Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File:                     C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier:          wyewnsxrKpNgxWmHWBQfRIs1thCin60jU8TL7FetBYA=
Subject key identifier:   5F:22:3A:1B:72:B0:25:6D:9A:2D:D6:59:FF:F3:54:8D:EB:B2:14:D3
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer:       /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial:       1BF14DED6ECE862F3FDE743D6939985608149472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number:          0241
Signing time:             Sun 18 Oct 2026 03:28:58 +0000
Manifest this update:     Sun 18 Oct 2026 03:23:58 +0000
Manifest next update:     Mon 19 Oct 2026 05:20:58 +0000
Files and hashes:         1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: YvY0cMoqFoWt08mrJbhL8NFnAahfKMh/VvJshCVQfNU=)
                          2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: ArUfILTVdPV/xNgrUMZFDYhaVkRFzlTnphTzuDha7tw=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f1:4d:ed:6e:ce:86:2f:3f:de:74:3d:69:39:98:56:08:14:94:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
        Validity
            Not Before: Oct 18 03:23:58 2026 GMT
            Not After : Oct 19 05:20:58 2026 GMT
        Subject: CN=5F223A1B72B0256D9A2DD659FFF3548DEBB214D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:02:26:e2:83:09:08:7f:09:68:8e:7a:f7:
                    59:2f:cd:cf:f9:a0:7c:59:53:e6:ab:99:c4:c1:8b:
                    b8:6e:22:1a:d1:d0:34:1b:55:f8:79:89:8b:b7:5a:
                    8d:f6:06:32:2a:5f:1e:52:1c:80:50:57:69:3e:56:
                    3f:3e:50:bd:e3:ef:51:4a:d5:c2:19:0f:f7:05:2c:
                    51:54:82:f2:a5:cc:c7:e2:1b:42:a1:52:18:c4:84:
                    66:5d:5a:14:1c:c2:a0:37:e2:2a:9a:94:13:36:a0:
                    2a:53:7f:79:72:1a:05:99:e4:91:6e:d2:d9:91:2c:
                    73:7b:b4:f4:4d:02:a5:0b:05:a8:06:73:44:52:25:
                    a2:1b:7e:7a:76:8a:0a:e0:cc:66:7d:56:17:65:8a:
                    55:fb:15:31:5a:4b:b0:3e:9f:1d:57:22:1f:d3:1f:
                    fb:a2:d6:d0:03:10:df:69:1d:a2:64:8b:40:7b:54:
                    c0:51:6a:28:4b:e2:ac:3a:91:b8:15:07:04:fb:ae:
                    0a:19:81:3a:3a:6d:fd:d2:02:fd:52:ba:10:52:6c:
                    a1:1a:f7:ca:61:1b:e0:fe:f8:78:46:78:d8:ea:e6:
                    21:df:46:32:b8:88:89:5a:48:59:04:4b:4a:94:2d:
                    6a:37:6b:9d:3d:69:14:5e:9d:f2:42:32:1b:a8:23:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:22:3A:1B:72:B0:25:6D:9A:2D:D6:59:FF:F3:54:8D:EB:B2:14:D3
            X509v3 Authority Key Identifier:
                keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:19:a0:1f:34:46:1f:ab:77:64:59:3f:dc:26:d0:e9:a9:63:
         e0:e5:de:a0:f2:1c:2b:23:bf:37:1c:48:ef:52:0b:4a:07:b6:
         36:5d:7c:8d:77:40:93:cc:67:44:3d:00:6a:7b:df:fa:12:6d:
         ff:23:d6:80:96:3d:8f:8d:8f:23:07:6e:df:17:34:b6:a4:4e:
         62:3e:89:af:b1:e9:2a:08:ed:23:8c:7f:4b:5b:e9:38:5b:ab:
         ee:5e:cc:05:8b:81:9d:08:95:ab:35:64:43:2a:b8:70:d5:14:
         e8:74:33:13:ce:f0:13:e3:f0:8c:53:37:e0:f3:ec:7c:d1:9f:
         88:bb:d0:ad:a9:16:0e:e4:8d:b1:f3:91:cd:e6:58:55:5e:20:
         dd:5c:c9:ba:b7:1a:50:e7:36:30:2a:b2:82:b0:f8:2f:68:38:
         d7:d6:60:d3:58:e3:6a:f1:58:b6:2d:57:f3:cf:84:b4:3e:4c:
         fe:7b:eb:e5:04:1e:e9:a5:a4:5f:22:03:de:c0:3b:44:ae:3f:
         1b:fa:e9:7e:fc:2f:49:3e:d9:e0:f2:d4:82:ea:08:3f:2e:43:
         d2:78:50:9d:e8:fa:bb:56:f7:34:ce:ab:9d:2c:e1:14:ec:8a:
         a2:73:53:3b:c5:23:bf:83:6e:cd:60:6e:27:7d:af:8b:8c:73:
         4b:43:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:42:16 2026 by rpki-client