Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File:                     DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier:          0+7OJ3nasoHysZbMEiPlBBGIREJUtscIUToz9fGOFjk=
Subject key identifier:   AC:FC:34:56:3E:45:9E:5C:B3:87:84:E9:B5:DE:54:00:AE:10:42:8D
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer:       /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial:       799CCBE4B4B688EF1C0DB1027A5223691A5519E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number:          020F
Signing time:             Mon 02 Nov 2026 07:30:52 +0000
Manifest this update:     Mon 02 Nov 2026 07:25:52 +0000
Manifest next update:     Tue 03 Nov 2026 08:46:52 +0000
Files and hashes:         1: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: 3RVdNaxtuV63dZquXvQ1yywewdWccKUf/JPJtTNvJ88=)
                          2: AS60900.asa (hash: E2Y5BcAdAzI2h72fHsjqCJl4Lu1+lFCx/U+vjSkrAlA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 08:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9c:cb:e4:b4:b6:88:ef:1c:0d:b1:02:7a:52:23:69:1a:55:19:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
        Validity
            Not Before: Nov  2 07:25:52 2026 GMT
            Not After : Nov  3 08:46:52 2026 GMT
        Subject: CN=ACFC34563E459E5CB38784E9B5DE5400AE10428D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:02:3a:97:f9:99:da:88:30:1b:16:c9:36:
                    95:00:60:12:f5:0a:07:cb:7e:98:d5:77:98:59:88:
                    7d:ba:ad:10:63:8d:ab:ed:1a:dd:f1:03:64:91:ca:
                    08:7f:6d:0f:bf:16:9f:99:bd:79:7a:16:17:c8:a4:
                    eb:9c:3e:01:d1:bc:36:f1:89:60:34:28:14:66:f4:
                    9a:bd:b6:f8:37:7a:68:19:f6:58:c1:a9:81:47:31:
                    99:28:ec:17:8b:04:0a:b3:a4:30:98:58:4f:35:7f:
                    ac:2a:22:5c:7a:a1:5a:c1:32:ee:9d:9f:30:e0:a2:
                    34:1a:6a:4e:4d:8e:8b:28:88:ab:2c:13:10:74:f3:
                    66:89:ae:9f:4f:e7:2d:09:b4:4c:95:70:83:4d:ca:
                    6a:2f:77:7e:e2:49:4e:17:e5:6f:01:bb:e1:15:9b:
                    d3:f7:df:85:c8:9b:23:18:f4:93:1f:30:9d:77:ca:
                    f0:f9:52:56:77:15:f0:a6:11:af:db:f8:83:fe:94:
                    a6:e0:72:62:c5:4b:f6:39:ae:20:9f:c3:96:53:e6:
                    33:c5:87:59:1c:8c:5b:87:e4:0d:77:6b:61:99:56:
                    32:42:39:a8:67:68:cb:fe:45:47:af:66:60:cf:a2:
                    62:01:bf:84:ea:86:41:f5:da:80:6f:57:1a:a0:a1:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:34:56:3E:45:9E:5C:B3:87:84:E9:B5:DE:54:00:AE:10:42:8D
            X509v3 Authority Key Identifier:
                keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:32:93:31:72:b3:77:b2:b8:16:ad:8e:14:2f:38:83:82:ee:
         f4:51:11:4a:8c:8e:7d:38:12:6b:6f:4d:c8:ff:68:32:50:76:
         dc:ea:82:de:23:9e:70:42:1d:26:f2:f3:16:35:d2:06:d0:4b:
         31:c3:1c:c7:aa:bf:48:03:99:fd:91:8b:55:7b:7b:ec:26:1c:
         0b:96:cd:a1:67:3c:d6:aa:77:f0:17:d3:a6:16:30:99:d6:bc:
         32:b2:b1:7f:61:ee:85:39:71:c1:dd:95:41:79:35:27:85:3c:
         ac:02:92:87:04:a4:3c:43:e0:a2:fd:27:6c:6f:76:72:7b:88:
         3f:53:49:2a:46:51:7a:7b:9c:51:7a:ba:9c:49:fd:dc:da:d5:
         2c:56:56:8c:f7:94:90:05:bb:3b:61:79:f5:86:43:e8:d1:18:
         ae:75:5e:64:81:d7:6a:50:30:62:88:24:5f:58:e6:c0:34:b7:
         22:20:6f:b2:9e:84:62:8c:6d:2d:dd:4c:fe:8c:b8:bc:da:62:
         47:1d:18:a9:93:fb:1b:eb:85:ca:9d:e1:ea:3d:71:c2:c3:b9:
         ad:7a:ca:c9:74:06:3e:d3:28:3c:b5:93:1c:1f:f8:e9:57:fe:
         8d:dc:40:11:35:5b:95:0d:dd:a6:b6:54:2d:3f:d1:65:d1:79:
         17:53:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:07:57 2026 by rpki-client