Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          eEEhbEU4UsT7HgLVwdDYFN47oOOLWst+R1Itiba0g2U=
Subject key identifier:   79:C0:42:50:7E:86:5F:75:71:9D:7F:1E:77:2C:FA:BE:D1:12:39:2E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       191D11C266B63783779C863E12D4D65DE3F9E46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02F8
Signing time:             Mon 18 May 2026 10:43:04 +0000
Manifest this update:     Mon 18 May 2026 10:38:04 +0000
Manifest next update:     Tue 19 May 2026 14:40:04 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: kAgfAcDP+nWnMGgVHsqVxf6+SEAgPbJ7IinLiGA7xhg=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 19 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1d:11:c2:66:b6:37:83:77:9c:86:3e:12:d4:d6:5d:e3:f9:e4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 18 10:38:04 2026 GMT
            Not After : May 19 14:40:04 2026 GMT
        Subject: CN=79C042507E865F75719D7F1E772CFABED112392E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:7e:8c:e9:97:74:82:3a:20:8c:92:5e:86:
                    f7:a5:c5:ce:e2:2c:f0:72:d1:8d:36:cd:a6:88:fe:
                    e0:f4:9d:31:0c:7f:51:b7:81:7d:e0:64:c7:fe:2f:
                    f3:5f:e4:05:a9:90:0f:18:62:3f:d4:bc:e5:a2:ca:
                    8c:33:13:a2:ca:5c:73:27:25:7b:9c:48:5f:13:bc:
                    d2:cb:0d:07:30:70:eb:f2:74:91:0e:39:83:96:4b:
                    36:ce:75:02:09:1b:15:a2:fe:43:e4:e4:ad:b1:1c:
                    09:d1:67:73:db:87:da:9b:f6:3a:70:f3:e9:4a:9f:
                    9c:47:a0:46:aa:b8:b0:7c:83:49:68:4e:77:b8:18:
                    95:e9:a1:a1:e1:41:61:bb:e2:7d:4b:46:2a:ae:03:
                    d7:cb:65:c3:b9:9c:7a:5f:8f:a9:06:f8:55:c8:5d:
                    1a:5f:50:81:f8:dc:da:45:de:24:4f:78:f2:ce:ea:
                    fd:0b:af:fa:fb:b7:db:be:28:06:7f:69:4e:2b:e8:
                    f8:f5:59:3d:11:0b:6e:fd:d0:f1:ad:79:51:5a:d6:
                    52:87:cf:78:ab:eb:4e:03:f0:8e:c6:6a:e5:b9:bb:
                    4a:51:42:82:79:dc:9d:63:00:a8:f1:8c:fd:05:ff:
                    4f:7b:60:7d:41:7e:41:27:9d:2d:7c:1a:9c:09:aa:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:42:50:7E:86:5F:75:71:9D:7F:1E:77:2C:FA:BE:D1:12:39:2E
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:56:fd:a8:b4:f0:31:c0:c5:7a:0f:70:29:c4:8f:a0:8a:c4:
         75:5a:00:cc:22:72:fd:8e:ff:7a:9f:2d:8a:56:54:57:8e:4c:
         72:70:89:99:4a:54:b9:cd:c2:5c:28:42:be:45:f3:99:6a:b2:
         f7:6a:28:68:0a:29:aa:09:0f:1f:1a:3c:7f:9f:1f:f9:62:c3:
         87:e7:b6:fd:4f:df:b6:ae:37:84:0c:16:db:7c:e8:7b:c2:45:
         b8:88:44:d9:4d:99:f3:ac:fc:a2:e4:92:eb:64:d6:6f:1d:03:
         8c:ec:5a:01:9f:17:3e:6a:86:a4:01:0d:e6:3b:94:d4:a4:93:
         20:81:5c:f4:ff:f2:c2:35:35:ec:22:4d:35:90:ff:02:5c:9d:
         ad:ce:5c:bb:0e:cc:75:4a:be:a1:5f:d6:4d:c0:fa:09:bc:48:
         96:bc:f1:09:bf:7a:3c:10:0e:4e:ca:4c:5d:56:ed:3d:a2:4e:
         16:ca:cb:d3:97:13:06:4e:bb:5d:22:cd:66:8f:7a:e6:12:57:
         84:3d:94:91:60:4e:65:29:44:cf:44:4b:54:9e:ef:dd:d2:96:
         81:49:b5:92:30:b0:07:0b:e4:ed:9e:14:05:ca:26:a7:78:a3:
         2d:0f:e9:5c:b1:16:58:41:5c:45:c0:9b:f4:24:32:28:bc:f8:
         cb:ed:68:e2
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUGR0Rwma2N4N3nIY+EtTWXeP55GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MTgxMDM4MDRaFw0yNjA1MTkxNDQwMDRaMDMxMTAvBgNV
BAMTKDc5QzA0MjUwN0U4NjVGNzU3MTlEN0YxRTc3MkNGQUJFRDExMjM5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3B36M6Zd0gjogjJJehvelxc7i
LPBy0Y02zaaI/uD0nTEMf1G3gX3gZMf+L/Nf5AWpkA8YYj/UvOWiyowzE6LKXHMn
JXucSF8TvNLLDQcwcOvydJEOOYOWSzbOdQIJGxWi/kPk5K2xHAnRZ3Pbh9qb9jpw
8+lKn5xHoEaquLB8g0loTne4GJXpoaHhQWG74n1LRiquA9fLZcO5nHpfj6kG+FXI
XRpfUIH43NpF3iRPePLO6v0Lr/r7t9u+KAZ/aU4r6Pj1WT0RC2790PGteVFa1lKH
z3ir604D8I7GauW5u0pRQoJ53J1jAKjxjP0F/097YH1BfkEnnS18GpwJqkdJAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUecBCUH6GX3VxnX8edyz6vtESOS4wHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAu1b9qLTwMcDFeg9wKcSPoIrEdVoAzCJy/Y7/ep8tilZUV45McnCJmUpU
uc3CXChCvkXzmWqy92ooaAopqgkPHxo8f58f+WLDh+e2/U/ftq43hAwW23zoe8JF
uIhE2U2Z86z8ouSS62TWbx0DjOxaAZ8XPmqGpAEN5juU1KSTIIFc9P/ywjU17CJN
NZD/Alydrc5cuw7MdUq+oV/WTcD6CbxIlrzxCb96PBAOTspMXVbtPaJOFsrL05cT
Bk67XSLNZo965hJXhD2UkWBOZSlEz0RLVJ7v3dKWgUm1kjCwBwvk7Z4UBcomp3ij
LQ/pXLEWWEFcRcCb9CQyKLz4y+1o4g==
-----END CERTIFICATE-----
Generated at Mon May 18 13:00:26 2026 by rpki-client