Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          kvgVio5g+eN7dWMHdX++VnhdOzf7F4x6J6m/3Rn9XqQ=
Subject key identifier:   AC:33:0E:31:75:99:FC:27:71:7E:95:19:74:EF:6E:73:AD:76:45:D3
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       35598E974B7A9C930CDD2611FDEE8B75DC2D6A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0503
Signing time:             Thu 10 Sep 2026 17:45:34 +0000
Manifest this update:     Thu 10 Sep 2026 17:40:34 +0000
Manifest next update:     Fri 11 Sep 2026 19:39:34 +0000
Files and hashes:         1: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
                          2: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: qvxzqGD0uzjWOJ/OUB5VEO7pW+ueV2anrflP7dac1MM=)
                          3: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:8e:97:4b:7a:9c:93:0c:dd:26:11:fd:ee:8b:75:dc:2d:6a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Sep 10 17:40:34 2026 GMT
            Not After : Sep 11 19:39:34 2026 GMT
        Subject: CN=AC330E317599FC27717E951974EF6E73AD7645D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:66:f0:60:ed:92:81:7c:0f:1f:f8:e7:36:
                    46:4e:d1:65:94:23:99:f8:1b:d4:16:fc:70:50:24:
                    99:09:84:78:ed:d7:95:03:b7:7e:a2:00:bb:0f:07:
                    40:b5:32:df:16:72:8f:7e:22:d5:13:8e:29:12:55:
                    71:fd:45:d4:46:ba:8f:51:0e:16:38:64:52:63:a8:
                    83:1c:4b:3d:df:45:b6:68:6b:d0:39:bd:51:f8:c7:
                    60:f6:81:9e:50:e7:12:45:b1:ac:9a:e9:2d:86:d4:
                    97:a4:31:6e:0c:93:58:bf:86:88:77:15:c5:a1:81:
                    f6:54:5f:60:1a:7b:50:cd:fa:16:1b:74:ff:86:68:
                    84:b2:bc:42:5c:0a:0a:35:97:cf:cf:2d:e5:55:a7:
                    ce:f9:7e:50:01:2b:5e:1c:5e:91:8f:43:46:d6:c4:
                    51:f4:1a:3c:f0:e1:27:cf:7c:dd:61:d7:b0:31:c7:
                    2e:bc:fa:68:ee:fa:cf:ff:fb:99:b5:01:f6:0a:82:
                    74:b5:d9:8a:e2:fb:95:57:db:b2:dd:66:d6:97:64:
                    f8:a0:9b:37:51:6a:de:d2:83:fb:1e:4c:73:e2:b0:
                    3c:e7:e5:5b:fc:a6:c3:e0:55:d7:67:63:6c:ab:40:
                    bb:99:41:d2:95:97:d6:b4:31:2c:9e:95:2a:2f:87:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:0E:31:75:99:FC:27:71:7E:95:19:74:EF:6E:73:AD:76:45:D3
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:32:7e:85:66:21:be:45:d0:0d:30:b9:73:5c:fc:4b:37:d9:
         75:7c:49:7c:ba:39:86:13:e6:f7:43:32:fb:94:53:c5:9e:57:
         ab:fe:fe:d5:b0:94:e6:f9:05:72:ea:9e:be:5a:1b:b9:70:e0:
         e2:ba:a0:25:8b:fb:0f:32:27:de:cf:d5:eb:de:af:d6:07:11:
         72:84:27:28:ca:ab:32:ee:8d:23:84:58:63:9f:46:99:0d:3d:
         53:17:86:78:7e:39:ee:1c:eb:4a:9e:c5:1e:74:ab:39:1a:c6:
         f0:2f:a5:53:32:04:bd:83:da:2d:74:fb:52:d6:6a:b8:eb:da:
         9a:85:c3:9d:3d:82:21:56:e8:14:df:82:37:d5:4a:51:1c:27:
         1b:ef:ea:c9:c1:b8:d6:77:90:bf:a3:00:24:b0:d9:aa:83:5c:
         46:5f:0a:43:af:fc:1a:61:54:3c:4d:53:49:f5:b8:cc:e7:6b:
         c0:df:44:5b:97:47:fd:7a:ca:82:80:19:44:c1:12:eb:c6:c6:
         dd:2c:9a:40:5f:37:a1:06:0c:17:93:a4:78:3e:7a:5d:63:23:
         c0:05:23:28:2d:f7:67:2f:10:d5:a5:01:8c:b2:4f:f5:95:4b:
         3c:cd:57:72:3b:73:d2:bc:7c:e9:a8:55:a5:ca:ca:8a:47:d0:
         db:20:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----