Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          x1A6yhpt7jtpj0I2xJGTgjnZKItj89Fikz3vvBxMOz4=
Subject key identifier:   77:63:13:44:B7:62:FC:70:98:D9:B8:3E:0A:15:36:37:DB:00:76:0A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       3863CDBB108F2535A2E14B1B19E382A8AE633AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0293
Signing time:             Mon 02 Mar 2026 19:42:04 +0000
Manifest this update:     Mon 02 Mar 2026 19:37:04 +0000
Manifest next update:     Tue 03 Mar 2026 22:45:04 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: WIlE9z9JmmS+w9mmUMxwUQVizO+Mz84tl27GIPb6diw=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:63:cd:bb:10:8f:25:35:a2:e1:4b:1b:19:e3:82:a8:ae:63:3a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Mar  2 19:37:04 2026 GMT
            Not After : Mar  3 22:45:04 2026 GMT
        Subject: CN=77631344B762FC7098D9B83E0A153637DB00760A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:40:f9:01:49:9a:f3:f9:91:8a:47:4d:aa:
                    36:78:3e:d2:c0:9a:8c:43:b6:73:eb:c0:10:3e:d2:
                    9a:4a:0b:8c:db:6a:33:ed:e3:6a:f8:ba:c0:99:d9:
                    9c:fc:14:65:94:59:69:77:9e:80:2f:78:c6:bf:14:
                    24:e3:98:94:97:f8:31:e4:f8:f7:08:0d:f3:de:e1:
                    ab:a1:07:dc:80:43:cc:33:73:ca:7a:d5:94:07:27:
                    10:9f:7c:57:c8:81:49:26:1f:1c:c2:2a:14:c5:fb:
                    5f:d9:6c:6f:ac:6b:d2:f5:b3:36:8b:0c:51:b7:a1:
                    d9:76:58:c4:81:f5:69:50:d9:23:98:8d:b9:3e:5a:
                    50:67:ae:d8:19:28:0a:a0:1b:27:39:d1:c6:91:87:
                    ef:ea:de:25:37:36:a4:34:84:7a:f9:99:e8:9b:2b:
                    75:a8:ca:09:28:fa:05:46:56:3e:6b:08:f1:3e:a7:
                    89:08:c3:91:41:48:cd:e0:33:73:db:52:c3:69:c3:
                    0a:a6:f7:30:82:5c:81:85:2f:fc:b5:0a:74:71:5d:
                    a1:0f:f6:f7:5c:ad:ba:78:f3:80:a2:54:84:68:8f:
                    55:13:e1:d4:09:09:99:83:60:b4:3f:bc:95:7f:64:
                    c7:d6:7d:b7:14:81:1c:69:77:98:fd:47:8f:b1:77:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:13:44:B7:62:FC:70:98:D9:B8:3E:0A:15:36:37:DB:00:76:0A
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:70:46:90:37:4f:19:b5:fa:86:1b:39:6c:11:2a:8b:99:
         a1:05:84:cb:0e:c8:bb:8e:7f:c4:4f:5b:23:9b:d7:05:c5:4f:
         46:86:8a:14:03:19:0c:44:07:41:26:67:55:06:d1:28:0e:ed:
         88:20:ec:84:8d:04:6d:33:37:f9:e6:d6:fa:e5:e1:35:de:51:
         57:83:fd:4a:07:f2:ac:8c:5f:01:f1:44:11:37:b6:60:44:d0:
         ad:ef:24:5f:5d:71:ab:0f:0f:93:9b:69:85:43:e1:d0:f1:bf:
         0f:eb:76:71:a2:e5:ec:0f:b6:61:7d:22:20:49:96:37:d8:3a:
         f8:57:aa:ac:cc:0b:e4:88:1c:69:72:20:db:5b:ee:96:f6:6a:
         5a:8f:4c:ea:a1:d7:0e:1e:a4:3a:92:49:c6:e1:61:f0:7e:d4:
         e6:7f:d0:49:04:3d:da:9a:6e:46:46:09:4b:29:c5:a8:75:90:
         0d:86:c0:17:fd:86:e5:11:75:5d:71:4c:87:8f:eb:9b:28:b4:
         23:ce:4d:b4:18:72:44:ab:93:6d:59:fb:26:4c:1d:02:6a:8a:
         44:6d:79:1b:8a:e1:eb:8a:44:7f:45:c4:f3:61:cc:c5:70:4f:
         ae:43:7b:dc:39:cb:21:f9:33:1f:21:e0:24:e1:c6:74:ba:52:
         e4:5a:a3:72
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUOGPNuxCPJTWi4UsbGeOCqK5jOrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjAzMDIxOTM3MDRaFw0yNjAzMDMyMjQ1MDRaMDMxMTAvBgNV
BAMTKDc3NjMxMzQ0Qjc2MkZDNzA5OEQ5QjgzRTBBMTUzNjM3REIwMDc2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gkD5AUma8/mRikdNqjZ4PtLA
moxDtnPrwBA+0ppKC4zbajPt42r4usCZ2Zz8FGWUWWl3noAveMa/FCTjmJSX+DHk
+PcIDfPe4auhB9yAQ8wzc8p61ZQHJxCffFfIgUkmHxzCKhTF+1/ZbG+sa9L1szaL
DFG3odl2WMSB9WlQ2SOYjbk+WlBnrtgZKAqgGyc50caRh+/q3iU3NqQ0hHr5meib
K3Woygko+gVGVj5rCPE+p4kIw5FBSM3gM3PbUsNpwwqm9zCCXIGFL/y1CnRxXaEP
9vdcrbp484CiVIRoj1UT4dQJCZmDYLQ/vJV/ZMfWfbcUgRxpd5j9R4+xd/ZzAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUd2MTRLdi/HCY2bg+ChU2N9sAdgowHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAJC1wRpA3Txm1+oYbOWwRKouZoQWEyw7Iu45/xE9bI5vXBcVPRoaKFAMZ
DEQHQSZnVQbRKA7tiCDshI0EbTM3+ebW+uXhNd5RV4P9SgfyrIxfAfFEETe2YETQ
re8kX11xqw8Pk5tphUPh0PG/D+t2caLl7A+2YX0iIEmWN9g6+FeqrMwL5IgcaXIg
21vulvZqWo9M6qHXDh6kOpJJxuFh8H7U5n/QSQQ92ppuRkYJSynFqHWQDYbAF/2G
5RF1XXFMh4/rmyi0I85NtBhyRKuTbVn7JkwdAmqKRG15G4rh64pEf0XE82HMxXBP
rkN73DnLIfkzHyHgJOHGdLpS5Fqjcg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:31:27 2026 by rpki-client