Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          vK5VYxl+AGQ8ojPmlMpiRExqvV8V8imAGoJQANIDIq0=
Subject key identifier:   8B:09:E5:79:66:9C:F7:36:61:EE:1E:AD:6D:09:36:8A:FD:0B:2B:35
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       019A51BEADD9F62C6A977B592917C165E356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          14F3
Signing time:             Wed 05 Nov 2025 02:00:41 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:41 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:41 +0000
Files and hashes:         1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=)
                          2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: 6YgoJ99kIdF0WMRoWdcchlittA+fHGzR/STR2dluZhA=)
                          3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=)
                          4: hCGQ7pwrp-rzkZ08UpUGpQy4ofk.roa (hash: 6hZv9M8eRGoh1xu6S3EkkBCTdMdRLTx0CIg9eqepFA8=)
                          5: l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa (hash: hEUKFB0sE9+M5Wt+beBFFpJfarlKNek9YnFoHsLRVt4=)
                          6: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:ad:d9:f6:2c:6a:97:7b:59:29:17:c1:65:e3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Nov  5 02:00:41 2025 GMT
            Not After : Nov  6 02:00:41 2025 GMT
        Subject: CN=8b09e579669cf73661ee1ead6d09368afd0b2b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:40:a6:43:b7:f8:72:23:49:3e:56:ad:6d:
                    ab:59:54:c1:77:b3:7d:df:55:80:1c:6d:4f:4a:41:
                    ea:23:d9:a5:73:93:e6:fd:09:93:00:5d:2a:3d:f1:
                    75:1e:ef:0d:96:73:17:56:e7:f7:da:a0:35:31:08:
                    a3:98:91:bc:b3:ae:aa:84:ef:84:e6:c4:3c:c2:d1:
                    87:fc:06:bf:39:78:8f:81:76:2b:c2:ef:3a:26:e8:
                    d8:dc:ce:94:8c:2a:92:93:3d:7c:72:fd:81:3b:95:
                    c1:b2:cd:99:25:58:0e:a2:59:bf:2a:39:9f:b0:a5:
                    b3:07:d2:7d:44:e3:c8:9f:f8:b0:6c:01:47:3b:0d:
                    90:f0:0a:f6:a3:07:28:7d:96:66:dd:2b:b6:26:66:
                    ef:d7:3e:22:77:6a:92:34:5d:a5:1c:69:26:73:fe:
                    6b:af:16:1c:45:64:52:36:05:6b:a0:d5:9b:e8:b4:
                    94:fe:dc:ae:8a:59:8b:30:1b:29:32:ec:44:35:12:
                    3e:d6:7f:95:46:22:1c:21:b8:3c:9b:28:d1:f1:a3:
                    4c:0f:86:53:cd:71:78:81:57:f1:a6:7e:86:fe:24:
                    88:3b:91:e2:4d:df:61:73:d6:9b:1f:32:1d:16:f1:
                    2d:74:a9:1f:48:d9:27:47:33:d7:57:88:19:8f:5f:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:E5:79:66:9C:F7:36:61:EE:1E:AD:6D:09:36:8A:FD:0B:2B:35
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:31:4e:c8:1c:21:45:50:24:0b:1f:94:a2:d6:5f:44:51:ad:
         d0:7d:a5:19:d3:bf:7d:5f:a2:1d:12:a3:34:d7:63:75:12:1d:
         ca:0a:d4:58:42:a7:68:74:87:92:74:f7:89:c5:de:54:f8:fb:
         43:08:df:bf:e5:0d:d0:3f:3d:c6:e6:fd:d2:89:ca:2a:a9:06:
         de:bc:28:89:fd:62:57:a8:43:12:af:c6:61:b1:e5:9c:a4:14:
         1d:78:d0:7f:41:a1:b5:73:2b:fb:f5:fa:60:60:d0:49:87:c1:
         53:f2:86:8b:95:f2:0d:1b:8f:d6:ad:04:ed:d9:ee:b1:28:da:
         06:0e:43:c2:90:9f:d1:7d:96:26:fe:d8:2e:11:37:2e:dd:65:
         d5:47:1a:bd:25:6d:9c:f6:6c:66:0d:f9:ef:f6:9c:92:0f:2b:
         c2:96:b9:8b:70:ca:b0:cc:2b:3b:31:ec:af:5a:68:b1:bf:b5:
         6a:25:f4:c8:81:95:44:6c:6e:02:55:a1:9a:82:d4:42:e3:c5:
         1e:04:b7:c6:79:dc:6a:48:4a:2d:5d:54:c6:2c:68:41:08:0f:
         6f:5c:05:08:c8:e6:95:f8:00:a9:db:e5:15:45:e4:7b:e6:d2:
         6a:73:4e:b8:fe:92:c2:2e:9b:92:8c:b1:24:fc:bf:f6:eb:c9:
         2e:93:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:31 2025 by rpki-client