Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File:                     43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier:          vNdRnctXzLTJoVzlWCdteqJ3heSJyvSXu5MEKcp2Z7s=
Subject key identifier:   70:15:F7:43:C0:A5:40:73:D8:19:30:17:AD:02:8E:1D:DE:3A:E2:58
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer:       /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial:       01A00093CA9C033D5FC11C9C237433E6D1AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number:          1663
Signing time:             Fri 14 Aug 2026 14:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:20 +0000
Files and hashes:         1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: 1cPbbD3OuqozsvF1b1X55RqoxJ8IwQJowzJEObhaiZk=)
                          2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:ca:9c:03:3d:5f:c1:1c:9c:23:74:33:e6:d1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
        Validity
            Not Before: Aug 14 14:01:20 2026 GMT
            Not After : Aug 15 14:01:20 2026 GMT
        Subject: CN=7015f743c0a54073d8193017ad028e1dde3ae258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:a0:21:c6:0d:52:c8:9d:93:90:31:b1:73:
                    6a:22:a8:78:c6:da:55:93:bc:19:dd:5d:90:21:d6:
                    82:ac:5f:7a:3b:41:eb:c1:d6:08:73:78:f3:ac:50:
                    76:27:85:8f:fb:45:71:a3:0a:85:3f:d3:53:27:05:
                    50:48:73:a4:52:b6:e2:e2:a9:29:be:62:19:53:64:
                    39:ea:b8:d9:e3:78:82:bf:d0:c6:f6:fd:87:df:c2:
                    d8:b7:95:76:c0:73:cc:da:00:71:d0:6d:e5:4b:41:
                    98:f0:21:dd:66:21:8e:db:c1:f2:ce:19:bb:c2:a8:
                    92:93:2a:79:24:1c:87:84:b9:72:3c:89:86:f0:2e:
                    15:be:0c:4c:77:9f:e6:f7:21:f4:16:ab:54:ba:86:
                    9a:41:1d:4b:13:44:03:0c:33:3d:e7:7b:3c:55:61:
                    bb:15:01:80:e6:02:9f:51:47:82:7d:92:c0:d5:72:
                    14:37:9b:45:de:05:df:0d:d2:eb:fd:bb:76:1d:5b:
                    e7:39:d4:3a:30:5b:a2:ef:83:ef:ba:df:9c:00:17:
                    0b:05:6a:e0:1b:0f:a0:63:37:2b:f8:99:4e:7e:5e:
                    92:9d:d0:19:ea:c9:f3:f7:ba:92:db:a8:5e:97:b7:
                    49:5f:05:2b:92:f5:b2:96:35:f4:97:10:d4:5e:42:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:15:F7:43:C0:A5:40:73:D8:19:30:17:AD:02:8E:1D:DE:3A:E2:58
            X509v3 Authority Key Identifier:
                keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:9c:15:ad:af:3f:1e:bd:e1:e1:0f:e5:ee:b9:dd:c1:0d:61:
         7b:92:0a:3d:3c:32:28:57:4b:9f:79:45:e2:c6:54:4f:a8:a3:
         21:98:6b:c8:17:b0:18:82:50:3c:ff:dd:73:91:35:fd:84:b9:
         6d:e2:b5:c4:8a:fb:cf:d5:71:6e:38:96:75:e5:53:58:cc:15:
         86:b2:3a:6e:b0:b2:51:fc:6f:65:8e:cc:0d:d4:83:ed:32:cc:
         28:fc:d7:df:9c:78:98:fa:04:d9:55:79:ec:7c:c4:90:fb:1b:
         d4:04:f2:98:13:e6:56:18:13:2f:c3:54:86:ab:8e:2f:66:3e:
         0e:ac:d5:f6:63:8f:ff:84:ce:a1:7a:4d:0c:9b:94:d3:98:14:
         83:e4:c5:61:bc:94:c8:7d:2b:fd:04:7d:73:23:00:9b:31:ee:
         68:ca:a8:5c:a8:2d:24:c9:c6:21:b4:32:5f:ec:6e:33:01:ec:
         f1:0d:94:5c:49:85:74:63:ee:af:0b:2d:60:f2:83:8f:9e:21:
         d1:9e:ae:c2:3d:77:7e:79:79:da:d7:7c:dc:35:b3:1f:68:65:
         a0:56:c3:a4:06:4b:8c:d1:f2:eb:2b:31:af:5f:5d:d2:df:5b:
         0c:02:ae:13:81:c6:2d:21:f9:8f:4b:83:80:18:b9:03:5c:7d:
         89:a1:66:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk8qcAz1fwRycI3Qz5tGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4
YzdkNGEwHhcNMjYwODE0MTQwMTIwWhcNMjYwODE1MTQwMTIwWjAzMTEwLwYDVQQD
Eyg3MDE1Zjc0M2MwYTU0MDczZDgxOTMwMTdhZDAyOGUxZGRlM2FlMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZSgIcYNUsidk5AxsXNqIqh4xtpV
k7wZ3V2QIdaCrF96O0HrwdYIc3jzrFB2J4WP+0VxowqFP9NTJwVQSHOkUrbi4qkp
vmIZU2Q56rjZ43iCv9DG9v2H38LYt5V2wHPM2gBx0G3lS0GY8CHdZiGO28Hyzhm7
wqiSkyp5JByHhLlyPImG8C4VvgxMd5/m9yH0FqtUuoaaQR1LE0QDDDM953s8VWG7
FQGA5gKfUUeCfZLA1XIUN5tF3gXfDdLr/bt2HVvnOdQ6MFui74Pvut+cABcLBWrg
Gw+gYzcr+JlOfl6SndAZ6snz97qS26hel7dJXwUrkvWyljX0lxDUXkL7lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAV90PApUBz2BkwF60Cjh3eOuJYMB8GA1UdIwQY
MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt
NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1
LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzpwVra8/
Hr3h4Q/l7rndwQ1he5IKPTwyKFdLn3lF4sZUT6ijIZhryBewGIJQPP/dc5E1/YS5
beK1xIr7z9VxbjiWdeVTWMwVhrI6brCyUfxvZY7MDdSD7TLMKPzX35x4mPoE2VV5
7HzEkPsb1ATymBPmVhgTL8NUhquOL2Y+DqzV9mOP/4TOoXpNDJuU05gUg+TFYbyU
yH0r/QR9cyMAmzHuaMqoXKgtJMnGIbQyX+xuMwHs8Q2UXEmFdGPurwstYPKDj54h
0Z6uwj13fnl52td83DWzH2hloFbDpAZLjNHy6ysxr19d0t9bDAKuE4HGLSH5j0uD
gBi5A1x9iaFm0g==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:04 2026 by rpki-client