Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          pcC8PW3SNoHgf8loAwNHbvp0iyqiwzop7QnCxwgr4Tg=
Subject key identifier:   9C:59:75:F0:3D:22:C3:EF:9A:CD:1E:B6:C6:A7:82:E1:C5:AA:D4:03
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       01987A89A09B45D78B730C8BA78BC51E7999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          13FE
Signing time:             Tue 05 Aug 2025 14:01:36 +0000
Manifest this update:     Tue 05 Aug 2025 14:01:36 +0000
Manifest next update:     Wed 06 Aug 2025 14:01:36 +0000
Files and hashes:         1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=)
                          2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: +znF0knEErTQDy5zbGY90lpP6apx1GMTkp6XFsFG/A4=)
                          3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=)
                          4: l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa (hash: hEUKFB0sE9+M5Wt+beBFFpJfarlKNek9YnFoHsLRVt4=)
                          5: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:89:a0:9b:45:d7:8b:73:0c:8b:a7:8b:c5:1e:79:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Aug  5 14:01:36 2025 GMT
            Not After : Aug  6 14:01:36 2025 GMT
        Subject: CN=9c5975f03d22c3ef9acd1eb6c6a782e1c5aad403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:df:1c:d6:49:9b:88:5e:84:49:9a:bf:3e:
                    a0:a4:61:02:70:81:7a:c2:8e:8e:6b:70:73:f4:d4:
                    7d:87:f8:87:a2:ac:db:82:69:a9:af:2d:f1:e4:4b:
                    b5:59:db:89:7a:92:f9:41:07:b2:88:40:37:c2:cf:
                    02:f6:c8:2a:e4:d6:02:7d:ff:d8:41:1d:ae:5c:40:
                    e4:1a:f5:ef:4b:59:e0:ea:cb:90:c4:61:8a:f6:fe:
                    27:aa:ec:1f:f0:7a:73:16:7a:23:d2:3a:c6:c6:f2:
                    ec:aa:ed:e8:3d:9e:ff:51:b6:56:53:1f:fb:d6:dc:
                    e5:10:6e:a9:eb:e2:2c:be:d7:e5:cf:7e:e6:0b:94:
                    31:5d:37:23:ff:c0:11:4a:1f:29:2c:46:13:6d:2b:
                    1b:64:8a:4f:ce:03:d4:c4:2b:d4:34:84:3d:13:31:
                    6b:ab:eb:50:a8:44:f2:85:82:71:76:27:5a:52:29:
                    f3:cf:dc:1a:20:a3:2e:57:94:7b:70:fc:59:28:dd:
                    0e:a8:45:53:c5:85:60:60:d9:6e:b9:68:32:f1:bb:
                    9a:bc:d2:0d:3d:f1:eb:ad:85:dd:4f:84:01:e8:de:
                    9f:72:4e:43:0d:66:1a:cc:34:e6:39:85:42:6a:bd:
                    9c:a8:fa:f0:bc:86:be:e9:7e:f5:b4:eb:cf:64:0f:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:59:75:F0:3D:22:C3:EF:9A:CD:1E:B6:C6:A7:82:E1:C5:AA:D4:03
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:2a:cc:af:2b:e1:e2:ed:7d:16:22:53:47:2c:b8:21:e8:
         03:a1:31:13:92:d8:7e:95:c9:84:86:28:6d:3b:ea:17:ab:44:
         c5:80:6b:b9:56:74:50:b2:be:1d:59:78:f1:7f:c7:4d:5a:04:
         2a:0d:b3:c6:56:54:53:75:5a:b6:b5:20:a3:ee:9d:4c:bc:81:
         50:c1:ea:ab:8a:99:08:83:74:f5:76:4f:12:13:82:3f:b5:cf:
         3c:d0:72:bd:90:3b:f0:d1:e2:40:cd:33:c7:47:54:91:ca:ad:
         cd:29:8c:fc:e6:83:ea:0a:25:8d:4b:37:7b:79:75:e9:a0:57:
         02:e7:27:bc:dc:9c:45:a4:c3:19:f1:89:cb:d3:7b:b8:0b:1b:
         fb:b2:6b:83:ad:e5:d9:3d:c2:fd:dd:3a:bd:90:a8:43:60:de:
         7e:74:ad:89:cb:ee:1a:8f:c1:f6:3a:37:d7:1e:1e:2c:98:07:
         c2:6b:76:81:04:9f:a7:26:91:e7:a8:ad:96:2a:43:9e:b3:1c:
         b1:32:e7:eb:1c:c9:d7:de:7b:f2:05:75:07:8a:5e:99:dc:8f:
         ca:8f:db:da:42:33:cb:03:b8:d5:36:c7:f1:4f:92:a6:53:41:
         a8:76:45:46:07:af:ae:68:a5:c0:92:b8:bd:1d:4d:96:65:6e:
         05:35:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:07:36 2025 by rpki-client