1e:dc:64:50:49:29:da:
                    80:b3:2b:c2:56:55:7a:6e:92:dd:55:8a:45:0f:45:
                    30:3d:0b:de:60:aa:86:cb:7b:4d:3d:ef:96:f2:67:
                    8b:e6:11:37:df:8b:28:8e:08:6e:0f:ed:58:a5:af:
                    5a:3b:d9:c6:ab:e6:c4:c5:a9:5c:8c:8a:97:16:e5:
                    26:f2:1c:4e:ba:35:fe:d4:1f:57:da:ff:78:f7:d5:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:70:30:AF:3B:07:40:F0:22:42:67:40:36:40:E6:A4:77:6E:BD:0C
            X509v3 Authority Key Identifier:
                keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:e6:10:2d:9a:ce:ec:73:53:35:6e:f6:fd:a8:85:c7:58:
         4b:0d:00:d2:ca:38:33:88:2c:62:71:12:63:05:10:38:11:e0:
         20:29:d7:c9:6e:44:fe:26:7a:67:6f:17:3d:f6:21:b0:44:31:
         6f:dc:6b:b5:43:23:7f:f0:fb:f8:c6:7d:55:69:e9:1e:83:68:
         3a:e9:c4:a4:07:00:55:0c:7a:93:37:cb:44:ab:87:43:af:09:
         22:96:56:7c:f5:85:c6:f8:b6:e4:6d:c3:01:a7:70:69:ff:8c:
         3d:52:cc:fc:76:0d:6e:08:3f:0e:af:c0:7d:06:9d:03:ae:06:
         16:c5:be:2a:4d:a8:44:f0:59:0b:1d:e2:18:90:b3:88:fd:02:
         59:a0:f3:40:10:06:f2:83:1c:89:e3:ea:d6:ef:d4:ff:4a:3e:
         65:93:53:bf:ac:56:2d:9f:a1:52:06:88:28:74:ef:db:f0:bf:
         ff:62:e9:44:c6:b2:8e:8f:c0:8e:7c:a0:48:83:b5:91:9a:58:
         5f:1b:16:e2:76:47:51:b1:4d:38:28:dc:91:8c:2e:5f:9b:ee:
         66:30:e0:43:e2:77:e0:ae:ad:9d:5f:62:72:e0:32:44:a9:bd:
         c5:19:ee:d0:a2:d4:c9:39:8f:19:35:9c:ec:f0:f9:59:88:b2:
         ae:5b:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:46 2026 by rpki-client