Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          tuJHLsc2zYYVpugU1N0dTOe/9G9EcpTEbrJc1Bw2UB0=
Subject key identifier:   63:41:BA:90:C4:97:37:D5:B4:A1:D3:CA:B1:CE:D2:03:BA:7C:7C:4E
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       019DD2085557552F3F43531056B06144173B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          16C4
Signing time:             Tue 28 Apr 2026 03:00:54 +0000
Manifest this update:     Tue 28 Apr 2026 03:00:54 +0000
Manifest next update:     Wed 29 Apr 2026 03:00:54 +0000
Files and hashes:         1: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: xduPRr6LC2BK+B5WDX54/qFrAloEu0xcrGIh/ZDjbHU=)
                          2: DRyy__y2K7EoC3QE195_fwyvhlY.roa (hash: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k=)
                          3: HcziY21hi7J6MOALkXuLW-8dQBA.roa (hash: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=)
                          4: WXh1a3ltgTu30URiagI_KDwMbGo.roa (hash: 64yhIhef0pb8wUKGIz8rWX3roZaEhoeQs7iEDhSEElY=)
                          5: gDuKEs-UqY780xSxv1-xf0kWTFw.roa (hash: SaJOGHYO/LblaKrZyPH9uhG8OQHT0aBex0MHrUUtmO8=)
                          6: j4jMnBAcA78bU49fCy36vYc0nRs.roa (hash: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d2:08:55:57:55:2f:3f:43:53:10:56:b0:61:44:17:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Apr 28 03:00:54 2026 GMT
            Not After : Apr 29 03:00:54 2026 GMT
        Subject: CN=6341ba90c49737d5b4a1d3cab1ced203ba7c7c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:fe:7f:fe:04:20:c3:87:a8:3c:a1:10:20:
                    48:e5:22:64:db:d6:75:a3:90:5e:62:6c:d8:02:21:
                    a0:74:9f:18:fd:9e:4b:bc:31:56:99:84:09:51:39:
                    e5:2a:03:71:e8:93:95:90:b0:d3:ff:32:49:6a:ff:
                    24:51:8e:50:e6:e5:25:63:1f:36:70:4e:2c:27:5b:
                    72:f7:bd:68:b0:89:98:56:7a:ed:43:c2:ef:3f:a4:
                    f9:95:c9:4b:0a:c7:8e:4d:3f:b8:69:f8:49:a0:36:
                    3c:03:31:30:5e:4d:ac:01:a9:19:96:25:fd:6b:33:
                    ea:c3:ff:f9:25:00:1d:aa:3f:b5:4e:bd:35:b6:10:
                    92:b9:6f:25:19:54:ab:53:c5:bf:75:32:15:7a:60:
                    c9:04:2e:00:20:21:33:44:76:02:b0:5d:b9:e1:f9:
                    1a:1e:d6:dc:2f:19:bb:72:fd:df:f7:54:cb:46:dd:
                    5d:09:ae:4e:61:53:ec:6b:c7:3d:4c:3b:a7:b0:f5:
                    93:d6:ac:34:98:0c:6a:ab:c6:5c:f8:73:1a:29:01:
                    5d:00:37:52:6a:92:85:03:f7:a8:aa:e0:63:df:aa:
                    3e:77:52:14:25:d4:2c:ed:e8:ac:58:29:7e:f8:e6:
                    9a:cd:6d:36:fb:23:56:c2:73:56:a8:3f:b2:1e:9d:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:41:BA:90:C4:97:37:D5:B4:A1:D3:CA:B1:CE:D2:03:BA:7C:7C:4E
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:91:b9:49:2f:b1:ac:d3:43:cf:3f:37:e1:84:d5:4d:61:
         b3:30:96:66:ad:e7:fb:bc:3d:c1:46:1d:e7:ce:91:ca:ca:f7:
         6b:0f:5e:a9:5d:15:08:3d:a9:2a:9e:c9:69:19:25:c2:f8:0b:
         9a:7a:3e:38:77:5e:84:a1:73:71:e5:2c:5f:46:39:48:c1:4d:
         63:db:7a:d3:a1:52:76:1b:a2:60:09:7b:b2:de:6d:74:7f:79:
         53:43:b6:48:f4:ed:38:26:ca:08:b7:11:f9:6a:34:fe:ea:fa:
         a7:13:bd:73:76:78:74:65:87:a7:e8:98:6e:22:a2:68:97:cd:
         74:14:95:57:92:5f:c8:cb:15:ba:77:41:26:30:33:51:66:52:
         79:65:60:cc:24:0c:c7:3b:4f:40:18:0b:19:59:62:d1:2d:6a:
         5b:24:08:a4:a0:20:27:23:1c:0e:94:8a:9b:2a:a4:74:55:73:
         f6:0a:b9:3b:88:29:0d:c6:eb:2a:f7:62:0a:de:ef:3c:40:04:
         04:f9:74:d6:6a:af:29:f6:d5:ff:fd:e9:ed:0e:33:f6:02:00:
         16:f7:c9:71:eb:31:ba:79:af:1a:64:df:35:4e:b7:b4:ed:03:
         d0:f9:d5:8a:52:75:7e:53:9b:40:00:f9:46:78:42:f0:d3:25:
         eb:4f:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:26:16 2026 by rpki-client