Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          2dmDCqe+EbSysAV8MT2vdiNN/BbcQ6hCejuJ6MpGJkY=
Subject key identifier:   18:6B:33:8B:78:66:16:75:78:75:44:BD:61:51:00:59:33:FD:8A:06
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       65E15880FA0037D72A8E68B44FE0C582231C3611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02F3
Signing time:             Thu 14 May 2026 08:58:00 +0000
Manifest this update:     Thu 14 May 2026 08:53:00 +0000
Manifest next update:     Fri 15 May 2026 12:19:00 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Zer720kGU+k124T3+EoiJNIxn1FgpFQb9/FHy3deOno=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 12:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e1:58:80:fa:00:37:d7:2a:8e:68:b4:4f:e0:c5:82:23:1c:36:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 14 08:53:00 2026 GMT
            Not After : May 15 12:19:00 2026 GMT
        Subject: CN=186B338B78661675787544BD6151005933FD8A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:45:18:a5:16:00:d6:b4:e0:c5:37:0e:6f:
                    da:42:48:16:7f:80:e6:be:15:e2:96:68:cf:3b:93:
                    bb:d5:27:e7:b3:64:6e:c5:c2:09:0e:f3:2f:9d:16:
                    51:a0:29:36:d6:e1:28:ef:34:5b:52:2b:dc:c3:b6:
                    73:4d:7a:9a:82:7c:50:2c:5e:e9:a9:41:6c:ed:c9:
                    e7:3d:c4:6c:24:ea:52:1b:fa:84:10:98:be:47:6b:
                    ae:75:9e:31:c7:19:de:af:a1:c7:d2:5d:4d:da:2c:
                    ea:53:65:63:61:d1:2e:d0:e5:08:2a:59:b9:a9:97:
                    d6:27:19:56:7e:d7:bf:f5:3f:ef:cf:70:5e:e1:10:
                    5d:f5:ed:00:99:dc:e4:c1:9b:7b:d5:6f:7e:76:00:
                    32:3f:b3:80:a1:9f:63:ba:1e:60:07:cc:a1:8c:cc:
                    f6:5b:9b:e7:d7:c3:ee:b4:e7:07:33:91:c4:ad:f6:
                    d6:6e:ea:be:4f:c2:b3:ff:c0:a6:c0:10:78:d9:8b:
                    a9:11:f2:59:3a:73:27:03:c9:b6:3d:13:62:c0:c2:
                    94:cd:bc:fe:cd:79:09:6c:7e:5c:67:02:3a:3a:24:
                    e3:18:17:53:64:9a:76:c0:a4:4f:da:37:f6:0f:d5:
                    af:15:01:50:1a:a9:bd:83:01:85:ed:73:6b:ad:27:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6B:33:8B:78:66:16:75:78:75:44:BD:61:51:00:59:33:FD:8A:06
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:9e:a3:c8:57:41:eb:f2:83:78:54:69:69:94:37:91:fa:
         49:ae:89:a4:86:80:8f:b9:7b:60:cf:5c:16:36:db:19:4a:23:
         d7:c0:bd:fb:e2:4e:c2:72:d9:92:a6:bd:21:4d:3b:70:0d:8d:
         c4:54:fa:3e:e4:ac:c0:ef:75:9f:a5:da:4f:2b:34:97:02:34:
         18:59:fe:8d:05:f3:8d:c7:8d:af:22:33:0a:05:1d:e2:54:df:
         e9:31:c9:db:23:ee:c9:68:d8:59:82:d2:4e:43:7c:91:1b:79:
         9d:e2:53:60:03:fb:1b:75:9d:6c:c4:44:bd:b3:5b:49:e5:1d:
         e6:8a:00:85:52:7a:12:13:93:65:3e:df:a3:54:f4:7b:2d:e2:
         09:af:39:b8:ff:33:34:ee:54:4c:a0:e3:4c:55:ce:fc:bb:36:
         3f:a9:75:83:36:ee:1e:68:25:22:e8:9e:7e:b3:64:78:29:4f:
         aa:44:96:b7:11:58:28:50:4b:1d:b9:82:68:f4:6b:2e:50:12:
         47:42:b3:58:11:aa:58:de:02:75:25:43:2f:0a:e2:9a:79:25:
         f4:01:0e:90:3c:c4:8c:64:d2:9a:40:63:c0:90:c9:3c:ab:e8:
         cf:90:a6:06:61:24:48:de:57:fe:cc:84:a9:e5:bf:a3:b9:54:
         a7:75:06:83
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUZeFYgPoAN9cqjmi0T+DFgiMcNhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MTQwODUzMDBaFw0yNjA1MTUxMjE5MDBaMDMxMTAvBgNV
BAMTKDE4NkIzMzhCNzg2NjE2NzU3ODc1NDRCRDYxNTEwMDU5MzNGRDhBMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZUUYpRYA1rTgxTcOb9pCSBZ/
gOa+FeKWaM87k7vVJ+ezZG7FwgkO8y+dFlGgKTbW4SjvNFtSK9zDtnNNepqCfFAs
XumpQWztyec9xGwk6lIb+oQQmL5Ha651njHHGd6vocfSXU3aLOpTZWNh0S7Q5Qgq
Wbmpl9YnGVZ+17/1P+/PcF7hEF317QCZ3OTBm3vVb352ADI/s4Chn2O6HmAHzKGM
zPZbm+fXw+605wczkcSt9tZu6r5PwrP/wKbAEHjZi6kR8lk6cycDybY9E2LAwpTN
vP7NeQlsflxnAjo6JOMYF1NkmnbApE/aN/YP1a8VAVAaqb2DAYXtc2utJ+jDAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUGGszi3hmFnV4dUS9YVEAWTP9igYwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEASTyeo8hXQevyg3hUaWmUN5H6Sa6JpIaAj7l7YM9cFjbbGUoj18C9++JO
wnLZkqa9IU07cA2NxFT6PuSswO91n6XaTys0lwI0GFn+jQXzjceNryIzCgUd4lTf
6THJ2yPuyWjYWYLSTkN8kRt5neJTYAP7G3WdbMREvbNbSeUd5ooAhVJ6EhOTZT7f
o1T0ey3iCa85uP8zNO5UTKDjTFXO/Ls2P6l1gzbuHmglIuiefrNkeClPqkSWtxFY
KFBLHbmCaPRrLlASR0KzWBGqWN4CdSVDLwrimnkl9AEOkDzEjGTSmkBjwJDJPKvo
z5CmBmEkSN5X/syEqeW/o7lUp3UGgw==
-----END CERTIFICATE-----
Generated at Thu May 14 20:48:22 2026 by rpki-client