Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          J6b/3Z57pmvxLGWHqVqd+HpmLQwf7l1Gk1MsK0tStzg=
Subject key identifier:   7D:3E:02:55:6D:18:39:AD:42:FC:E6:6F:02:06:8D:DE:1A:F5:14:5A
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       019D9818AD3EB5DAA390A31EF611BD8CEA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          16A6
Signing time:             Thu 16 Apr 2026 21:00:47 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:47 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:47 +0000
Files and hashes:         1: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: zZNNO9EbQPVxXNx/Y0smluTiac/X7VusDIp416pOG1E=)
                          2: DRyy__y2K7EoC3QE195_fwyvhlY.roa (hash: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k=)
                          3: HcziY21hi7J6MOALkXuLW-8dQBA.roa (hash: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=)
                          4: WXh1a3ltgTu30URiagI_KDwMbGo.roa (hash: 64yhIhef0pb8wUKGIz8rWX3roZaEhoeQs7iEDhSEElY=)
                          5: gDuKEs-UqY780xSxv1-xf0kWTFw.roa (hash: SaJOGHYO/LblaKrZyPH9uhG8OQHT0aBex0MHrUUtmO8=)
                          6: j4jMnBAcA78bU49fCy36vYc0nRs.roa (hash: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:ad:3e:b5:da:a3:90:a3:1e:f6:11:bd:8c:ea:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Apr 16 21:00:47 2026 GMT
            Not After : Apr 17 21:00:47 2026 GMT
        Subject: CN=7d3e02556d1839ad42fce66f02068dde1af5145a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:63:a7:27:01:b6:84:ea:62:43:75:c9:33:
                    ea:28:b2:49:80:82:9e:b1:f2:d4:5e:85:ef:38:b7:
                    e8:b6:35:ac:e0:ed:55:96:93:41:3a:10:73:40:0a:
                    96:1b:fa:0e:f8:07:30:f7:3b:3f:91:6b:a1:6a:aa:
                    f8:47:79:75:cc:76:73:95:6e:f1:79:19:45:07:b8:
                    34:ba:12:40:c5:7d:ba:31:c6:46:ec:c6:df:27:81:
                    2e:eb:cf:f5:ce:cd:98:10:b6:15:57:c7:c9:e8:4e:
                    54:1c:57:76:76:76:69:d4:a2:6a:b7:9e:55:08:c0:
                    4f:4c:1d:f4:45:ef:ec:c8:b2:14:da:ab:c0:a9:42:
                    6a:3c:8f:5d:3e:7e:02:7d:12:30:94:96:9c:65:84:
                    26:6d:ca:ad:a4:a3:ef:f2:ab:7b:cb:f1:a9:43:38:
                    a4:cf:24:d1:6a:ce:a7:23:6f:24:5b:1f:00:1e:41:
                    a5:c8:c7:58:5b:9e:13:18:66:ae:fa:40:d9:76:9b:
                    6d:88:62:2f:6b:d0:0f:0d:d3:59:ff:be:22:24:1a:
                    a1:2d:24:cf:4d:4c:fd:05:8b:ab:9f:91:ae:00:db:
                    df:7f:d6:8f:bc:28:14:b6:c3:a4:e0:10:49:19:b4:
                    08:ff:67:75:82:80:91:40:a8:8e:34:ff:b6:f1:4d:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:02:55:6D:18:39:AD:42:FC:E6:6F:02:06:8D:DE:1A:F5:14:5A
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:84:5c:de:5c:b4:e0:28:2b:4b:6d:b9:5b:d1:76:e8:75:46:
         ce:12:66:67:74:43:66:f2:c6:0d:82:2b:ee:9c:67:8a:e3:9e:
         b8:99:f8:a5:62:62:40:4c:9f:26:6e:7a:82:8b:41:0e:a9:c2:
         34:b2:ab:65:ef:8a:b0:6f:23:45:fe:2d:5b:de:62:42:01:ff:
         62:70:1f:bc:46:62:6a:97:dc:09:9b:f5:a5:29:0e:cd:f3:69:
         f2:23:63:55:c1:40:cd:f9:60:f1:03:be:24:99:3d:d7:bb:bf:
         dc:a3:88:9d:13:cd:5a:62:96:82:25:7d:6f:40:0b:0f:07:38:
         cc:06:e9:a9:3b:74:ff:e2:89:72:f3:99:2d:e8:91:82:bf:d6:
         b1:ca:a2:38:dc:f0:d0:ce:7b:8b:67:78:24:a2:3f:4d:25:d3:
         57:93:aa:28:de:69:1d:d8:df:6a:2e:53:5b:a1:b2:b9:f5:58:
         08:db:fa:60:46:bf:81:e6:67:a5:a4:27:d5:62:e2:03:93:5c:
         9e:9d:0d:c7:3d:5f:f6:6f:7d:44:44:de:c2:75:20:71:9a:67:
         8b:98:80:93:22:d2:b4:89:0f:e8:7f:76:19:8c:aa:22:90:df:
         6e:4d:9b:b4:73:2c:0d:ff:b5:a6:a3:99:40:0a:9d:ad:03:1f:
         f0:3a:e0:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGK0+tdqjkKMe9hG9jOqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi
MDI1NDUwHhcNMjYwNDE2MjEwMDQ3WhcNMjYwNDE3MjEwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZDNlMDI1NTZkMTgzOWFkNDJmY2U2NmYwMjA2OGRkZTFhZjUxNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7RjpycBtoTqYkN1yTPqKLJJgIKe
sfLUXoXvOLfotjWs4O1VlpNBOhBzQAqWG/oO+Acw9zs/kWuhaqr4R3l1zHZzlW7x
eRlFB7g0uhJAxX26McZG7MbfJ4Eu68/1zs2YELYVV8fJ6E5UHFd2dnZp1KJqt55V
CMBPTB30Re/syLIU2qvAqUJqPI9dPn4CfRIwlJacZYQmbcqtpKPv8qt7y/GpQzik
zyTRas6nI28kWx8AHkGlyMdYW54TGGau+kDZdpttiGIva9APDdNZ/74iJBqhLSTP
TUz9BYurn5GuANvff9aPvCgUtsOk4BBJGbQI/2d1goCRQKiONP+28U0P8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0+AlVtGDmtQvzmbwIGjd4a9RRaMB8GA1UdIwQY
MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt
YjQ3M2NlNzgwN2NhLzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh
LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4Rc3ly0
4CgrS225W9F26HVGzhJmZ3RDZvLGDYIr7pxniuOeuJn4pWJiQEyfJm56gotBDqnC
NLKrZe+KsG8jRf4tW95iQgH/YnAfvEZiapfcCZv1pSkOzfNp8iNjVcFAzflg8QO+
JJk917u/3KOInRPNWmKWgiV9b0ALDwc4zAbpqTt0/+KJcvOZLeiRgr/WscqiONzw
0M57i2d4JKI/TSXTV5OqKN5pHdjfai5TW6GyufVYCNv6YEa/geZnpaQn1WLiA5Nc
np0Nxz1f9m99RETewnUgcZpni5iAkyLStIkP6H92GYyqIpDfbk2btHMsDf+1pqOZ
QAqdrQMf8DrgbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:25:45 2026 by rpki-client