Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          eg0kKGbJLn39uThRnVlXlfyxpzCrjfnzFT+OK1L8RgA=
Subject key identifier:   12:B3:29:4F:16:6B:25:0C:12:7A:65:A4:E5:DD:31:44:96:B2:DA:33
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       6E67D711DEEF0E6D15799E48F6CB9CDB195A8A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          02F9
Signing time:             Tue 19 May 2026 06:43:10 +0000
Manifest this update:     Tue 19 May 2026 06:38:10 +0000
Manifest next update:     Wed 20 May 2026 10:09:10 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: tj8iGANIc0jNGXgAc8dHvmg9+hL5E6ZqkXJQJYjWLIw=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 10:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:67:d7:11:de:ef:0e:6d:15:79:9e:48:f6:cb:9c:db:19:5a:8a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 19 06:38:10 2026 GMT
            Not After : May 20 10:09:10 2026 GMT
        Subject: CN=12B3294F166B250C127A65A4E5DD314496B2DA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:2e:00:b3:eb:b8:ad:e0:a6:e8:0c:16:87:
                    a0:fd:1a:7f:56:3a:9c:50:89:c7:40:9c:e4:e3:99:
                    98:0c:80:59:75:c0:23:72:99:29:86:ae:bf:2b:4d:
                    f4:33:f4:9c:48:df:48:2d:2e:86:65:33:a6:51:3f:
                    c4:dc:9b:8e:f2:20:0c:96:e6:4a:24:f1:20:f9:65:
                    dd:0d:8a:13:b6:d5:96:bf:4e:25:69:e8:fa:76:eb:
                    0d:52:19:13:27:48:30:c2:4c:46:73:9c:5f:d8:0f:
                    2a:9a:e2:f0:19:64:77:1d:33:a8:9f:05:80:91:ba:
                    d9:0d:2d:69:52:4b:8c:d8:10:84:46:46:f4:ed:a2:
                    aa:d4:ac:cd:f7:e5:16:01:f6:cb:52:eb:d7:d4:46:
                    a1:30:e7:a8:49:e2:1b:1e:6e:6b:bd:aa:69:cd:1f:
                    05:a3:f3:57:8a:be:dc:3a:79:bf:26:54:7b:21:d0:
                    fa:da:b3:86:52:2c:40:54:ab:f7:d7:32:1d:e4:49:
                    b0:3d:16:24:68:f3:6b:45:0e:99:cc:f9:ad:24:d1:
                    9c:6c:ca:4d:fa:d6:c8:b8:f1:ff:23:b9:95:aa:d4:
                    7c:15:75:e4:92:38:da:18:df:a8:1f:6f:00:56:a2:
                    a8:69:b9:56:da:7d:9b:c7:00:eb:74:8e:42:f4:43:
                    97:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:29:4F:16:6B:25:0C:12:7A:65:A4:E5:DD:31:44:96:B2:DA:33
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:02:6c:b2:8d:5b:dc:8b:e3:86:f9:d3:8e:7d:2c:b4:1a:
         c1:a4:3b:60:3b:d7:2b:a4:ee:aa:86:d7:a6:fb:6f:ca:4c:bc:
         37:5a:16:80:d6:fb:88:09:8f:3f:25:64:6f:af:96:79:5b:de:
         e8:fd:4a:74:7a:54:9d:9e:25:72:c9:29:81:f2:b1:34:17:0a:
         cd:c7:4b:76:46:02:4a:3e:70:01:74:9f:9d:8d:a5:35:69:6a:
         f9:83:9c:39:3b:e1:a4:37:22:15:58:32:7e:1f:95:8c:d5:4e:
         63:59:6f:e8:2a:05:fe:3a:9d:31:7f:4f:2d:f4:b0:06:c2:a6:
         3a:29:3f:fb:a3:f5:a6:bf:5a:9c:93:63:6a:d6:6a:85:3d:5b:
         06:30:7d:26:41:ef:30:6a:e1:33:73:eb:18:51:2b:40:2f:95:
         30:a2:89:c6:45:9d:d7:86:97:10:15:f6:82:30:ac:62:fb:93:
         f0:ca:e5:09:03:e0:dc:e6:e7:21:f0:62:64:fa:61:ee:f3:ab:
         13:4b:48:25:1a:d6:52:99:42:8d:10:10:0c:01:e8:10:ba:97:
         45:ca:b5:d5:8d:6a:6c:7b:b1:05:37:9b:cb:12:ce:83:7e:2a:
         23:4f:da:9d:cc:7e:9f:75:20:93:81:fa:32:42:e5:f2:f6:33:
         45:39:54:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 21:15:06 2026 by rpki-client