Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          fI8mSenVjJLyzU9fiuormipy5ntVo1eb0e/CbqEvceg=
Subject key identifier:   6A:E4:ED:DF:8D:4B:25:12:4B:86:C3:98:E7:D1:B9:E7:EF:BA:82:80
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       68A77B221E3ABED3214668036F44008E416CF724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0490
Signing time:             Tue 09 Jun 2026 20:46:52 +0000
Manifest this update:     Tue 09 Jun 2026 20:41:52 +0000
Manifest next update:     Thu 11 Jun 2026 00:07:52 +0000
Files and hashes:         1: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
                          2: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: 5SdxceSOFYwIXXyElAYGnxGrq6Sr2m/MhdX4rRqrH8o=)
                          3: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 20:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a7:7b:22:1e:3a:be:d3:21:46:68:03:6f:44:00:8e:41:6c:f7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Jun  9 20:41:52 2026 GMT
            Not After : Jun 11 00:07:52 2026 GMT
        Subject: CN=6AE4EDDF8D4B25124B86C398E7D1B9E7EFBA8280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:6d:d7:00:0d:63:c3:f6:16:bd:8c:62:df:
                    42:b8:5a:da:71:6a:3a:90:10:bf:39:61:94:e1:01:
                    f9:f2:0c:e2:fa:40:c6:e4:c3:32:22:22:bc:6f:52:
                    00:28:9a:c2:e0:37:fe:7f:2e:84:3a:41:d7:c5:0f:
                    68:2d:8e:ee:6f:ce:62:66:d9:9e:4b:db:0a:d3:74:
                    ba:94:9c:ed:37:08:31:55:fa:74:e1:b7:e8:1f:2e:
                    02:28:66:a7:09:27:d7:e8:da:b3:4f:a7:2f:5b:ed:
                    19:f5:d0:ae:d2:92:1f:49:82:1c:ee:54:06:ec:fa:
                    c5:bf:e4:19:d8:34:8c:10:cc:3e:79:9d:50:98:33:
                    47:90:1b:9f:97:55:79:13:bd:e1:1f:01:55:fa:f7:
                    7a:c2:91:9b:99:0c:5a:26:ff:f7:bd:d3:ec:ab:11:
                    35:a8:35:a7:ce:28:57:27:6c:9d:87:e9:79:89:e1:
                    81:91:e0:6b:41:3c:c8:16:61:c2:0d:24:65:be:08:
                    86:fd:c9:c0:3b:59:11:33:5c:3f:d5:9f:fd:85:37:
                    e9:a5:f1:81:61:c5:39:b5:72:43:54:0e:e8:41:e5:
                    8d:0f:5c:57:04:1b:ad:84:8f:54:7d:19:03:f0:c8:
                    a7:d1:3b:79:60:82:e2:5a:98:d6:0b:d5:72:fd:6f:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:ED:DF:8D:4B:25:12:4B:86:C3:98:E7:D1:B9:E7:EF:BA:82:80
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:63:e0:c6:70:4d:cf:5e:bf:bf:da:2c:44:bb:1a:b0:94:8b:
         3f:3b:28:d2:29:ba:ea:b6:57:27:be:0d:da:26:38:ba:09:81:
         83:68:86:f7:84:e2:73:7f:3c:1c:1e:a7:ef:2b:d0:81:99:56:
         ba:58:75:ed:3c:4f:39:0e:45:4c:9d:88:e9:c7:ce:b5:2c:2d:
         f9:d9:8d:f7:4f:0b:4a:cd:7c:71:2f:74:5b:4d:5e:c1:8e:9e:
         eb:57:83:af:ae:8c:b4:2f:71:33:1c:17:3c:28:d5:e7:fa:dd:
         09:69:da:d3:e2:0e:4c:b1:8b:e6:c3:6f:1b:07:ce:67:79:25:
         b5:b7:86:e3:ae:af:48:2c:07:bb:c6:21:99:f3:03:d8:b9:be:
         9a:3e:d6:10:8c:dc:de:66:22:64:fc:d6:ef:48:09:f3:d6:74:
         92:7a:b1:d9:2b:42:a0:1e:b2:33:c5:cd:c2:f8:b2:a6:f2:cd:
         9a:af:3c:13:ed:2e:97:01:07:d5:36:a5:a7:45:e5:e2:2c:8b:
         2e:a6:b1:fd:ab:5e:21:3e:0d:b3:a6:17:b1:9b:7f:6e:4d:b4:
         e2:2a:38:56:da:f7:60:ef:85:d8:4c:4c:73:a1:d4:f3:f1:62:
         f8:09:fb:31:0e:0e:fb:af:8e:30:1d:bf:27:86:9c:4d:d1:ee:
         90:dd:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 02:42:09 2026 by rpki-client