Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          fLwWwZEWFve9FtLcMQ+LE4cHcdXumDrxdmVLrWCbCUo=
Subject key identifier:   C4:56:34:76:BC:C8:2A:7B:77:FF:7A:8C:46:38:D1:17:EA:A1:59:BB
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       01A0C331D6E2C2BACF574F1194F38DD03A5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          184A
Signing time:             Mon 21 Sep 2026 09:00:18 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:18 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:18 +0000
Files and hashes:         1: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: E2Dvrs5ZYzIo143caQrPb8suqYJm7hCRtY5gXorNatc=)
                          2: DRyy__y2K7EoC3QE195_fwyvhlY.roa (hash: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k=)
                          3: HcziY21hi7J6MOALkXuLW-8dQBA.roa (hash: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=)
                          4: WXh1a3ltgTu30URiagI_KDwMbGo.roa (hash: 64yhIhef0pb8wUKGIz8rWX3roZaEhoeQs7iEDhSEElY=)
                          5: gDuKEs-UqY780xSxv1-xf0kWTFw.roa (hash: SaJOGHYO/LblaKrZyPH9uhG8OQHT0aBex0MHrUUtmO8=)
                          6: j4jMnBAcA78bU49fCy36vYc0nRs.roa (hash: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:31:d6:e2:c2:ba:cf:57:4f:11:94:f3:8d:d0:3a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Sep 21 09:00:18 2026 GMT
            Not After : Sep 22 09:00:18 2026 GMT
        Subject: CN=c4563476bcc82a7b77ff7a8c4638d117eaa159bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:99:50:e2:7b:b1:d3:88:b7:aa:07:6c:ed:
                    0e:4d:22:58:9e:08:bf:9b:0b:17:a9:55:bb:68:7e:
                    ec:f3:32:44:42:37:df:28:06:93:43:12:02:73:db:
                    a7:8c:90:23:dd:75:17:ac:f3:3f:7e:be:c6:2f:6d:
                    68:f9:9a:39:79:ae:32:1c:f6:f8:a6:e2:c8:e9:ff:
                    99:36:ff:5f:31:1c:9e:ef:80:b9:e2:07:f3:59:5d:
                    61:9f:92:93:b2:02:ab:e2:33:c4:05:ba:f4:f2:9f:
                    05:4f:17:c2:d4:bf:e9:0a:75:d3:b4:16:cf:58:7e:
                    f8:23:2b:b0:78:24:7f:55:17:15:75:93:1f:42:f7:
                    3a:a3:46:64:d0:6d:52:d7:f7:29:88:78:a3:5d:42:
                    8d:69:8d:8c:78:5a:63:91:30:00:34:2a:ae:19:75:
                    47:7e:80:3d:f5:b8:95:78:6b:40:5b:2b:80:d7:b8:
                    0e:b1:a5:4e:e1:54:87:13:98:8b:43:90:22:e6:ea:
                    09:db:13:9c:b8:09:90:70:5e:5d:46:57:35:6a:cc:
                    e3:a9:39:a8:c9:57:57:5a:30:fb:05:2e:1c:8f:cd:
                    3d:02:5f:5f:8d:62:ee:cc:1d:8c:89:b3:db:2f:88:
                    b4:1c:18:ae:88:5f:6a:ef:b2:43:14:7d:aa:50:78:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:34:76:BC:C8:2A:7B:77:FF:7A:8C:46:38:D1:17:EA:A1:59:BB
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:af:12:a5:07:db:b0:19:61:d5:4e:bc:dc:f9:b3:1a:f5:
         41:40:33:4f:67:07:04:49:4a:26:d6:c9:be:35:ce:a2:16:65:
         43:04:bb:86:b9:58:39:b4:f4:97:3f:b0:14:8e:69:3b:7f:02:
         f2:2a:07:5d:a8:bb:90:c7:f6:8d:9f:71:c3:ad:e1:5e:2c:48:
         f0:75:9a:0f:10:bb:24:28:3e:74:28:a5:04:66:8c:47:17:b6:
         37:46:73:ff:1a:e2:2b:9b:af:13:54:b9:b8:4b:4c:06:d9:18:
         33:fc:7d:eb:f1:ef:b9:42:92:62:a1:de:cf:46:2b:83:08:4a:
         ca:ea:b2:2d:f9:a3:16:29:7d:15:20:0f:07:e4:1e:d9:eb:5c:
         b0:a0:68:20:54:5a:32:95:7f:2b:da:3b:f6:df:e1:3f:dd:81:
         54:59:4c:dd:fd:2d:3a:e5:e3:11:aa:52:b8:e0:f7:a5:00:28:
         5f:29:09:36:3d:a5:99:27:53:6f:4b:cf:c7:84:bd:cb:d6:f8:
         cc:3a:90:61:8e:de:88:3b:5e:29:29:53:cc:7c:c3:4b:b9:97:
         9b:de:99:f4:a6:5a:89:2d:e3:24:c7:b0:b3:fe:bc:1c:10:b6:
         5f:38:d3:f2:df:95:65:7e:ea:fa:c1:e9:db:49:d9:25:df:92:
         a2:f2:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:16:24 2026 by rpki-client