Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          4UfBc7P+u6uiumccLZhIBwKj5LRBuZcGt+cUh1gaKzg=
Subject key identifier:   DB:A5:D1:D4:4D:B7:F9:D0:67:43:9C:AE:A2:CB:DE:BD:A8:6C:04:76
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       284AB29F69B9EC58F21DCCFF3FE143AFC50850DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02E8
Signing time:             Wed 06 May 2026 00:42:18 +0000
Manifest this update:     Wed 06 May 2026 00:37:18 +0000
Manifest next update:     Thu 07 May 2026 03:11:18 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: vuo2vgZpNQz3qafqfQaOkZHkBOTYoGpx0Ju3b1GesHc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 03:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4a:b2:9f:69:b9:ec:58:f2:1d:cc:ff:3f:e1:43:af:c5:08:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May  6 00:37:18 2026 GMT
            Not After : May  7 03:11:18 2026 GMT
        Subject: CN=DBA5D1D44DB7F9D067439CAEA2CBDEBDA86C0476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:6e:15:b4:32:1f:24:d0:cf:21:55:6b:b3:
                    8e:86:94:e2:08:4e:50:30:49:77:e4:f9:9b:3f:21:
                    ea:ad:ff:34:98:7d:30:eb:ae:2e:b1:41:13:bb:c4:
                    5b:d3:69:f0:45:9e:c3:30:f6:11:ce:34:8f:00:6d:
                    d0:94:89:3e:4d:62:8b:3c:13:cc:ff:ad:78:cb:e1:
                    63:7a:22:11:80:27:69:dd:50:8e:71:76:66:da:4f:
                    c0:7e:6b:07:a0:77:bb:a1:39:f4:02:46:95:60:7a:
                    1e:b3:6a:74:c2:88:d4:e2:81:5c:6e:b9:bc:e3:67:
                    ac:32:f3:38:fe:99:54:c6:44:dd:17:d6:e0:ec:0f:
                    01:1c:24:fe:36:7e:cf:99:ca:46:90:3e:76:df:01:
                    0b:bb:b4:98:ce:6e:4b:24:1f:2a:98:92:7c:47:53:
                    3c:d3:23:95:ac:2b:7e:81:c6:bc:5d:9b:db:9c:35:
                    de:00:a8:2f:01:a5:cb:3a:71:b6:66:ac:cd:64:a1:
                    07:fb:11:20:de:79:b5:e2:58:da:86:ed:4b:43:f9:
                    25:ea:14:7b:4b:3c:a9:de:39:eb:2e:8f:25:86:f7:
                    26:2e:8f:3f:47:3d:42:d1:34:5e:29:8d:6c:67:3f:
                    a5:8e:d7:6d:7a:1a:8d:fa:7c:f4:c9:0c:69:1a:2a:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:D1:D4:4D:B7:F9:D0:67:43:9C:AE:A2:CB:DE:BD:A8:6C:04:76
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:fd:b8:70:d7:14:10:53:94:b4:5a:70:81:b4:19:cc:24:
         f2:15:d6:33:2d:8a:99:0e:ef:1a:3a:71:8f:3d:86:21:53:57:
         df:84:d9:50:97:26:8d:81:07:04:85:6a:a1:4f:71:1b:d3:11:
         12:4e:ba:c3:0c:71:7e:54:a4:4a:23:6c:3f:bb:3a:d2:88:a3:
         05:40:24:c7:3d:15:d8:45:55:7f:ba:c9:87:4a:d8:31:63:f9:
         a7:15:3d:18:7f:9d:b6:c4:d2:ef:a6:a8:89:24:40:7b:db:ab:
         44:15:ee:94:d5:fa:f8:d5:6f:a6:2b:b9:1a:2e:d0:20:32:35:
         50:69:3c:a9:37:44:19:ff:4a:f9:fe:7a:2c:a7:a8:de:4b:a0:
         58:d6:32:e8:69:89:c6:6c:d8:fd:54:5e:e0:6b:95:70:90:d5:
         f5:56:4a:ac:b1:b8:c6:ed:b6:26:77:42:87:01:2b:38:8c:0a:
         61:65:12:da:ae:12:4b:41:c4:22:d5:19:3a:22:22:28:91:c8:
         e2:89:8e:66:06:51:bb:96:6e:62:f9:09:70:66:bb:d2:4a:6b:
         0f:a1:a7:7c:e4:f6:c7:fc:b8:13:87:1c:70:7b:52:d7:74:76:
         f9:2c:af:1d:80:33:97:32:f5:0d:cd:0d:d3:13:91:e9:6e:f1:
         ee:c9:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:25:17 2026 by rpki-client