Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          brNCmqGHb0kv/fImjSs8pMo+yJ6eEjRkv2lmwNEXMM8=
Subject key identifier:   21:77:61:20:D5:00:AA:DF:6B:BB:41:D9:69:FB:6D:13:79:58:08:2C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       064B3CF08ABACD51B90805FC5BFB2573E1E32559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0376
Signing time:             Wed 19 Aug 2026 12:56:43 +0000
Manifest this update:     Wed 19 Aug 2026 12:51:43 +0000
Manifest next update:     Thu 20 Aug 2026 15:00:43 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Hmpk/beCGYQF9pMyfLT1LLMk3N3Ua2sNdzT/UovTdUA=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Aug 2026 13:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:3c:f0:8a:ba:cd:51:b9:08:05:fc:5b:fb:25:73:e1:e3:25:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Aug 19 12:51:43 2026 GMT
            Not After : Aug 20 15:00:43 2026 GMT
        Subject: CN=21776120D500AADF6BBB41D969FB6D137958082C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:80:ba:bb:2c:a0:4b:86:d2:52:54:63:93:
                    05:eb:7c:fc:1e:8f:a8:85:87:07:1f:f4:77:3f:54:
                    e7:22:30:d2:f9:68:11:a2:fd:e5:05:f2:5a:7c:a2:
                    d9:01:88:d3:9b:54:24:51:ea:2c:d2:34:58:c3:29:
                    af:7d:fa:b4:3c:d1:e3:6d:e9:b3:66:51:52:6a:a1:
                    37:e4:4f:32:92:47:d7:ff:3a:fe:aa:00:6a:7e:55:
                    de:d0:84:cb:af:9b:a6:a3:e0:ec:f1:94:fe:17:93:
                    cb:ca:30:41:43:8c:00:fa:9b:b1:0d:fa:ce:41:06:
                    aa:a3:7f:8f:10:4a:95:72:f2:fd:c8:44:77:52:46:
                    44:3d:02:83:9e:04:e9:80:00:c8:18:66:29:08:83:
                    b9:f2:24:b7:98:32:bf:fc:40:8c:a3:15:5b:47:7b:
                    ba:07:0d:77:81:1b:d9:29:71:1c:42:0f:d2:12:b0:
                    e5:6f:4c:94:95:23:33:3c:1a:4e:d8:83:77:1e:e3:
                    95:7f:bd:5e:c5:58:31:df:bf:05:cf:00:02:ef:b1:
                    ad:f3:1b:6d:50:dd:0b:86:98:9d:26:19:c8:b2:a2:
                    cc:b5:cc:94:70:38:74:87:49:c8:42:32:49:b8:74:
                    a3:1a:80:d8:42:92:d6:5c:68:00:dd:b4:b0:b4:6e:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:61:20:D5:00:AA:DF:6B:BB:41:D9:69:FB:6D:13:79:58:08:2C
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:7c:b9:0c:7e:cd:7d:01:3e:bf:2d:3a:da:11:cd:f9:80:
         28:e3:77:56:48:81:58:c0:6d:30:38:80:77:02:60:ff:82:22:
         e7:25:71:cc:2b:dd:ee:5f:6c:72:50:6a:2d:c9:2c:be:41:74:
         93:24:69:02:da:9c:da:ef:6e:4a:e4:59:6d:81:7d:83:c1:3e:
         2a:ae:d3:4a:2f:43:3b:c9:64:13:71:48:6c:55:be:25:b9:8e:
         77:5e:2c:58:ce:68:01:a7:b0:4f:6d:a1:61:80:2f:b1:6d:c6:
         2c:28:d4:3d:40:0e:b9:8c:c9:03:ea:c5:e0:41:df:2d:2b:17:
         43:26:8f:04:0a:18:bf:a5:2a:4a:2a:50:ac:f6:20:7b:cc:df:
         22:5a:46:2e:1c:b9:c6:48:9d:f7:5b:65:cb:31:09:61:bb:ad:
         1b:84:86:d1:d4:a8:82:dd:bc:11:1c:e1:e4:e9:1d:9a:d7:19:
         b6:fb:df:25:d5:28:17:49:d4:17:31:57:0a:b8:bb:1f:e2:dc:
         a1:eb:7e:e5:a0:e8:74:94:bf:a1:6e:2f:a0:75:84:c0:a4:79:
         b8:72:f3:e5:93:c8:e7:b3:6f:85:3d:d7:60:51:34:62:23:46:
         b2:54:f6:86:46:13:59:1a:4b:24:71:d2:7b:d1:0d:2a:fe:82:
         5b:06:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:52:00 2026 by rpki-client