Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          8Q04MGOp0a3/mP4HWfxMg31SHNnLoRrVhiProUjK/d8=
Subject key identifier:   F7:A9:FE:FD:93:B5:F5:F9:96:A8:3B:A8:9A:B0:4F:B0:B8:0E:9F:F8
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       019FA93DC932F2F8B2C542737E7910FB8E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          17B8
Signing time:             Tue 28 Jul 2026 15:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:26 +0000
Files and hashes:         1: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: h3bhsJAMX2AlubeZVEB2IpzxUT4jur5/3wRvoiMS3G0=)
                          2: DRyy__y2K7EoC3QE195_fwyvhlY.roa (hash: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k=)
                          3: HcziY21hi7J6MOALkXuLW-8dQBA.roa (hash: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=)
                          4: WXh1a3ltgTu30URiagI_KDwMbGo.roa (hash: 64yhIhef0pb8wUKGIz8rWX3roZaEhoeQs7iEDhSEElY=)
                          5: gDuKEs-UqY780xSxv1-xf0kWTFw.roa (hash: SaJOGHYO/LblaKrZyPH9uhG8OQHT0aBex0MHrUUtmO8=)
                          6: j4jMnBAcA78bU49fCy36vYc0nRs.roa (hash: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:c9:32:f2:f8:b2:c5:42:73:7e:79:10:fb:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Jul 28 15:00:26 2026 GMT
            Not After : Jul 29 15:00:26 2026 GMT
        Subject: CN=f7a9fefd93b5f5f996a83ba89ab04fb0b80e9ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:12:e4:06:4a:f6:39:93:5a:72:be:c6:ec:
                    7f:51:95:43:49:cf:a5:81:33:67:7b:ab:b0:aa:ad:
                    68:91:13:32:e7:d0:4a:72:0c:a1:33:56:31:1a:4c:
                    69:36:70:5a:aa:ae:56:ce:8a:bd:0b:1d:ad:ac:70:
                    11:ac:7d:24:4a:92:bc:32:83:34:e2:dd:8c:d9:ac:
                    13:89:c7:09:49:36:7f:9e:de:f4:0c:d1:84:0c:37:
                    c2:0c:e7:9d:e2:f8:95:21:51:40:61:03:5f:03:0e:
                    ab:a5:45:dc:5d:f8:29:3b:54:c3:d9:bd:93:f3:13:
                    78:d1:ec:4a:69:17:9e:8e:b5:b3:98:5d:79:65:c9:
                    09:4b:78:ee:51:99:92:2f:74:cb:3a:82:18:26:c0:
                    68:bb:81:a2:c8:f1:cd:93:42:b1:8b:71:03:9d:7b:
                    c8:f7:c4:35:fb:4b:6e:33:06:09:82:17:3f:c6:3b:
                    57:af:bf:a5:7f:b0:2b:75:80:47:8b:38:14:91:32:
                    b6:76:43:8f:61:ea:de:91:60:06:e5:c1:4b:19:58:
                    da:54:67:09:8a:f1:5d:ec:b6:4a:9c:d1:97:87:c2:
                    03:ba:32:40:a5:da:80:41:25:4c:73:82:d1:f3:cb:
                    93:6d:d7:1b:b4:f8:0f:4d:1f:03:b9:dc:86:f4:95:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:FE:FD:93:B5:F5:F9:96:A8:3B:A8:9A:B0:4F:B0:B8:0E:9F:F8
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:96:d7:f2:05:2e:8f:65:d6:e9:ec:cb:3a:5d:93:9e:65:
         59:41:50:5e:25:ba:01:38:e5:48:f4:7b:50:bb:a0:4c:7e:8a:
         80:f1:d3:b7:4a:60:e5:48:c0:72:a9:e7:67:73:24:93:c2:39:
         38:3f:39:30:1e:a8:77:51:4d:34:89:09:d5:8b:3a:91:78:1a:
         5b:bd:de:a3:da:84:e6:10:19:ed:63:f6:b4:1b:b2:ba:7e:6a:
         36:bf:f2:06:cc:ec:c4:ca:ed:e9:c7:c2:e9:28:1e:9e:84:aa:
         4b:59:a0:a7:72:50:5c:c2:f3:86:3a:e2:dc:3e:dc:80:15:fb:
         59:8a:96:85:d3:25:0f:18:43:50:fd:61:58:fd:bc:f0:d9:1a:
         d8:1c:da:0b:cc:78:ca:92:da:f0:3f:86:2b:a3:4e:0c:72:ad:
         51:cf:c5:e6:42:8d:1d:eb:8b:d5:37:04:7a:31:27:fa:95:ee:
         c5:c3:4b:09:1b:74:14:f7:a0:9d:68:86:7f:7e:b3:43:39:c7:
         85:c8:8e:3f:e0:6f:a4:6a:8d:5f:59:9c:39:b1:e3:52:fa:df:
         43:75:5c:d8:e5:12:1e:b6:52:de:1a:fa:2d:00:03:b1:b4:d9:
         75:4d:b8:36:4e:65:5b:50:ad:0e:57:b7:95:d6:b8:5c:a6:24:
         f4:02:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:47 2026 by rpki-client