Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          7QzRWsOZ2b1ikTg6hPf/j82q23C5Y97Nd58fgi7bIpM=
Subject key identifier:   22:8A:29:7D:16:45:66:93:83:00:44:14:13:E1:32:B8:92:52:E7:84
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       5E2B836F48B844E0D6B8FBCB44E41CDE65FDD2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0306
Signing time:             Fri 29 May 2026 04:53:16 +0000
Manifest this update:     Fri 29 May 2026 04:48:16 +0000
Manifest next update:     Sat 30 May 2026 06:33:16 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: xgYehektqtD2niDMgykSdGiMAb0/m00wDqIW8gHhMSI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 May 2026 06:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:83:6f:48:b8:44:e0:d6:b8:fb:cb:44:e4:1c:de:65:fd:d2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: May 29 04:48:16 2026 GMT
            Not After : May 30 06:33:16 2026 GMT
        Subject: CN=228A297D164566938300441413E132B89252E784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:10:a2:e8:a7:66:2a:0f:a4:e5:26:f6:6c:
                    2f:74:f4:8c:17:0b:1f:bb:b0:8c:c1:33:63:12:da:
                    69:7d:bd:7b:9b:e7:57:d7:54:70:14:a2:22:b9:a3:
                    58:24:7a:c6:c5:81:b3:61:c5:c4:c1:33:5d:4e:91:
                    1b:f8:9d:85:62:93:78:a8:9e:a4:13:57:5a:2b:51:
                    ac:b2:d9:66:69:4e:51:dd:8d:9d:f4:de:c5:9a:84:
                    02:66:03:80:a2:44:5c:6e:86:80:4d:f8:6e:6e:54:
                    4a:e3:22:82:6c:c4:96:a7:f0:41:cc:6e:05:b8:04:
                    88:c1:43:a7:c2:dc:0b:41:20:21:5a:b8:4b:7a:f5:
                    91:87:26:9d:cc:2e:72:0a:22:09:4d:84:51:5b:96:
                    51:89:79:0e:f8:e7:bd:ed:0c:a2:15:30:69:66:c9:
                    bb:e1:ce:cb:13:2f:83:7e:65:3f:c8:d3:4e:8e:c7:
                    65:f5:f2:06:45:05:31:c5:cd:87:72:f4:be:23:d9:
                    28:2a:e0:cc:40:d1:ad:e5:87:36:81:e0:88:26:2c:
                    93:ee:04:45:2f:bb:5d:c8:45:5b:c8:31:71:3e:83:
                    12:8c:8a:d5:61:7b:eb:0b:61:ef:e5:67:6b:17:3e:
                    cd:4a:2f:38:ee:18:09:83:20:b5:1f:84:5c:c4:de:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:29:7D:16:45:66:93:83:00:44:14:13:E1:32:B8:92:52:E7:84
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:87:05:fb:39:bf:35:86:4d:77:35:25:1d:f8:16:d3:23:
         3d:6b:75:ab:f5:c5:d9:c8:ff:2d:dc:8e:d1:c3:e7:b4:4d:d8:
         79:d1:38:cf:04:06:ff:16:89:d6:04:34:26:a9:70:90:cf:4c:
         f6:2e:8d:02:e2:1e:83:75:09:a4:0a:9b:22:67:9c:96:14:a9:
         d2:14:a1:e1:e7:49:3e:6d:c4:cc:c6:fe:f0:95:20:df:25:9d:
         cd:c3:23:1b:f0:40:2b:b0:f4:8c:58:80:0e:e0:49:68:54:49:
         b9:5c:15:58:18:be:1c:71:fd:2e:4c:c7:5f:4a:ab:7c:e6:f3:
         ef:fb:3e:b5:b1:8a:15:2c:a9:cd:b5:ec:d3:79:fb:86:16:6c:
         28:d7:8b:6b:03:ab:6e:e1:16:0f:60:87:aa:bf:9c:a9:97:c1:
         01:ac:54:e9:cc:2a:e2:97:6c:5d:e5:7c:9c:27:dd:cc:8e:d8:
         08:09:33:3c:29:ad:67:ed:5d:7f:a2:de:bc:ff:98:97:7f:dc:
         54:75:a1:1d:4c:23:09:fb:d4:c8:92:55:76:10:e4:d7:2d:e2:
         0b:1f:7f:3d:4c:e3:92:0a:fb:85:5f:e8:e8:c6:47:e6:70:77:
         7c:36:f0:60:9f:ce:44:eb:00:98:1d:38:0a:91:e4:32:5f:89:
         60:ce:c7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 18:59:53 2026 by rpki-client