Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          n+eebh3l65YPtE1iqdi6T3CdSM2rkb1UzZqkHWDIi/I=
Subject key identifier:   8A:5A:AF:BE:84:68:95:C0:EE:CA:D7:81:F3:D9:A7:B1:7E:00:CA:E1
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       71353C4DF6FD7F8D56BEAAA9D111C6786939EB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0454
Signing time:             Sun 26 Apr 2026 16:14:58 +0000
Manifest this update:     Sun 26 Apr 2026 16:09:58 +0000
Manifest next update:     Mon 27 Apr 2026 18:08:58 +0000
Files and hashes:         1: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
                          2: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
                          3: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: ozGj0Ip8nIPTJbIDBM0DQbLaPjdlSfzH3GPo2ozaa+0=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 18:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:35:3c:4d:f6:fd:7f:8d:56:be:aa:a9:d1:11:c6:78:69:39:eb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Apr 26 16:09:58 2026 GMT
            Not After : Apr 27 18:08:58 2026 GMT
        Subject: CN=8A5AAFBE846895C0EECAD781F3D9A7B17E00CAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:c5:34:c6:16:f9:1b:0f:5d:c3:74:b0:eb:
                    f1:96:ed:7e:29:d1:5b:e2:d7:4c:3d:e4:8c:60:0b:
                    0b:e2:ef:d3:68:bd:1a:07:70:c9:bf:a9:1e:ed:44:
                    95:84:6a:f2:2f:4c:69:80:bc:3d:d3:5b:2f:08:bb:
                    d4:3b:c6:da:05:77:49:7d:91:ae:18:55:df:60:b4:
                    de:e5:45:e1:83:22:41:f1:ac:dc:43:be:84:98:c8:
                    68:c7:b1:0e:e6:db:be:13:07:97:7d:72:d0:99:6a:
                    65:ee:d5:e9:5c:34:90:93:22:00:6b:a9:63:eb:48:
                    c2:e0:e7:79:b2:d8:24:69:7a:4c:fb:91:89:6a:ff:
                    67:da:b3:84:e1:8d:26:37:73:d5:bf:5f:cd:08:69:
                    48:8b:11:93:9b:ed:75:2b:d3:8a:6d:6f:ed:c8:e0:
                    65:17:7d:c2:e0:2b:5e:31:49:2f:1a:dd:d1:6d:2c:
                    35:86:8e:62:66:16:b9:f5:bc:1d:d9:2c:13:cf:04:
                    00:a8:13:b1:3e:4e:c4:68:71:71:a4:5f:f1:14:c8:
                    34:cd:a4:f6:39:e9:0e:35:9d:41:7e:0e:8f:88:0c:
                    1f:da:e2:2f:8d:bd:e9:34:25:9b:47:cd:d7:a7:3b:
                    2c:85:c4:4a:83:2a:c6:3c:4b:bb:9b:e6:8d:c3:01:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5A:AF:BE:84:68:95:C0:EE:CA:D7:81:F3:D9:A7:B1:7E:00:CA:E1
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:5b:df:c7:0c:36:a5:83:b8:f3:b1:ea:83:0a:d6:37:3c:
         fb:28:10:92:6a:99:a8:0c:db:71:a9:ef:07:91:ce:43:8d:c6:
         92:32:f8:b9:92:35:6f:1f:7c:6a:e4:9b:e3:67:49:03:59:84:
         b5:4f:08:9a:07:8d:1d:94:49:93:38:ad:c6:ea:fd:48:83:8c:
         fa:70:d6:8a:05:0f:26:d0:9d:a5:33:34:93:d6:d9:05:1c:42:
         ae:90:6c:30:7d:bf:ee:5c:a5:f5:66:3c:41:ea:eb:0a:44:e9:
         de:c9:5e:24:06:82:22:a5:9d:05:10:66:2d:32:e4:f4:da:8e:
         6b:ac:dd:95:22:c4:3f:80:05:16:24:a5:98:93:6a:b7:42:58:
         f0:26:a1:f9:e1:68:86:70:52:02:9c:27:28:c6:77:36:68:57:
         51:fe:e6:2f:6c:a6:78:06:66:6e:01:37:44:82:f9:a4:78:76:
         24:a0:ec:55:3a:04:28:dc:d9:d7:18:13:08:3b:11:40:5d:a7:
         53:26:2d:83:1b:12:64:7f:2c:45:32:24:5f:36:78:f4:26:56:
         f3:b3:31:38:b9:38:50:ff:f6:a2:43:1d:f4:76:44:76:a9:cf:
         f5:4e:62:3b:19:02:30:99:73:a7:6d:2e:36:5b:d0:41:fd:46:
         cb:c5:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:14:23 2026 by rpki-client