Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          51X+VQdq/X+gg9P+NMSKaJqjgSTYl+DJJreYBHx+cyQ=
Subject key identifier:   11:64:36:3A:BF:43:DE:6D:51:AD:4A:74:82:77:40:38:DA:87:7C:A9
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       0C003D18AB594417F711891DF97A2E68249FEB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02E0
Signing time:             Thu 30 Apr 2026 03:21:37 +0000
Manifest this update:     Thu 30 Apr 2026 03:16:37 +0000
Manifest next update:     Fri 01 May 2026 07:20:37 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 9YR17t+HethSfjAprJmVO8GtHN7d6dI+AXjOxUIaAhs=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:00:3d:18:ab:59:44:17:f7:11:89:1d:f9:7a:2e:68:24:9f:eb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Apr 30 03:16:37 2026 GMT
            Not After : May  1 07:20:37 2026 GMT
        Subject: CN=1164363ABF43DE6D51AD4A7482774038DA877CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:41:a4:ad:92:f2:8f:7c:52:39:74:ea:74:
                    25:8c:5e:d9:7d:79:b7:b1:40:10:d1:ac:8e:49:c7:
                    62:14:df:1b:4e:c9:ce:a5:b0:b8:ca:a5:7e:a7:52:
                    12:8f:0d:c3:35:7c:7b:3f:3c:d2:1d:73:29:ce:45:
                    5e:db:a4:53:eb:16:07:af:a8:2e:4c:0b:75:f9:3c:
                    ef:09:9f:81:cc:8e:cd:d3:03:7c:9f:43:1e:92:aa:
                    c6:8f:df:36:7f:6a:90:83:a4:22:cb:b2:8f:2b:a2:
                    0c:17:3d:9e:a3:6b:bf:11:6f:61:72:01:99:3c:d7:
                    be:c2:65:90:65:cc:f3:02:7f:93:8e:36:c7:0c:5e:
                    d4:7b:27:4e:ab:73:24:a9:d6:a2:cf:77:3a:9f:6f:
                    40:03:32:ad:b3:c3:d4:a6:fd:fe:d8:32:c5:fc:0a:
                    09:03:c4:a6:7c:f2:cf:53:b7:4d:8c:04:15:59:7c:
                    fc:50:48:65:54:05:f2:44:85:9f:c1:7f:09:2a:e6:
                    ff:e3:9c:8d:54:ba:95:2a:3d:ac:cf:bc:21:ba:8d:
                    04:cf:8a:9b:00:86:3c:c5:26:0b:90:83:71:44:82:
                    be:48:46:e1:59:c1:b4:3a:f2:32:7e:1e:22:93:6c:
                    28:a3:4c:06:a8:15:1c:2e:66:5e:ad:ca:b4:95:06:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:64:36:3A:BF:43:DE:6D:51:AD:4A:74:82:77:40:38:DA:87:7C:A9
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:a7:51:0c:e8:5f:db:da:d0:c8:6f:dd:38:14:51:30:ab:
         5b:9c:a2:07:7b:68:32:ae:70:38:01:f2:49:ab:6f:09:90:76:
         c8:ea:4b:3f:39:df:66:70:37:d4:ea:69:fc:4c:c3:2a:0d:24:
         71:4f:25:de:35:01:d6:87:e9:a9:9b:f1:33:d2:95:1c:b2:fe:
         ad:df:d0:28:95:4c:f2:79:27:d8:e7:71:25:1c:5a:a8:06:97:
         78:99:ec:7f:17:e5:d7:d2:60:82:aa:61:d8:b6:2c:8e:c4:5a:
         7a:c5:fe:38:a9:cc:89:bb:28:ee:58:24:57:17:19:0d:ee:9c:
         f0:8b:ab:73:55:b8:a0:6e:d2:14:c6:a6:6e:ae:7b:66:ed:7f:
         de:06:a8:ed:5a:cc:53:ac:98:44:d1:ef:6f:81:a5:3a:7f:27:
         ba:c2:4f:f7:a6:e8:26:77:05:d1:fa:1c:c1:ee:13:cc:e2:d8:
         06:bf:4a:8f:59:54:b9:06:64:e6:17:32:a6:28:69:e5:f1:c9:
         f0:1c:a5:be:b9:db:62:2e:1f:1a:ad:db:3b:e1:c1:b4:12:19:
         80:3f:9a:13:f7:86:0e:bc:03:59:e5:b8:d8:88:da:bc:05:0b:
         6d:2b:8b:18:27:c7:27:b7:a1:d4:5c:01:93:7c:4b:fc:8f:27:
         e3:24:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:26:31 2026 by rpki-client