Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          nqcBl/3aEVGDRFqjp+SiRf4YPJOPUknFm8MmVFgGgAg=
Subject key identifier:   82:FC:A7:97:87:83:56:1F:4F:80:BA:E5:92:52:10:A1:AD:3E:94:4C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       2A4E87A5A7DB67A57BBCDC847D03F7DC1682ABE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02FF
Signing time:             Sun 24 May 2026 00:48:10 +0000
Manifest this update:     Sun 24 May 2026 00:43:10 +0000
Manifest next update:     Mon 25 May 2026 00:50:10 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 8IrlOOen6ZT0/JXjVoThZulykxpJ9NE4RHRccyfiaoU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4e:87:a5:a7:db:67:a5:7b:bc:dc:84:7d:03:f7:dc:16:82:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 24 00:43:10 2026 GMT
            Not After : May 25 00:50:10 2026 GMT
        Subject: CN=82FCA7978783561F4F80BAE5925210A1AD3E944C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:4d:e2:3c:0b:f9:3a:d7:f2:02:5a:7d:dd:
                    b9:c8:9b:5f:55:64:bf:bf:bf:1d:44:0f:e8:54:e5:
                    fe:86:51:00:15:78:ac:ca:37:1a:85:bb:87:97:67:
                    fd:0e:19:7d:3d:48:d3:7c:d0:e7:cf:fc:9d:c4:96:
                    d2:7e:f8:e6:11:a7:5d:41:bd:db:a9:03:5b:27:69:
                    c3:f2:4f:df:53:08:e9:68:d2:48:38:a2:18:7c:b5:
                    a9:f3:da:97:e3:25:8b:b2:64:b3:3d:d0:95:84:4c:
                    71:89:f4:66:30:95:a3:08:05:7a:8c:6b:8a:32:8c:
                    23:78:fe:e6:5d:7d:11:01:11:6f:e7:ad:58:b7:8e:
                    6a:73:ec:de:6b:f7:5e:0a:2a:91:bb:ac:e2:bd:8a:
                    4d:ef:56:d1:15:01:49:62:b3:b6:bf:fb:e3:47:73:
                    3e:81:5b:b2:2d:54:ea:87:c6:e4:1e:ca:99:54:a4:
                    0f:c2:95:40:40:30:3a:c1:b7:79:b2:35:a0:b9:d3:
                    3e:79:cd:56:52:82:f1:f4:14:8b:08:c8:86:0a:08:
                    5e:3d:08:1b:f2:9c:85:74:c8:be:78:aa:ef:e4:b8:
                    c5:be:96:af:fb:ad:78:a2:b2:d3:89:58:6a:b6:ca:
                    e3:be:c4:0c:70:16:ec:b8:dd:e7:6e:13:76:04:18:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:A7:97:87:83:56:1F:4F:80:BA:E5:92:52:10:A1:AD:3E:94:4C
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cc:48:f8:e3:6a:52:01:29:37:36:18:fa:8c:e6:77:8f:4d:
         3f:aa:75:ae:41:b1:3f:ca:c7:6a:a7:a4:6b:28:26:73:ce:18:
         36:b8:26:d5:fb:e7:4c:d3:78:12:b8:2c:66:7f:d8:42:18:2c:
         91:c3:f7:f5:6b:35:eb:eb:b5:3e:6c:5e:bc:2a:02:a6:aa:6e:
         e2:c8:63:52:95:f8:09:95:15:37:af:06:3b:c9:75:38:95:bd:
         45:23:8a:b2:48:cc:47:7e:83:da:8a:68:30:5b:4e:38:c8:e1:
         aa:b6:3a:48:58:4b:2a:c7:a9:45:5f:fa:25:90:7b:f1:2a:21:
         85:e0:02:cd:da:c7:b8:d3:b1:5f:32:94:39:c1:7d:76:42:37:
         50:95:28:85:92:d6:4c:c7:ff:a3:a2:aa:fe:0b:4d:c9:e9:7a:
         0c:ab:83:64:8c:35:bf:b3:93:96:d8:85:52:0f:e5:03:45:61:
         b1:c4:5c:8c:9d:77:4e:9a:52:e9:d6:f4:3d:bd:30:fc:6e:1c:
         d7:cc:19:e1:8c:fe:b5:c2:a9:22:66:0c:0a:c4:9d:cd:ee:2e:
         3d:f3:f5:c3:4c:50:b3:1e:7f:21:f9:58:39:79:dd:78:3f:c1:
         b8:60:1a:ab:7c:04:56:bc:e0:32:d0:7a:16:77:d5:55:c8:d0:
         cf:b6:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 05:30:14 2026 by rpki-client