Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File:                     43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier:          cVDmFNs+0JvrQ+7UMVRpPXGPJprlK0canuIoOZdIAxE=
Subject key identifier:   C6:E5:74:E4:9A:87:B4:A9:F3:24:4C:0E:02:F8:24:EA:28:C5:50:1A
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer:       /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial:       019FA9AC568C055B14CBB6736DEB42841A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number:          1636
Signing time:             Tue 28 Jul 2026 17:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:11 +0000
Files and hashes:         1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: gfkwRciHK8ZPkZj+UqvSMfZlHuc/5beUw4rrxfTo5e0=)
                          2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:56:8c:05:5b:14:cb:b6:73:6d:eb:42:84:1a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
        Validity
            Not Before: Jul 28 17:01:11 2026 GMT
            Not After : Jul 29 17:01:11 2026 GMT
        Subject: CN=c6e574e49a87b4a9f3244c0e02f824ea28c5501a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:e2:de:43:d5:73:f4:47:14:d3:23:9f:d2:
                    64:02:4c:57:2b:98:f1:01:e2:a4:0c:32:40:65:80:
                    22:4c:1c:02:42:13:9a:af:4a:95:67:d8:df:64:55:
                    52:bd:69:6a:af:8f:0e:60:69:10:1e:a9:af:23:d3:
                    49:b6:9b:0b:b0:77:e3:14:4b:13:ce:45:14:8f:49:
                    56:d6:20:b9:fc:61:30:1d:39:4f:b3:d4:06:03:55:
                    80:66:59:c9:57:0c:f2:e7:d6:23:11:c9:77:46:12:
                    9a:0a:7a:c7:71:cc:23:03:53:e0:85:d0:7a:09:de:
                    e6:0f:8c:02:72:d8:6d:9a:a6:0b:4b:88:47:e9:68:
                    7c:d0:92:5b:59:98:96:b9:5b:93:9a:d2:40:79:b9:
                    cb:9d:2e:f9:c1:9e:c8:f9:1e:d3:1a:92:5a:0f:2b:
                    10:59:10:c4:2e:f1:64:6f:ba:ad:6e:d4:6e:f8:bf:
                    b2:88:f4:9c:e6:c9:04:70:db:fe:21:2b:10:4b:2f:
                    06:ce:bd:0e:57:79:46:5d:c7:c2:ab:c9:85:d3:b5:
                    bf:b8:7e:7f:98:02:e3:be:4b:85:85:ba:68:fd:c3:
                    cd:e7:3e:4b:55:a3:f5:09:bc:f0:4e:32:6f:5a:b9:
                    c9:d8:c5:e2:23:d2:ac:5b:d1:4c:a1:85:d5:aa:50:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E5:74:E4:9A:87:B4:A9:F3:24:4C:0E:02:F8:24:EA:28:C5:50:1A
            X509v3 Authority Key Identifier:
                keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cf:a1:7c:72:9f:f3:03:b3:5a:96:32:66:0f:e8:60:3f:dd:
         1f:26:ed:d8:d0:9f:e3:04:19:b3:ea:35:11:1d:b9:b7:48:89:
         a2:94:83:b3:b4:10:48:af:0e:67:f5:f0:f8:84:b9:51:cb:4f:
         bb:66:68:1d:d8:67:82:6d:b8:1a:64:39:31:18:59:20:a3:fb:
         51:77:d4:80:d2:b0:00:48:8d:0b:ba:e6:ac:78:a7:9c:3c:64:
         b7:e5:5a:f6:97:36:0b:57:a4:35:9f:64:ee:1e:ad:49:37:64:
         a9:9b:92:b1:55:ce:12:b5:a2:ad:ec:df:ec:2f:8f:19:11:89:
         39:c5:8f:28:51:ce:5f:21:d5:09:bb:19:2e:36:21:ef:e5:aa:
         ba:8f:47:90:4a:46:88:18:3a:04:8c:ad:78:af:fb:68:cc:36:
         5d:9c:ff:4c:01:cc:74:2e:ba:a9:bd:9c:c6:39:2d:71:08:b9:
         24:7d:cc:3c:17:12:bf:2a:d0:24:10:ff:43:64:2a:6d:d2:60:
         00:e1:d7:56:48:ac:20:7b:c9:55:30:2e:8b:09:2f:7f:d5:9f:
         31:b2:15:8b:9b:9d:01:01:6b:25:ac:56:e0:da:74:6d:07:b6:
         15:d1:f1:34:6f:6d:4b:b8:9f:e9:a8:08:61:0a:b1:c4:09:b1:
         96:be:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:09 2026 by rpki-client