Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          soV9fvIQ8rfTsZIztdnOAGvXApxjhgqsXGoiScofHA0=
Subject key identifier:   3E:94:C7:82:03:61:9F:91:4D:F3:59:EF:AE:8B:75:C5:CC:E5:DD:89
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       0199FCC6773934BBA53C0CD6188F607308C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          14C7
Signing time:             Sun 19 Oct 2025 14:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:28 +0000
Files and hashes:         1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=)
                          2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: KAQZdKeshjVMY7lvCvMH4eEZr0TLotnaIVidKkzcHII=)
                          3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=)
                          4: hCGQ7pwrp-rzkZ08UpUGpQy4ofk.roa (hash: 6hZv9M8eRGoh1xu6S3EkkBCTdMdRLTx0CIg9eqepFA8=)
                          5: l7Mx8ECeMLRgOZtkKahNhfqZB_4.roa (hash: hEUKFB0sE9+M5Wt+beBFFpJfarlKNek9YnFoHsLRVt4=)
                          6: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:77:39:34:bb:a5:3c:0c:d6:18:8f:60:73:08:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Oct 19 14:01:28 2025 GMT
            Not After : Oct 20 14:01:28 2025 GMT
        Subject: CN=3e94c78203619f914df359efae8b75c5cce5dd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:6f:5a:8c:f2:6c:3b:b6:3c:e4:8b:d4:a2:
                    82:06:51:25:c5:51:42:63:02:43:2f:a8:d9:6f:8f:
                    a3:3b:4f:42:5f:10:26:a4:8d:9c:2b:01:59:df:30:
                    87:4c:dc:35:f1:ee:b4:18:a1:8b:db:33:50:10:3e:
                    b4:39:09:33:67:6d:31:2f:e8:a7:65:3d:08:b8:3b:
                    38:c4:20:c9:c6:10:4c:e8:a4:64:8f:ca:87:74:29:
                    a5:ee:be:54:f1:a2:0c:2c:95:ed:f8:66:9f:c6:82:
                    3a:1f:5a:f1:c8:c9:ba:9c:c9:4f:35:7c:a8:3b:b9:
                    dc:79:b6:db:a5:b3:d5:75:db:8c:ce:07:da:b5:1f:
                    00:a8:b5:92:eb:ac:6e:a1:b8:2f:6e:08:2b:c0:94:
                    f4:06:d7:c8:6e:e3:a1:14:4e:73:5a:b6:48:08:ee:
                    eb:25:96:ba:7f:57:2c:81:02:a2:2f:a7:ea:68:12:
                    3c:a8:b5:ae:4d:b7:97:f6:ef:b5:4c:f6:5e:48:88:
                    5e:31:b8:a4:93:9f:b6:05:c7:52:7b:44:3f:50:3b:
                    52:17:4a:ab:17:e1:37:2f:9b:a5:0d:56:c2:09:a8:
                    27:36:37:38:86:69:7d:f3:b7:a3:c9:13:b1:22:21:
                    65:2b:df:a8:38:6b:60:b1:00:16:8e:ac:61:d7:97:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:C7:82:03:61:9F:91:4D:F3:59:EF:AE:8B:75:C5:CC:E5:DD:89
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:c8:f2:b9:50:ef:93:e0:e5:c0:cf:5c:43:eb:85:ae:b0:
         9a:f2:93:6b:2c:cd:14:29:1c:42:d9:77:73:5d:37:2f:3e:c7:
         91:c8:f1:dd:fc:b3:97:27:55:70:b4:4d:73:bc:83:54:8b:57:
         d7:2e:c4:43:bd:95:2d:18:88:66:11:63:0e:60:22:35:63:f0:
         47:e5:9a:2c:4f:b7:72:b7:0f:94:75:eb:0f:17:27:be:4a:68:
         f6:9b:7d:9d:c6:9c:ba:30:a5:ae:69:cc:fa:31:bf:30:0f:fd:
         5a:d6:8b:ad:5a:f9:39:09:1b:bb:a1:39:23:b5:c7:10:72:e2:
         34:df:db:85:86:d4:19:c6:54:5f:36:a7:c6:45:47:85:f9:ce:
         80:f3:1c:0f:67:e6:5b:6e:d7:c6:e9:2b:bc:ff:6a:a1:66:77:
         68:97:8d:cd:b6:36:68:59:0f:c7:30:aa:ce:69:89:ce:d1:41:
         72:44:30:94:90:4b:8d:58:ee:a4:b0:7e:6e:30:e8:8b:33:c9:
         de:9d:04:a9:16:8e:2a:36:00:ba:85:95:cd:96:55:53:63:50:
         a2:d3:1a:61:fc:41:fb:b8:25:ee:4c:a6:c9:dd:53:7e:06:9e:
         d0:13:cb:79:e9:b1:c0:07:41:f5:8d:d9:59:79:22:9c:7a:61:
         94:3e:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:12 2025 by rpki-client