Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          lygHzHFri463+e6K6DQ/INdPqyTr8avauJMSS/Z/F/g=
Subject key identifier:   84:BF:9E:B7:01:D9:9D:E6:F8:62:AA:4F:92:FE:28:AD:A1:CE:B1:91
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       06C079D1E1454030ED5894BF7CDC7F6F241A4F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02F5
Signing time:             Fri 15 May 2026 23:28:00 +0000
Manifest this update:     Fri 15 May 2026 23:23:00 +0000
Manifest next update:     Sun 17 May 2026 03:06:00 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Xz1Mmu8bGHIUV0QI84qQO9UwKIBFXpMTYSiUidUtHDk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 00:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c0:79:d1:e1:45:40:30:ed:58:94:bf:7c:dc:7f:6f:24:1a:4f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 15 23:23:00 2026 GMT
            Not After : May 17 03:06:00 2026 GMT
        Subject: CN=84BF9EB701D99DE6F862AA4F92FE28ADA1CEB191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:7a:99:d0:18:13:a1:f8:53:95:dc:5c:5f:
                    d7:68:53:7d:f5:61:f6:53:26:c4:b2:37:82:0a:ae:
                    8f:1e:c9:78:22:62:78:61:28:0c:25:54:e8:fc:66:
                    b9:0a:e9:1b:c2:87:47:15:a0:2f:8a:9a:1b:0d:90:
                    78:c8:11:b7:f0:63:41:9d:62:23:1b:37:b1:a6:15:
                    ee:a9:53:32:c8:7d:41:01:1c:88:eb:4d:54:89:66:
                    4e:d2:e4:a3:8f:2f:43:99:a9:42:99:ac:06:8d:24:
                    d3:ea:7b:da:92:54:61:e4:29:e2:14:41:70:fb:a4:
                    15:8f:8c:99:d1:3e:12:7a:9e:9c:fb:c7:66:f1:87:
                    6d:31:b5:33:8d:8e:48:49:19:17:e2:21:93:3c:f1:
                    77:b4:75:17:f5:9a:98:aa:e7:f5:4c:c5:f0:26:74:
                    5d:98:60:90:04:2b:67:3b:b7:85:76:0a:b2:03:d8:
                    96:0f:19:5f:8e:42:bf:13:d5:06:8d:4a:9a:9b:49:
                    bf:c9:0f:f9:b1:4b:b9:35:77:60:86:9a:d6:38:65:
                    d5:bc:58:4e:34:31:67:a1:44:77:9c:6a:4d:99:02:
                    d2:1a:44:d3:23:25:40:17:00:6d:9d:ec:9a:00:e3:
                    2c:6e:87:12:ad:c9:09:b9:1a:6d:ad:0c:bc:45:1e:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BF:9E:B7:01:D9:9D:E6:F8:62:AA:4F:92:FE:28:AD:A1:CE:B1:91
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:e7:41:be:d7:18:93:4c:e0:46:fe:1c:46:2f:dd:a2:a6:
         46:3e:e3:fe:32:2a:86:2b:2c:ee:37:df:c1:99:51:64:c4:88:
         7f:20:ec:69:5a:32:04:05:32:7c:8b:72:d4:4b:bc:2d:ef:fa:
         d6:2b:cb:74:14:fb:14:19:2d:0f:44:2c:d5:3b:de:57:c4:e2:
         2c:ff:e7:37:14:07:2d:42:04:2f:d3:2e:de:35:49:52:92:01:
         6a:cb:c8:59:f4:a5:ee:05:c9:ac:93:5d:86:42:cc:62:1f:26:
         83:ea:41:ee:ca:25:ec:1b:6c:44:c6:c2:fa:29:01:49:8a:af:
         1f:cc:18:d6:80:75:d7:f0:da:9a:00:c6:aa:4f:a5:73:fa:60:
         90:3f:9a:c2:3f:d9:cb:36:66:19:86:9c:16:9c:59:e5:db:ef:
         da:63:9a:06:a0:59:0f:89:32:f4:65:4f:40:d9:04:58:e3:75:
         e5:c6:ba:23:59:72:4f:e7:8a:95:bc:1a:fa:aa:24:d6:7a:3d:
         17:fc:53:38:6e:cd:71:4e:73:a7:4c:58:8f:61:cc:6a:bf:c2:
         35:f3:f1:17:3d:b9:a1:75:9f:c6:ab:e7:c8:34:a5:ad:a9:1d:
         1d:77:4b:40:f7:31:24:d0:a2:9c:be:37:41:ed:e0:1f:a8:e5:
         d4:cd:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 07:45:33 2026 by rpki-client