Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          RPAF2lDwSC0SPUs4l8+6iISYGgvbLBdXuemUOCFcmY4=
Subject key identifier:   84:8B:76:54:38:E3:55:13:B6:9B:C4:DD:79:2E:70:B8:13:C6:25:81
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       2A8FA60AB614006011564E87B254FC9B0D70F716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0300
Signing time:             Sun 24 May 2026 16:53:14 +0000
Manifest this update:     Sun 24 May 2026 16:48:14 +0000
Manifest next update:     Mon 25 May 2026 19:18:14 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: YehpoaOHxqvWwk22sADvTnmETu2FLPGKFOmC++kBWNY=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 19:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8f:a6:0a:b6:14:00:60:11:56:4e:87:b2:54:fc:9b:0d:70:f7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 24 16:48:14 2026 GMT
            Not After : May 25 19:18:14 2026 GMT
        Subject: CN=848B765438E35513B69BC4DD792E70B813C62581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:b4:1c:56:05:3a:39:5d:54:41:0f:d5:95:
                    63:5e:ab:bd:d2:84:af:90:0a:35:c7:82:64:32:89:
                    a4:f7:0b:e2:cb:99:f4:f9:aa:c2:58:55:be:48:72:
                    b9:f5:14:09:3d:b7:60:32:89:58:76:14:40:6d:12:
                    cb:20:14:18:1a:9b:0a:ee:a7:86:38:4c:1f:3e:a5:
                    01:e2:bc:5d:75:06:ff:63:80:cb:fd:96:8b:c9:dc:
                    c1:65:85:e9:01:81:13:06:76:56:f4:2f:ac:9f:57:
                    98:a4:ef:c6:34:94:ca:b8:80:a5:c5:4f:a6:90:f2:
                    ec:49:bf:cd:dd:ed:3f:78:5d:30:40:ec:76:c4:af:
                    b8:8c:6d:0d:67:32:54:e9:f2:12:f0:2c:cb:b6:81:
                    47:52:e1:1f:39:6a:05:59:0f:f7:37:46:31:28:e0:
                    76:0d:60:40:bf:93:7e:f0:ea:1b:67:6b:f6:88:f9:
                    6c:da:f5:28:d1:6c:7c:12:96:8b:04:b1:4d:8a:0d:
                    70:8a:92:8f:54:5c:0b:77:01:65:5d:e3:e2:bc:94:
                    b7:a0:5d:6d:63:7f:8b:8e:2a:9d:9f:2e:ba:73:6b:
                    a3:72:ff:42:91:5f:ce:b6:75:14:b5:df:17:f0:8c:
                    09:4d:38:24:53:d2:53:28:c5:72:20:01:11:3d:9d:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:76:54:38:E3:55:13:B6:9B:C4:DD:79:2E:70:B8:13:C6:25:81
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:4a:67:00:93:e3:42:bc:7f:49:f4:cc:af:69:71:39:92:
         c1:7a:f5:2b:eb:7a:7f:2e:5c:ee:94:7a:85:2d:c7:66:2d:ff:
         04:91:70:02:c0:1d:f3:6b:06:ee:2b:97:ef:6e:d5:f5:56:0b:
         fb:26:2b:86:05:3e:51:48:b2:07:1a:88:5e:8d:c4:8f:44:a2:
         fb:04:2b:80:43:16:81:6f:7f:ab:3c:1b:36:d2:c0:fd:cf:18:
         4b:af:09:e1:0c:50:1a:d2:50:9b:9f:1c:3f:47:aa:ea:1e:c3:
         03:72:1a:bc:62:78:72:51:c1:8b:b0:ea:e0:d5:6d:1b:f9:b4:
         b2:9f:1f:be:61:4f:41:f5:5e:e8:b4:dd:86:d0:d0:80:9d:db:
         63:fb:08:76:90:30:fd:f2:5f:97:a0:de:2b:d1:3b:21:0f:0d:
         fc:04:88:95:06:da:c3:ed:fc:19:d5:bc:1d:bd:50:a5:88:cf:
         52:6d:c4:71:f5:f9:98:af:fe:95:4d:c1:2b:96:5f:fa:96:3f:
         c2:3b:bb:34:3c:a2:d5:1e:62:72:71:b1:44:9e:36:35:96:6b:
         8e:72:e3:32:4c:4b:5f:21:45:98:f4:e2:fd:b5:61:23:49:25:
         31:95:f0:dd:4c:3b:12:da:fb:67:13:4b:44:82:81:1a:a7:6d:
         93:9e:62:80
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUKo+mCrYUAGARVk6HslT8mw1w9xYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MjQxNjQ4MTRaFw0yNjA1MjUxOTE4MTRaMDMxMTAvBgNV
BAMTKDg0OEI3NjU0MzhFMzU1MTNCNjlCQzRERDc5MkU3MEI4MTNDNjI1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRnrQcVgU6OV1UQQ/VlWNeq73S
hK+QCjXHgmQyiaT3C+LLmfT5qsJYVb5Icrn1FAk9t2AyiVh2FEBtEssgFBgamwru
p4Y4TB8+pQHivF11Bv9jgMv9lovJ3MFlhekBgRMGdlb0L6yfV5ik78Y0lMq4gKXF
T6aQ8uxJv83d7T94XTBA7HbEr7iMbQ1nMlTp8hLwLMu2gUdS4R85agVZD/c3RjEo
4HYNYEC/k37w6htna/aI+Wza9SjRbHwSlosEsU2KDXCKko9UXAt3AWVd4+K8lLeg
XW1jf4uOKp2fLrpza6Ny/0KRX862dRS13xfwjAlNOCRT0lMoxXIgARE9nf5LAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUhIt2VDjjVRO2m8TdeS5wuBPGJYEwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAs/dKZwCT40K8f0n0zK9pcTmSwXr1K+t6fy5c7pR6hS3HZi3/BJFwAsAd
82sG7iuX727V9VYL+yYrhgU+UUiyBxqIXo3Ej0Si+wQrgEMWgW9/qzwbNtLA/c8Y
S68J4QxQGtJQm58cP0eq6h7DA3IavGJ4clHBi7Dq4NVtG/m0sp8fvmFPQfVe6LTd
htDQgJ3bY/sIdpAw/fJfl6DeK9E7IQ8N/ASIlQbaw+38GdW8Hb1QpYjPUm3EcfX5
mK/+lU3BK5Zf+pY/wju7NDyi1R5icnGxRJ42NZZrjnLjMkxLXyFFmPTi/bVhI0kl
MZXw3Uw7Etr7ZxNLRIKBGqdtk55igA==
-----END CERTIFICATE-----
Generated at Mon May 25 05:58:26 2026 by rpki-client