Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          Edcqn9cApQaNRXTqPBedsyubATxCSagwbTDfZIU+Zp4=
Subject key identifier:   D7:79:13:F0:55:45:F0:EA:45:17:6D:A5:90:2E:E3:F3:98:98:F0:04
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       0C51E45AD392824FA90019AA9AA1DD8282CBA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0418
Signing time:             Thu 12 Mar 2026 18:14:30 +0000
Manifest this update:     Thu 12 Mar 2026 18:09:30 +0000
Manifest next update:     Fri 13 Mar 2026 21:01:30 +0000
Files and hashes:         1: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: kGC2W52cIqBcHqh1s1o+PL9Aj1pro9vXilaYZ+czwCY=)
                          2: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
                          3: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:51:e4:5a:d3:92:82:4f:a9:00:19:aa:9a:a1:dd:82:82:cb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Mar 12 18:09:30 2026 GMT
            Not After : Mar 13 21:01:30 2026 GMT
        Subject: CN=D77913F05545F0EA45176DA5902EE3F39898F004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:94:e6:e3:ca:0f:eb:8a:03:7b:b0:76:ce:
                    2c:92:d9:ae:fa:e4:cd:21:a3:9f:c1:aa:a1:0e:07:
                    c5:f3:b5:37:16:2d:3c:6d:b0:d4:56:73:79:c8:1b:
                    69:c7:7f:cc:7b:bc:a3:c4:75:74:f7:de:c6:3f:3a:
                    f6:c0:9e:bd:cc:ad:31:e2:75:8f:71:27:32:df:a4:
                    12:1b:90:80:28:39:ec:ae:b7:80:71:82:42:e0:a0:
                    66:7f:cc:53:bf:13:4e:3e:73:ca:76:f8:d7:c6:37:
                    30:8c:29:6a:fa:64:3a:5b:57:33:7a:78:bd:c4:ed:
                    7e:51:e6:0f:7a:3e:8d:4c:ac:1a:60:cc:26:b4:8f:
                    83:8d:ea:ea:bc:8d:59:00:73:89:c8:79:07:51:c7:
                    ee:c3:9f:74:3c:51:c9:62:dd:f7:ca:22:c5:fe:fb:
                    cd:cb:b6:4f:46:40:78:7e:5d:5d:e7:20:05:18:ce:
                    db:f4:de:db:21:b3:7d:28:7b:02:ac:d5:d3:0a:eb:
                    5b:35:8f:4c:3a:d6:b6:56:f1:cc:9e:cd:65:23:53:
                    75:a5:99:bc:d4:27:ae:98:46:cd:d5:b9:24:c1:06:
                    0e:f4:6a:1f:05:42:93:d5:ca:69:fa:1f:9e:a0:9f:
                    22:69:ca:79:5c:0a:26:4f:55:63:81:61:17:8a:b9:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:79:13:F0:55:45:F0:EA:45:17:6D:A5:90:2E:E3:F3:98:98:F0:04
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e9:90:48:77:ab:e7:c3:3c:c0:e4:00:b1:51:23:42:89:f7:
         5f:d7:de:95:3b:31:04:fe:ed:13:d2:6b:5f:73:9f:c5:63:37:
         a1:2f:19:1f:47:31:a5:57:30:fa:3d:ea:e7:57:11:7b:57:d7:
         d9:66:b3:1b:6f:6d:c0:67:bd:01:b3:6f:79:8f:2f:38:61:3a:
         a1:72:e1:f6:6d:cd:f3:c9:09:30:3c:d7:8a:21:59:d9:1b:b6:
         9a:b6:3b:6e:36:6b:a2:ce:fa:38:80:b8:36:a9:cb:24:98:58:
         d1:8b:c8:07:cd:c0:af:54:da:77:f3:3e:93:dd:33:36:e9:a7:
         36:7a:df:7f:10:33:31:2d:68:b2:da:bb:7f:fb:a2:af:5a:e7:
         13:71:b9:7c:84:a1:e9:0b:75:c5:7b:14:34:0d:20:3c:14:b8:
         e7:49:99:e1:5f:17:57:e7:7b:3f:42:00:20:cb:9c:2b:6f:01:
         31:fd:71:4f:7c:40:0e:ec:84:95:53:69:b4:ff:74:08:bf:4b:
         c7:21:3d:d0:72:9c:3a:d8:d1:17:4c:41:ab:ac:10:0a:54:5b:
         48:06:3d:78:bd:10:ff:03:95:6d:b0:ea:14:5d:24:1d:af:23:
         7e:15:e2:8f:d6:32:3d:21:f8:f6:b3:e3:14:e3:14:51:7b:c8:
         92:60:0c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:05:59 2026 by rpki-client