Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          YwTQahaKxdgbA5SR1ZXs6U++lRCTBEHyBuYAGNVxPI4=
Subject key identifier:   CE:63:23:D0:83:37:D2:D7:32:73:02:DA:CC:CB:A1:14:13:0E:FE:39
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       AB5D3AAFF29551D9557D13A17B8B191423E092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0543
Signing time:             Wed 28 Oct 2026 09:46:46 +0000
Manifest this update:     Wed 28 Oct 2026 09:41:46 +0000
Manifest next update:     Thu 29 Oct 2026 13:18:46 +0000
Files and hashes:         1: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: B66xTonkhBcScjHuB7hPiMOCgNFHtUIkgajajAMCUOY=)
                          2: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
                          3: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 13:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ab:5d:3a:af:f2:95:51:d9:55:7d:13:a1:7b:8b:19:14:23:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Oct 28 09:41:46 2026 GMT
            Not After : Oct 29 13:18:46 2026 GMT
        Subject: CN=CE6323D08337D2D7327302DACCCBA114130EFE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:e5:7f:c9:a5:58:9f:f3:c1:9b:f2:bb:29:
                    f9:3c:ee:7e:f8:a0:30:74:e5:41:8b:36:46:8c:4e:
                    f8:f8:89:2f:e1:f1:ac:a2:02:c7:86:b5:9f:ec:aa:
                    56:35:50:30:dc:5a:13:64:f5:1f:7a:91:d5:79:7d:
                    b7:1e:f7:66:a0:51:98:ba:5c:97:ad:19:be:7c:0a:
                    c9:79:e9:5e:7b:bb:49:cd:a9:67:e3:a3:23:e5:35:
                    52:e6:87:c3:f1:7e:18:83:62:c7:d0:cb:65:56:84:
                    7f:2f:48:c9:9f:e0:ce:c4:de:e9:e5:1e:ba:11:69:
                    ea:99:f6:03:ef:9a:71:ed:2b:86:d0:7f:1c:93:85:
                    89:e4:21:5a:d9:a6:0a:b7:22:72:1e:2d:72:85:72:
                    97:f8:38:57:9a:83:1c:e0:c0:dd:15:86:04:11:f4:
                    7c:ec:98:9d:a6:89:68:e2:8f:cb:c4:6d:90:4d:97:
                    62:33:8d:16:d8:08:b7:e6:9a:0f:2b:b4:6a:3c:43:
                    65:16:88:61:af:77:ec:90:4b:df:51:ee:b4:f3:44:
                    fa:98:a0:e0:fc:bf:69:e6:09:d8:ed:b4:d0:43:6f:
                    a2:ff:d4:bb:bb:6c:96:e2:cd:4b:be:20:ca:05:e1:
                    53:1e:12:19:3a:8c:54:32:e7:6d:38:4b:50:0d:4a:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:63:23:D0:83:37:D2:D7:32:73:02:DA:CC:CB:A1:14:13:0E:FE:39
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:21:3f:32:6a:ba:60:e5:bf:c6:13:ad:68:f7:27:d5:01:b5:
         b5:10:90:ad:20:12:15:a6:97:1a:5d:5d:a5:1b:e1:bb:e3:64:
         b4:59:4c:28:15:bb:ec:1e:0c:3f:cd:ac:c7:e3:f7:22:ab:39:
         c0:12:b2:1b:8f:4f:0c:24:24:9e:f7:6d:a8:d9:a7:c3:bc:44:
         24:8a:68:f6:9a:41:2f:f1:fd:96:08:07:1b:9c:c1:58:32:d5:
         56:d2:5c:0d:3d:69:93:f5:8e:24:ef:92:98:e0:a0:72:48:3e:
         43:04:06:6d:a0:b6:9b:69:82:08:53:88:16:5b:5c:62:7d:c4:
         f9:3c:6c:69:59:89:9f:74:67:70:eb:2f:b9:e6:04:68:96:88:
         29:8f:8a:df:6d:84:96:e3:46:e8:20:8d:c1:19:95:36:a5:32:
         d4:91:25:a9:44:5c:4e:fb:89:0b:62:d4:4d:03:f7:d6:90:83:
         27:93:d1:b7:74:e5:a8:1b:90:ae:e4:c0:70:9e:8b:b1:55:a3:
         c4:9a:ab:13:68:24:66:24:83:9a:a1:d7:ff:3d:36:25:1e:2f:
         9b:a8:62:ac:4a:4e:cb:3d:26:99:66:38:36:59:1f:19:1b:8b:
         92:7c:cc:bd:62:b4:32:72:c6:e9:62:cc:74:f7:88:49:5c:50:
         bf:51:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:44:42 2026 by rpki-client