Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File:                     3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier:          opnHH5OvatA7+pfp6ZcCC5vP3r2Qq5mT6WWh8uB6hG8=
Subject key identifier:   3C:1A:C2:44:30:53:5E:8F:0D:48:92:91:81:93:F5:B9:CA:70:30:D0
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer:       /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial:       57192FCB865AAA9BDF4D50343699DDEE39F14C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number:          AF
Signing time:             Sun 28 Jun 2026 18:19:28 +0000
Manifest this update:     Sun 28 Jun 2026 18:14:28 +0000
Manifest next update:     Mon 29 Jun 2026 19:54:28 +0000
Files and hashes:         1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
                          2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: KX4mi65SIqMtcYXk4Dc7plMu6OeF3W6WMLrA2bbmAuE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 19:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:19:2f:cb:86:5a:aa:9b:df:4d:50:34:36:99:dd:ee:39:f1:4c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
        Validity
            Not Before: Jun 28 18:14:28 2026 GMT
            Not After : Jun 29 19:54:28 2026 GMT
        Subject: CN=3C1AC24430535E8F0D4892918193F5B9CA7030D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:a5:17:9e:8b:d9:0b:c5:5a:57:6c:be:a6:
                    81:58:e2:99:cf:08:cd:fa:87:79:86:ad:00:93:be:
                    73:00:3b:59:23:71:4f:79:4b:a5:df:99:9f:dd:e2:
                    6f:1e:78:3d:49:26:c3:79:c3:7a:6e:59:b6:1e:61:
                    07:2d:85:91:ff:39:82:7d:9d:af:dd:e0:3c:19:2a:
                    84:87:8b:08:c2:e2:01:37:47:af:26:82:ad:85:45:
                    4b:88:fb:a7:de:97:91:42:05:00:ed:7c:06:13:2c:
                    34:bd:9d:ac:e5:6f:97:9a:79:f1:14:52:c6:f2:3c:
                    f1:ac:c4:7f:b9:ca:17:dc:26:59:56:5a:d0:16:e9:
                    31:17:a0:70:d4:02:10:d6:14:0f:21:8e:65:72:09:
                    4b:2f:9a:e7:b7:79:92:5b:de:cd:44:29:47:96:5e:
                    0e:1b:b2:f5:1e:98:13:06:72:50:61:07:6d:65:b9:
                    cf:92:80:f7:2b:4a:56:f6:d7:e9:c4:9d:cf:db:13:
                    cf:f9:eb:ad:40:99:76:55:78:a9:dc:47:cf:89:2b:
                    5e:78:c2:43:62:1f:be:73:54:0a:a7:b1:ff:59:ed:
                    3f:74:a2:f3:25:c4:66:be:fa:ee:a9:8a:1b:b1:0f:
                    be:07:5b:27:64:44:d7:bf:6d:42:02:fc:cd:81:9c:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:C2:44:30:53:5E:8F:0D:48:92:91:81:93:F5:B9:CA:70:30:D0
            X509v3 Authority Key Identifier:
                keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:b8:5c:ad:aa:81:ae:c4:2f:0d:9e:a8:bd:39:95:3e:ef:
         cf:93:f3:6f:5c:6e:41:a7:78:31:16:46:cb:3e:d3:24:3a:76:
         eb:d9:49:65:1d:c4:4e:47:68:b9:26:15:7b:3f:7f:c8:4e:6d:
         79:de:1c:ae:75:19:cc:72:be:74:11:96:98:5f:00:dd:aa:f9:
         83:ee:6f:1d:22:1b:cf:d8:53:4c:88:ae:b1:f5:be:d0:6c:8f:
         e3:f0:ff:4e:e5:b3:67:b8:af:ce:81:87:91:91:55:03:ae:77:
         bd:67:0c:59:9a:1f:87:a5:59:1d:e5:b8:96:3b:47:4a:2a:9f:
         07:97:d2:0d:00:93:b5:e8:39:8d:10:35:8f:ff:33:56:1a:05:
         d3:5a:1b:3c:ff:b4:0e:76:4c:2a:d4:36:cf:8f:49:67:96:b2:
         bd:2d:a5:6d:d2:53:4e:72:f0:6c:0d:52:a8:51:fd:c7:ea:b8:
         ec:c5:ce:c5:3f:b0:bf:5a:b7:63:7e:9f:18:42:e9:27:3d:b4:
         4d:39:6a:fe:b6:15:a9:de:44:e7:89:4c:67:fc:22:cf:e7:59:
         85:35:b1:7c:bf:bb:23:84:06:6f:ce:ca:6f:f8:c5:83:7d:29:
         31:b5:88:77:f6:9d:56:0e:14:e1:c0:e6:95:8f:94:bb:94:33:
         bb:cb:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:08 2026 by rpki-client