Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          DggWuoqcHXTt/f/2Uhm7jmRzFFOa+VoQ79Gg6cF5NhM=
Subject key identifier:   28:E5:F8:60:35:B0:FD:26:ED:C2:08:E5:3E:7E:4E:BB:B4:47:CA:E1
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       01A1C02EEED321F88F4358A3C569E763C946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          18CD
Signing time:             Mon 09 Nov 2026 12:01:03 +0000
Manifest this update:     Mon 09 Nov 2026 12:01:03 +0000
Manifest next update:     Tue 10 Nov 2026 12:01:03 +0000
Files and hashes:         1: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: f61POnRnWHGnROZx2dInjmUJz4PguAYsJP/lePgbLig=)
                          2: DRyy__y2K7EoC3QE195_fwyvhlY.roa (hash: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k=)
                          3: HcziY21hi7J6MOALkXuLW-8dQBA.roa (hash: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=)
                          4: WXh1a3ltgTu30URiagI_KDwMbGo.roa (hash: 64yhIhef0pb8wUKGIz8rWX3roZaEhoeQs7iEDhSEElY=)
                          5: gDuKEs-UqY780xSxv1-xf0kWTFw.roa (hash: SaJOGHYO/LblaKrZyPH9uhG8OQHT0aBex0MHrUUtmO8=)
                          6: j4jMnBAcA78bU49fCy36vYc0nRs.roa (hash: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c0:2e:ee:d3:21:f8:8f:43:58:a3:c5:69:e7:63:c9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Nov  9 12:01:03 2026 GMT
            Not After : Nov 10 12:01:03 2026 GMT
        Subject: CN=28e5f86035b0fd26edc208e53e7e4ebbb447cae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:82:d1:eb:2a:21:a9:ba:6a:e4:17:46:a4:
                    6a:ac:55:b9:55:69:0c:e5:af:6b:fc:c1:09:41:18:
                    ac:ad:c2:13:a3:78:6c:1d:00:5f:fb:9d:96:9c:af:
                    44:42:91:79:cb:81:ad:9e:15:85:da:7f:de:d3:98:
                    37:70:67:3d:b9:ec:8b:e6:5c:dc:8e:51:e3:60:92:
                    15:3d:54:cd:58:59:22:42:50:2d:75:85:4d:cf:05:
                    59:a7:b1:12:01:26:24:43:0b:57:5e:b7:c6:e7:09:
                    e1:89:68:58:dd:25:53:e0:3c:3f:1d:bf:eb:38:17:
                    e2:a2:da:c0:1a:2a:84:57:d8:ac:38:b3:10:14:02:
                    48:a6:5a:89:8f:b8:b5:6e:b5:82:1b:c3:80:c9:7a:
                    74:c7:31:e9:16:75:72:53:25:86:a0:5b:de:3a:d2:
                    9f:7e:c4:c7:80:c7:01:ba:e6:eb:eb:ee:5c:ec:15:
                    bd:ae:d5:90:7e:7c:12:83:35:6e:16:8e:25:7a:9a:
                    37:c0:2c:6a:18:bd:02:7d:d2:4b:e8:e5:df:c1:62:
                    bd:8b:09:53:f8:64:4e:ba:86:28:09:d6:e7:b2:23:
                    c8:73:18:9f:5f:74:3f:45:f6:12:06:7a:11:e7:de:
                    7f:47:5a:19:b1:ce:0b:80:0a:ed:03:33:8c:69:32:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:F8:60:35:B0:FD:26:ED:C2:08:E5:3E:7E:4E:BB:B4:47:CA:E1
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:da:a9:dd:6e:c5:c8:e4:11:90:51:5c:c6:73:de:5f:15:67:
         2b:54:86:79:da:7b:5b:1f:14:ac:0b:38:fa:e1:8a:60:0a:2f:
         a6:f0:d3:4d:30:dc:b5:a5:61:6b:17:af:2b:f5:6a:85:66:67:
         a5:32:1b:2b:63:0f:c1:74:8e:c3:79:29:a3:1e:14:51:47:95:
         ec:8c:36:d7:b1:e0:54:9e:dc:80:8a:31:e0:6d:07:a5:2b:2f:
         5b:3f:c3:f5:49:d0:cc:1e:cf:b0:2d:2e:4f:0e:a8:8d:ca:41:
         b4:6d:8b:a3:fb:51:35:75:6f:2e:c5:c0:f0:62:f8:99:b5:36:
         f8:29:e5:aa:70:7a:c2:09:8b:b7:e4:52:16:4d:4b:4d:82:a1:
         03:32:fa:75:9f:46:de:b2:72:e7:92:89:07:ff:14:20:bc:76:
         13:f1:ae:ec:c7:b8:71:a7:3c:8b:8e:9e:b9:9a:8c:d6:e5:e5:
         c7:1e:31:6d:e4:63:7f:ac:8b:2d:4d:9a:5e:6b:c3:d1:9f:e0:
         24:18:24:f3:52:6b:bc:f5:cf:96:03:49:2c:71:88:1e:aa:3b:
         83:8a:e8:42:aa:b9:40:30:4b:c4:d3:99:40:72:12:22:03:a7:
         4a:01:38:e6:66:db:aa:04:01:c3:96:b7:cb:1c:51:0b:ff:b8:
         85:3b:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 21:17:23 2026 by rpki-client