Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          S1sW79mBEQzeyZleerqA6L949e2tkDIUg4czdMwCf1Q=
Subject key identifier:   67:29:E2:CA:3F:FC:AB:E0:AF:42:EB:6E:4E:5E:7D:2E:5E:FC:EC:80
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       019D28165F294C388C5C4247000DD8602FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          166C
Signing time:             Thu 26 Mar 2026 03:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:47 +0000
Files and hashes:         1: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: qnGQhwPzw7cKmog81eeuEAiISlBgXTX+rL6l06XTYP4=)
                          2: DRyy__y2K7EoC3QE195_fwyvhlY.roa (hash: s7Y5XSMvKihqYEySUEuGbt0+4FD6pVJYWQa+Q5dHg+k=)
                          3: HcziY21hi7J6MOALkXuLW-8dQBA.roa (hash: Q9MnrMlbe/PWBPY4vnR/o3dEI9xeR1Ry8RTMb0MkLlA=)
                          4: WXh1a3ltgTu30URiagI_KDwMbGo.roa (hash: 64yhIhef0pb8wUKGIz8rWX3roZaEhoeQs7iEDhSEElY=)
                          5: gDuKEs-UqY780xSxv1-xf0kWTFw.roa (hash: SaJOGHYO/LblaKrZyPH9uhG8OQHT0aBex0MHrUUtmO8=)
                          6: j4jMnBAcA78bU49fCy36vYc0nRs.roa (hash: ikiwyXchWqJ1U3o87HDq74TihFqL403i+9K/uNqAXkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:5f:29:4c:38:8c:5c:42:47:00:0d:d8:60:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Mar 26 03:00:47 2026 GMT
            Not After : Mar 27 03:00:47 2026 GMT
        Subject: CN=6729e2ca3ffcabe0af42eb6e4e5e7d2e5efcec80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:36:e8:6c:25:5e:e5:fe:23:50:b2:9d:35:
                    a0:06:5a:d8:2b:72:a7:21:be:16:9b:37:f8:fd:c8:
                    d3:4b:40:7b:b3:02:55:b1:e1:ac:06:41:0d:58:1a:
                    78:0f:57:63:2f:b0:d0:e6:7b:c7:33:27:03:ab:05:
                    16:7b:c2:01:94:e6:79:3c:e7:75:1b:b9:fa:79:28:
                    e5:fc:5b:98:55:35:fa:c1:6e:8e:f2:a8:2b:23:48:
                    51:ca:bd:2b:ea:73:09:53:24:43:3b:64:f6:2e:73:
                    96:4a:0e:c7:74:19:ef:cc:3c:e6:59:fb:a0:0b:3f:
                    44:6a:74:7f:53:84:b3:9c:7d:3f:a1:1b:e3:7d:35:
                    d6:c5:bf:1d:65:30:cd:6b:ef:ed:ae:9f:b8:fb:72:
                    22:ca:b6:27:d8:55:ef:71:cf:79:28:7e:8a:91:99:
                    d9:e7:8a:26:58:1c:8b:a1:6c:66:af:c6:06:a1:0e:
                    e1:47:1b:9e:97:e4:cb:5a:18:d1:0e:ed:66:d1:86:
                    03:df:87:2f:6e:ff:ca:70:5c:54:60:50:27:1f:88:
                    f4:f2:b3:24:ea:52:91:26:e3:22:f6:b3:34:92:31:
                    29:59:ab:09:67:2a:1b:2c:fe:6d:3e:83:8b:81:08:
                    f9:f3:b3:f3:30:c6:3f:e9:c8:53:5b:c2:e0:b5:e0:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:29:E2:CA:3F:FC:AB:E0:AF:42:EB:6E:4E:5E:7D:2E:5E:FC:EC:80
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:f8:db:70:90:34:d2:87:89:79:d7:b7:8b:1d:9c:de:42:
         8e:24:66:6c:0f:af:a5:02:31:32:23:3d:90:3a:f2:b6:2a:29:
         08:a0:0f:54:77:6a:a0:02:50:78:66:02:cb:8d:c3:cc:05:a4:
         cf:1c:16:b4:de:98:c8:70:af:3a:a8:8b:c6:09:64:9d:11:f7:
         d3:fc:9e:40:b0:8b:37:1e:64:68:10:61:22:8e:30:80:1c:ef:
         d7:26:58:07:0c:44:5a:ca:5d:bd:e2:c5:5d:b9:5c:d4:cc:0e:
         a3:e5:b2:38:52:95:23:78:a9:38:c0:3e:23:f3:15:40:77:53:
         40:ea:8c:27:ca:5a:69:87:61:a3:cb:bc:d6:de:08:07:5b:81:
         91:f9:83:cf:6c:35:96:a4:f9:eb:be:c4:f8:db:73:e3:df:ae:
         f4:ce:c0:79:f1:8b:77:ae:5b:f4:c1:c4:04:6e:3f:53:8d:c6:
         9a:d4:2d:77:aa:0f:89:a8:d8:e2:ba:54:fe:43:08:3a:f8:1f:
         51:67:bc:56:0e:1f:e5:3c:4e:8e:6f:a3:4a:de:5b:da:5c:40:
         ce:d9:e1:76:5a:3e:8d:2a:4e:da:dd:11:d9:5c:26:40:ee:51:
         cf:78:23:33:e9:e6:75:6e:8d:53:a0:34:c7:21:22:e2:15:fd:
         b0:23:dc:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFl8pTDiMXEJHAA3YYC+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi
MDI1NDUwHhcNMjYwMzI2MDMwMDQ3WhcNMjYwMzI3MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg2NzI5ZTJjYTNmZmNhYmUwYWY0MmViNmU0ZTVlN2QyZTVlZmNlYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomo26GwlXuX+I1CynTWgBlrYK3Kn
Ib4Wmzf4/cjTS0B7swJVseGsBkENWBp4D1djL7DQ5nvHMycDqwUWe8IBlOZ5POd1
G7n6eSjl/FuYVTX6wW6O8qgrI0hRyr0r6nMJUyRDO2T2LnOWSg7HdBnvzDzmWfug
Cz9EanR/U4SznH0/oRvjfTXWxb8dZTDNa+/trp+4+3IiyrYn2FXvcc95KH6KkZnZ
54omWByLoWxmr8YGoQ7hRxuel+TLWhjRDu1m0YYD34cvbv/KcFxUYFAnH4j08rMk
6lKRJuMi9rM0kjEpWasJZyobLP5tPoOLgQj587PzMMY/6chTW8LgteAgzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcp4so//Kvgr0Lrbk5efS5e/OyAMB8GA1UdIwQY
MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt
YjQ3M2NlNzgwN2NhLzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh
LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKv423CQ
NNKHiXnXt4sdnN5CjiRmbA+vpQIxMiM9kDrytiopCKAPVHdqoAJQeGYCy43DzAWk
zxwWtN6YyHCvOqiLxglknRH30/yeQLCLNx5kaBBhIo4wgBzv1yZYBwxEWspdveLF
Xblc1MwOo+WyOFKVI3ipOMA+I/MVQHdTQOqMJ8paaYdho8u81t4IB1uBkfmDz2w1
lqT5677E+Ntz49+u9M7AefGLd65b9MHEBG4/U43GmtQtd6oPiajY4rpU/kMIOvgf
UWe8Vg4f5TxOjm+jSt5b2lxAztnhdlo+jSpO2t0R2VwmQO5Rz3gjM+nmdW6NU6A0
xyEi4hX9sCPcVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:37:24 2026 by rpki-client