Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          KZvlMelkx+xIkF/y5moZscUDLQRulendFZRQsJrraC4=
Subject key identifier:   DA:2B:8D:87:D6:5E:BD:DF:90:E2:C6:BA:39:96:64:5D:9F:2E:D9:9C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       4464A0ACE406403D09000D21B1F1F88051BE3F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          029E
Signing time:             Thu 12 Mar 2026 00:52:31 +0000
Manifest this update:     Thu 12 Mar 2026 00:47:31 +0000
Manifest next update:     Fri 13 Mar 2026 04:33:31 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 9nFDR19B+Lfs/VHc4LoTF9IcugMlAyInz0BTLpByXps=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 04:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:64:a0:ac:e4:06:40:3d:09:00:0d:21:b1:f1:f8:80:51:be:3f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Mar 12 00:47:31 2026 GMT
            Not After : Mar 13 04:33:31 2026 GMT
        Subject: CN=DA2B8D87D65EBDDF90E2C6BA3996645D9F2ED99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:21:e3:fb:50:55:96:df:dc:d4:08:d0:cf:
                    79:1e:9f:89:50:5d:28:9d:b7:61:4d:f9:8e:6c:07:
                    44:a2:45:0c:cd:b1:ca:63:4f:85:32:72:1d:62:f2:
                    5e:c1:c3:48:7c:b4:71:f7:d3:0b:18:93:01:48:af:
                    47:89:e5:1a:a0:37:13:ce:70:f4:9a:53:6f:0c:ec:
                    48:16:4d:a8:88:06:72:3a:4f:a0:ea:b0:49:05:6e:
                    d3:e4:1e:d6:c2:5e:21:79:fd:9e:08:d8:0a:26:e8:
                    3c:48:69:93:09:75:61:8a:ad:a5:93:dc:3d:57:ff:
                    15:92:6f:cd:74:7f:49:8f:09:d1:f2:45:c5:74:48:
                    15:3d:2e:4a:fb:b8:2b:f4:5b:ef:a4:42:bb:22:bc:
                    0e:b9:03:1b:ef:a5:5d:5a:4a:25:dc:8e:32:9d:9f:
                    68:ab:54:cd:64:26:e1:8c:0e:33:93:a8:95:42:dd:
                    37:c4:1a:5b:c7:ff:95:14:dc:b5:f2:1d:3b:7a:f1:
                    89:dc:51:4e:fd:d6:92:93:65:4e:a9:33:09:6c:22:
                    32:79:d3:98:ac:23:87:87:5d:05:30:58:02:08:46:
                    df:c3:0f:3f:1b:9d:5a:7a:78:3f:9a:44:85:6c:a1:
                    86:d0:04:fb:54:57:f2:50:7e:90:80:4a:f4:2b:7d:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2B:8D:87:D6:5E:BD:DF:90:E2:C6:BA:39:96:64:5D:9F:2E:D9:9C
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:07:3d:80:c3:ba:af:9c:b7:63:7a:e8:a2:63:94:82:73:
         b1:73:7a:5e:fc:2c:7b:ba:80:df:48:64:e2:5e:2f:c3:9c:d7:
         65:7d:cd:37:1e:d2:cb:c1:b0:d0:4f:75:1c:f3:3d:90:88:89:
         34:5b:15:3c:90:33:b4:7a:2d:4f:ae:4f:78:da:c8:8c:f2:33:
         b9:77:82:3a:3e:e6:25:6b:5d:68:64:a4:29:b1:19:58:96:c1:
         cc:36:44:0e:c3:80:37:39:ca:b2:f2:ca:c3:ad:b3:7b:24:58:
         61:d1:bc:3a:02:60:2d:eb:7e:02:0a:42:65:7d:6f:f8:81:ef:
         e3:d8:1c:b5:c2:ad:91:bd:ca:14:83:da:52:c3:07:82:e5:7e:
         38:f1:f7:65:3e:de:84:be:d1:61:a3:99:35:6f:23:71:cf:5c:
         36:06:2c:5f:dc:db:47:09:a8:33:35:e0:cc:a5:78:98:9b:08:
         85:e4:61:a4:e7:09:84:64:a0:fc:c6:ed:db:cc:4b:fa:de:c9:
         91:71:10:60:25:85:0f:18:32:e9:0d:4d:5c:ac:ca:b5:33:c1:
         0f:33:d5:35:be:1d:23:dd:ab:5d:54:c4:d4:25:22:b4:ec:3e:
         5b:91:50:7d:5f:1e:89:86:45:04:93:78:ac:87:4f:83:6a:32:
         23:30:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:19:39 2026 by rpki-client