Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          95qJzpYmETIqgguPEbxEfur1uSpUc9IjjTL/TDzbqxw=
Subject key identifier:   19:B9:00:23:F6:A0:AA:62:DE:9A:DF:83:35:9F:CD:96:73:21:8D:AB
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       11C992428846C24EA41D3CBF4445CFF1965CBED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          033D
Signing time:             Wed 08 Jul 2026 05:15:47 +0000
Manifest this update:     Wed 08 Jul 2026 05:10:47 +0000
Manifest next update:     Thu 09 Jul 2026 07:19:47 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: IxGkyMwtpD9qiuZFnfhvzz8/WxhE08+fTf7tosARX9k=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 07:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c9:92:42:88:46:c2:4e:a4:1d:3c:bf:44:45:cf:f1:96:5c:be:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Jul  8 05:10:47 2026 GMT
            Not After : Jul  9 07:19:47 2026 GMT
        Subject: CN=19B90023F6A0AA62DE9ADF83359FCD9673218DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:51:02:71:b9:68:a5:ca:e2:e3:ee:f2:90:
                    65:32:20:5a:2d:c1:26:c3:61:4a:fe:37:25:49:2d:
                    58:8e:c6:8b:5e:1a:9a:34:9d:e8:a2:17:e3:05:c3:
                    30:3c:2a:c9:53:78:5c:b2:9a:41:4d:2d:de:79:c6:
                    96:f9:01:d0:7c:b0:d3:0f:fc:bc:bd:55:d3:c3:a3:
                    58:91:cd:33:9d:5d:2d:2a:92:3e:28:1d:a1:0b:8f:
                    80:b4:3f:6e:b9:3d:2e:58:ae:43:e9:a5:f0:7a:b6:
                    3f:1d:d6:b2:5b:2f:62:7f:4d:24:5b:63:31:8b:c0:
                    c4:16:a9:c0:d9:fb:71:21:68:60:cf:44:19:d1:e5:
                    6d:95:58:b9:9c:9d:6c:7e:9a:a4:77:ab:7e:6b:a3:
                    0f:44:26:55:65:3d:9c:ce:0a:fd:6a:7a:83:ae:50:
                    10:f4:1d:8e:b6:10:da:1b:e7:79:c1:34:00:dc:83:
                    4b:f2:27:e8:d0:34:20:33:71:2b:c2:96:0f:8d:77:
                    1d:69:b1:7a:a5:37:be:7d:d5:9c:0b:b2:9d:79:9d:
                    86:2f:9c:e3:cc:15:dc:ce:01:66:90:ff:cf:aa:4c:
                    af:f9:0b:0c:ca:69:28:5a:02:33:2d:fd:17:97:de:
                    22:60:22:8d:20:96:9c:3f:bc:59:72:cd:7b:9b:ca:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:00:23:F6:A0:AA:62:DE:9A:DF:83:35:9F:CD:96:73:21:8D:AB
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:48:55:59:fc:33:e2:dc:ef:30:7f:f4:ee:0e:09:f4:1d:8e:
         20:cf:29:a2:3a:f9:c6:55:be:30:a0:00:29:fe:d2:21:06:a3:
         78:78:ab:fe:e3:db:63:57:38:fa:70:b9:b4:be:41:77:3d:37:
         13:96:21:16:1a:eb:c8:ae:14:fa:89:31:a9:6a:ed:77:dd:9f:
         6d:56:1a:51:82:a9:a6:ee:4d:48:ee:be:c9:90:95:8a:b0:e9:
         25:1e:fc:ad:d1:f4:f4:57:0d:f6:ef:6e:aa:00:7a:bb:9f:2d:
         7f:07:32:ee:6c:1a:64:1e:11:92:b8:a2:83:04:60:65:b2:09:
         af:86:8a:af:a9:c5:e0:95:d4:69:e9:7d:29:3f:76:5a:f6:11:
         4a:7a:e8:9a:5b:83:17:3b:a8:d2:3b:20:64:82:60:d1:7c:1e:
         dd:8d:c8:33:8b:f0:bd:cf:70:56:ce:36:ba:f3:40:e3:ed:1f:
         79:80:a9:77:58:d8:10:c0:5c:00:9b:84:0b:59:f2:44:ed:99:
         5c:2e:a9:e1:b7:b0:55:63:b3:32:84:53:4f:c3:54:c2:5e:6a:
         af:23:87:0a:87:13:36:a1:ca:72:de:df:b9:ad:11:97:27:0a:
         c1:0e:06:fc:30:0b:06:b2:57:e8:59:55:9e:b7:36:b7:d8:19:
         21:fc:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:15:14 2026 by rpki-client