Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
File:                     88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft (raw, json)
Hash identifier:          PqJgApP6YLmLSidiUZc3O4C2whKaB2hEjeVl2SXiMtY=
Subject key identifier:   78:D7:FC:7F:58:DD:6D:CD:7B:3A:3E:B2:AB:D1:D6:E9:65:5C:4C:24
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       68C2E364627EC61A4AF70B4C57C6A022ECEA42B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
Manifest number:          0241
Signing time:             Fri 04 Sep 2026 12:55:31 +0000
Manifest this update:     Fri 04 Sep 2026 12:50:31 +0000
Manifest next update:     Sat 05 Sep 2026 15:15:31 +0000
Files and hashes:         1: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (hash: 2ZBaNtPaE/+smzK+8aqGHHgZK55Ap8sXf895fgT3o8M=)
                          2: 326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (hash: VP0T3vJDrcQRhu24IsBxLL2NmHzOPfupYaV6NBcwHiI=)
                          3: 88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl (hash: KwcdSPR1ZsUdgPiZmWie6HHGRLqjVU7gR5x7OnXYDyg=)
                          4: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (hash: 5OtlO1CvVlB1/ObOQdJeEsyrPkWRIRWc2imLQ9A4D4I=)
                          5: 326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (hash: zYMY1oRpDAf55aUvq23IaxbYyAuR2YNn8C/LIZIanhU=)
                          6: 326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (hash: 5BGotA0saITIe/3H61hfIHY0kn8or1h5bnZPaj2WKrQ=)
                          7: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (hash: MJJCb7GPFoZpPxTgi2OnS55nlkcyZR2mLg/Fx57oupM=)
                          8: 326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (hash: z4Gzjl0mySZsE+yzL/7MkPUw87YsrhJ5sncZVCUXAkM=)
                          9: 326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (hash: 8xFsHIPWfBRUqsUfFyGq2pCYYG5vV8Yckx+Nhnh8T9I=)
                          10: 326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (hash: IVw343EIyqlr6Q9NO8j9NuBVM9SixAXimHVlxkTAWZE=)
                          11: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (hash: KMNhkQJHqwCwFD05qI7l6V8aD6zflu+hW4gX63/9xVk=)
                          12: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (hash: 8R2JcWoytSLEkAmJo/iEjnbb3JAgqvMX892011pEYDM=)
                          13: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (hash: CRjz36xKKnM/XT2veMOfgbu3sY6X+vm0sD+ABhtx27Y=)
                          14: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (hash: RpX+SnW9OqE3RHHAXJHLCnucZdFtkrSA9+x0t5REzZs=)
                          15: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (hash: 8r3vc5/d6vdW7fHoiknDlOKvOYsWfYQBP51qSrchMK0=)
                          16: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (hash: 0U1RCBcUZlWR+6opXVSRxTSSloe/CuSjjQf0aTQmDHI=)
                          17: 326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (hash: h5ZFRGSx/ShsDQRErKYWHA1KlO4d0yuRV2TvVnPSvoc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 14:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c2:e3:64:62:7e:c6:1a:4a:f7:0b:4c:57:c6:a0:22:ec:ea:42:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Sep  4 12:50:31 2026 GMT
            Not After : Sep  5 15:15:31 2026 GMT
        Subject: CN=78D7FC7F58DD6DCD7B3A3EB2ABD1D6E9655C4C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:89:ca:82:8e:c5:0b:d3:a9:26:41:76:03:
                    8e:c1:8c:b4:06:39:53:b0:07:92:25:34:e2:3f:db:
                    32:dd:f4:4a:bd:16:a9:35:48:11:05:17:5f:2b:0e:
                    6b:23:29:68:9c:06:9f:a1:0d:d9:61:e4:f1:13:e5:
                    fc:3d:66:34:ea:49:0c:f7:36:2c:ab:ae:a5:35:80:
                    11:13:1b:54:f3:12:42:ec:1c:c9:a3:59:82:1e:62:
                    a1:95:41:0e:78:70:d1:e2:9f:e9:48:3b:82:b2:7a:
                    ab:c5:8e:39:9d:79:29:e6:0b:bd:59:f0:23:cf:74:
                    e2:b4:a0:50:e9:8c:7c:b0:45:85:70:eb:69:94:8f:
                    e8:12:43:7d:31:a3:85:ee:57:0a:4e:78:9e:06:a4:
                    2b:d0:63:b0:a6:7d:be:b8:25:61:8a:2d:61:54:2b:
                    80:1e:bf:45:b9:e1:ea:16:90:fe:fd:24:af:eb:12:
                    1c:f8:21:d4:06:8a:3d:89:84:bb:de:02:30:f7:9d:
                    e6:4f:7b:96:65:f3:91:59:42:b7:ce:ec:67:9b:05:
                    cc:28:e8:22:ce:03:ed:7f:f8:5b:80:bc:29:d8:bd:
                    63:f8:59:f0:90:68:f0:7d:56:ee:b3:21:62:10:e4:
                    84:f9:05:4e:29:1f:05:02:ba:34:95:27:64:63:4d:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:FC:7F:58:DD:6D:CD:7B:3A:3E:B2:AB:D1:D6:E9:65:5C:4C:24
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:19:25:08:37:ff:fb:3a:c8:bd:a6:13:cd:d9:b1:ef:50:
         d1:98:aa:a5:8e:93:b7:34:bc:5f:37:f9:e4:37:51:ee:b2:d4:
         3c:ed:43:14:0a:32:1e:71:ef:50:42:95:95:2e:b4:1a:52:73:
         2c:85:46:b5:60:55:85:01:2e:47:65:ee:23:b5:68:6f:c7:03:
         25:27:fe:3b:95:88:c4:9f:a4:c3:96:f5:dd:7c:c4:a1:4c:d8:
         a7:51:e6:b1:fd:4d:c8:1f:3b:36:91:b9:1d:3b:b4:9e:00:ad:
         c5:9d:ae:02:31:3c:cf:6f:bb:2f:5d:8a:b3:84:62:1c:34:be:
         e3:0c:05:9d:13:74:bc:45:69:8e:ac:31:8d:f0:0c:1e:5c:11:
         c6:d2:ee:c2:d3:5b:0a:32:d8:30:8f:c7:38:e1:be:2d:88:41:
         c0:7d:33:08:55:09:38:0c:4b:93:99:50:4c:85:ef:ec:52:f1:
         07:3c:6f:85:56:86:12:4c:67:52:c1:38:cd:7e:87:a2:64:00:
         8f:24:47:8a:04:0f:4e:c7:69:13:b0:bd:11:b5:c4:97:b6:50:
         b8:3c:44:d9:ca:07:18:5a:bd:7c:17:82:a6:08:d3:8d:fc:f1:
         0d:28:d7:a9:cb:4f:6e:b8:74:a7:f7:5a:c0:11:2c:10:17:63:
         cf:14:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----