Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File:                     D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier:          hQ/pQMygmmenU1puQS2c5zLxls3DSU2h0oHcf0jJGys=
Subject key identifier:   BF:3A:BF:D0:87:5B:D8:FE:BE:73:56:C9:AD:65:B5:75:44:07:F3:AE
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer:       /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial:       22D25F31E7D231544966B46A2D05B7E56C1FE6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number:          024C
Signing time:             Sat 26 Jul 2025 08:10:47 +0000
Manifest this update:     Sat 26 Jul 2025 08:05:47 +0000
Manifest next update:     Sun 27 Jul 2025 08:44:47 +0000
Files and hashes:         1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: pbTICuNewwJHc3Fw9u3Z5ZC5APF9GqMgXAa2eo8lhWs=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d2:5f:31:e7:d2:31:54:49:66:b4:6a:2d:05:b7:e5:6c:1f:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
        Validity
            Not Before: Jul 26 08:05:47 2025 GMT
            Not After : Jul 27 08:44:47 2025 GMT
        Subject: CN=BF3ABFD0875BD8FEBE7356C9AD65B5754407F3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:c2:8a:8c:4c:f5:c4:fd:c8:d4:d2:29:fa:
                    69:87:15:e7:5a:4a:d7:f9:52:e9:e4:99:42:02:c6:
                    e6:4b:d8:00:94:69:34:52:0a:7d:de:c2:93:13:f8:
                    f6:01:68:65:48:21:c0:54:b4:90:a1:b4:b8:c3:bd:
                    da:e9:a1:22:db:d0:51:d2:9d:0b:8a:36:42:e5:0d:
                    bb:25:9b:dc:da:73:a3:23:b6:b5:16:02:2b:12:9a:
                    ff:b0:2e:6c:e7:96:97:3a:11:b2:9e:82:9b:f6:b3:
                    87:4a:e5:17:8a:2f:62:f1:4a:6f:dc:8d:c9:bc:51:
                    08:40:6d:4f:de:85:16:38:da:fa:cb:03:24:6e:31:
                    14:35:ab:d7:5f:3c:87:fa:aa:34:07:00:a0:68:6d:
                    dd:3d:8f:59:88:e9:bf:70:fa:e0:ba:9f:dd:80:e5:
                    d8:cf:f2:ff:b2:03:9e:f2:56:b7:ce:21:15:2d:08:
                    1f:05:52:4f:33:34:09:77:99:fe:b8:ea:67:fb:30:
                    6d:61:49:03:cf:95:07:c5:dd:83:31:79:62:b9:d9:
                    68:f7:37:57:cc:27:1d:dd:52:d2:56:28:8e:be:e2:
                    df:46:0f:07:4c:c4:ae:1c:8f:11:b4:ed:42:40:f6:
                    09:41:c5:fc:de:4f:b0:90:91:f3:8d:24:23:71:2a:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3A:BF:D0:87:5B:D8:FE:BE:73:56:C9:AD:65:B5:75:44:07:F3:AE
            X509v3 Authority Key Identifier:
                keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:74:94:49:d3:57:7e:6a:ce:7a:8e:a7:7e:00:46:c2:2b:fb:
         60:85:29:69:9c:e2:14:16:f4:3a:b7:b6:90:8e:c1:97:41:bc:
         73:3c:05:2a:ef:f9:4d:e5:f1:67:d5:b1:d1:b0:6b:cc:20:59:
         ba:84:80:1d:1a:9f:41:c2:8c:75:38:32:72:7d:de:bc:a4:f5:
         ea:61:c6:e2:cc:1a:37:7e:19:5c:07:33:51:40:d5:0c:4c:e2:
         c4:b2:82:19:d5:32:95:37:8d:40:f7:7d:69:75:cd:99:64:5b:
         95:2a:31:29:96:e2:99:5d:f7:7c:04:b9:5d:87:3e:3a:72:de:
         e9:0b:8d:4b:42:3b:ba:ab:f0:3f:58:c4:a7:00:92:ff:8d:8e:
         b7:89:af:81:5d:9d:f0:11:bb:03:0e:1b:a5:63:d6:5d:f7:3f:
         3e:e6:a3:57:f5:10:71:93:85:f0:38:ac:5c:88:21:bd:d8:5b:
         43:94:33:2a:07:4c:62:f4:97:5b:e7:d7:c7:e0:f5:32:5a:bf:
         0a:90:88:5d:72:23:17:83:11:41:a4:dd:65:96:33:38:16:71:
         26:c4:1d:51:f4:94:eb:cf:28:64:7b:50:a7:f0:25:6e:48:2d:
         b1:f9:54:30:14:43:ae:9b:ae:fd:24:68:8e:1a:f9:35:cb:ee:
         bd:cb:45:e2
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUItJfMefSMVRJZrRqLQW35Wwf5vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJkZDA3ODYxMGFhZWM0N2I1NDAzZjI5N2Y5MjA4Yjdh
NThmYjMzYTAeFw0yNTA3MjYwODA1NDdaFw0yNTA3MjcwODQ0NDdaMDMxMTAvBgNV
BAMTKEJGM0FCRkQwODc1QkQ4RkVCRTczNTZDOUFENjVCNTc1NDQwN0YzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTsKKjEz1xP3I1NIp+mmHFeda
Stf5UunkmUICxuZL2ACUaTRSCn3ewpMT+PYBaGVIIcBUtJChtLjDvdrpoSLb0FHS
nQuKNkLlDbslm9zac6MjtrUWAisSmv+wLmznlpc6EbKegpv2s4dK5ReKL2LxSm/c
jcm8UQhAbU/ehRY42vrLAyRuMRQ1q9dfPIf6qjQHAKBobd09j1mI6b9w+uC6n92A
5djP8v+yA57yVrfOIRUtCB8FUk8zNAl3mf646mf7MG1hSQPPlQfF3YMxeWK52Wj3
N1fMJx3dUtJWKI6+4t9GDwdMxK4cjxG07UJA9glBxfzeT7CQkfONJCNxKsudAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUvzq/0Idb2P6+c1bJrWW1dUQH864wHwYDVR0j
BBgwFoAU0t0HhhCq7Ee1QD8pf5IIt6WPszowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIvMS9EMkREMDc4NjEw
QUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMHQwSGhoQ3E3RWUxUUQ4cGY1SUl0NldQc3pvLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIv
MS9EMkREMDc4NjEwQUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAmHSUSdNXfmrOeo6nfgBGwiv7YIUpaZziFBb0Ore2kI7Bl0G8czwFKu/5
TeXxZ9Wx0bBrzCBZuoSAHRqfQcKMdTgycn3evKT16mHG4swaN34ZXAczUUDVDEzi
xLKCGdUylTeNQPd9aXXNmWRblSoxKZbimV33fAS5XYc+OnLe6QuNS0I7uqvwP1jE
pwCS/42Ot4mvgV2d8BG7Aw4bpWPWXfc/PuajV/UQcZOF8DisXIghvdhbQ5QzKgdM
YvSXW+fXx+D1Mlq/CpCIXXIjF4MRQaTdZZYzOBZxJsQdUfSU688oZHtQp/Albkgt
sflUMBRDrpuu/SRojhr5NcvuvctF4g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:18 2025 by rpki-client