Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          I4BryqX4tIhDa4uySgn234bP7XQWF92AkUkOKAegQlE=
Subject key identifier:   DE:81:DC:27:AE:C4:81:EE:1F:A3:8C:25:5A:ED:8B:80:DB:F6:B2:92
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       62F950C3458479993A1F802A2BB67848A215FABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02A1
Signing time:             Sat 14 Mar 2026 08:22:32 +0000
Manifest this update:     Sat 14 Mar 2026 08:17:32 +0000
Manifest next update:     Sun 15 Mar 2026 09:37:32 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: KWU+0ZAhsYuA0IbXUkX3x9LqYOlbwzVyNANUDp/lCqc=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 09:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f9:50:c3:45:84:79:99:3a:1f:80:2a:2b:b6:78:48:a2:15:fa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Mar 14 08:17:32 2026 GMT
            Not After : Mar 15 09:37:32 2026 GMT
        Subject: CN=DE81DC27AEC481EE1FA38C255AED8B80DBF6B292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:9a:28:8a:fd:71:d7:ba:89:4b:60:e4:9c:
                    e1:08:92:a9:aa:6a:93:e1:43:06:1f:5e:97:c8:ea:
                    c0:cc:7b:ca:28:27:12:b2:53:af:f3:3b:32:b5:1c:
                    ed:49:57:b0:32:b9:62:1d:c2:83:cc:b0:fc:7e:2a:
                    89:76:c4:73:75:ea:b5:91:a3:6e:83:46:dc:b8:13:
                    da:43:f2:5f:54:56:bb:2e:62:38:19:59:45:75:9c:
                    db:ed:57:a2:bd:8e:7e:31:63:ca:8a:9c:5f:20:6e:
                    3f:71:91:bd:f4:dc:69:9e:45:9d:a2:da:1f:c4:75:
                    af:e1:31:47:97:e9:3d:2a:99:de:2b:c8:f1:1c:94:
                    e7:19:26:3a:c1:d6:0c:5a:3f:65:d8:d0:87:74:eb:
                    29:9a:36:4a:f2:4e:8d:16:85:28:63:1c:38:56:4c:
                    72:ec:b5:86:33:a0:59:8f:35:c3:2a:d4:8e:79:ea:
                    33:80:71:1c:ae:b7:23:93:10:da:09:49:05:63:5e:
                    c2:23:22:47:9f:19:14:4c:1c:ef:56:9e:ae:ac:1b:
                    fa:c0:85:55:37:b5:71:96:c1:ce:00:02:b3:4b:5d:
                    6b:fe:3b:37:90:0b:d6:55:e4:00:8b:51:08:7a:a3:
                    25:38:aa:df:f5:80:85:3b:08:33:ed:30:8e:92:17:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:DC:27:AE:C4:81:EE:1F:A3:8C:25:5A:ED:8B:80:DB:F6:B2:92
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:23:bd:52:87:36:e8:f6:3f:61:13:85:1e:85:d7:66:de:
         0e:05:33:4c:fc:15:25:1e:aa:01:1d:3f:55:50:9f:87:19:8a:
         c4:e1:da:9e:16:28:d5:71:84:4c:dd:45:b3:a2:2b:ef:b6:e8:
         3e:67:dd:a2:d8:72:c9:b5:a0:1b:5d:59:ef:06:d1:0c:f8:41:
         00:fc:d6:37:0a:53:04:60:69:c1:26:ef:d2:8e:69:e2:f9:2d:
         93:5d:45:3f:65:38:43:f0:b2:6c:90:3e:97:91:2d:ae:e4:7c:
         ef:7b:47:6a:2c:7f:45:72:d9:1f:b4:62:86:c2:49:fe:44:e7:
         ab:93:a1:8c:1e:cc:bd:f5:8a:2d:28:a8:2a:48:80:ec:54:35:
         23:33:c4:bc:58:90:14:4e:27:d4:8f:77:10:10:ed:ed:af:7d:
         e9:04:93:bc:c2:56:6f:0b:62:88:32:de:8f:33:15:79:de:d9:
         ac:03:84:8c:ef:c9:6f:e1:5e:6e:a7:62:43:ab:43:20:0c:38:
         a2:59:b0:cc:b3:bb:df:b0:9a:94:26:af:bf:5b:e5:59:e5:99:
         b0:3d:9e:0c:95:98:9c:a6:f9:5a:80:14:29:a9:41:bc:ec:36:
         5d:9e:33:31:92:65:53:70:1b:5e:fc:04:dd:9d:03:8d:f1:bb:
         19:57:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:02:31 2026 by rpki-client