Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
File:                     E84B072599A643FE71F171B15ED724213D43CE5B.mft (raw, json)
Hash identifier:          WOcjiWRqXtRfR9eP0G4HTdWfRt9uSP3yB+efOrFoqOo=
Subject key identifier:   FF:A8:F4:87:0C:A1:57:58:79:5A:7D:BA:59:F4:38:4F:66:EE:31:1D
Authority key identifier: E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
Certificate issuer:       /CN=e84b072599a643fe71f171b15ed724213d43ce5b
Certificate serial:       4E1001829B8FF3DF330C086737027AC38E52F320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
Manifest number:          0154
Signing time:             Wed 25 Mar 2026 17:07:58 +0000
Manifest this update:     Wed 25 Mar 2026 17:02:58 +0000
Manifest next update:     Thu 26 Mar 2026 19:25:58 +0000
Files and hashes:         1: AS214768.asa (hash: jXPXFYdvxRTO4xZ1QtAhRs/urzNWFCHEnbmEMExacrU=)
                          2: E84B072599A643FE71F171B15ED724213D43CE5B.crl (hash: aR6ZrovXpbgExLD3YMURSdXx9Dd/TE/AnR0gGloomdQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:10:01:82:9b:8f:f3:df:33:0c:08:67:37:02:7a:c3:8e:52:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84b072599a643fe71f171b15ed724213d43ce5b
        Validity
            Not Before: Mar 25 17:02:58 2026 GMT
            Not After : Mar 26 19:25:58 2026 GMT
        Subject: CN=FFA8F4870CA15758795A7DBA59F4384F66EE311D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:38:0b:6b:89:fc:8c:76:a0:c3:ad:23:c0:
                    87:5b:77:23:9a:dd:0a:fc:d3:cb:7d:1b:51:8b:df:
                    cb:20:a7:f1:08:0f:80:61:cb:23:c1:50:ce:85:66:
                    59:c3:6a:0b:9a:8e:53:a0:30:d6:bc:dc:cb:dd:16:
                    60:84:28:6f:88:7d:0e:44:9e:9a:88:92:4b:14:6d:
                    1c:aa:10:b5:6f:ab:9a:da:f2:00:ec:e8:d7:21:73:
                    03:e0:b2:3d:ca:c7:9d:cb:18:2f:de:aa:cf:f3:63:
                    47:c7:86:8a:f7:6c:45:f2:2c:7d:f5:a5:e0:b6:42:
                    0e:1b:e6:f7:ea:06:c0:be:22:8a:2a:d8:9e:06:8b:
                    1d:72:0c:9a:8e:10:06:0a:7e:d2:15:61:b2:65:81:
                    33:6c:eb:a7:da:11:e5:e2:79:7f:37:92:dd:57:b9:
                    d5:d3:66:60:32:72:b5:ff:b5:4a:3e:3d:92:e6:c1:
                    7a:d8:35:cd:57:7b:cd:08:31:83:da:df:fd:e8:78:
                    dd:e4:d3:3a:f3:1e:d0:40:cc:16:fa:aa:d3:92:19:
                    36:c7:54:fe:88:fe:f3:ab:72:ff:e8:95:29:36:f7:
                    d0:60:f0:e1:6b:62:cc:fa:6d:ba:ea:aa:68:8f:51:
                    6f:7b:ca:24:ea:a1:fe:be:ae:59:73:0f:c8:7b:5b:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:F4:87:0C:A1:57:58:79:5A:7D:BA:59:F4:38:4F:66:EE:31:1D
            X509v3 Authority Key Identifier:
                keyid:E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:65:6a:89:b5:94:10:04:2d:1d:dd:4f:17:f7:02:75:dd:f6:
         58:9b:9d:38:3c:25:97:31:92:bd:98:b1:35:3a:57:33:90:44:
         9a:12:8d:c8:da:50:4c:0f:83:17:8e:86:20:bc:d9:03:9c:c9:
         c4:74:0a:cf:32:0d:bc:fe:67:35:dc:75:3a:66:07:09:c0:7d:
         27:0b:74:e8:dc:24:af:98:ca:38:e9:75:36:cf:d3:1c:ec:5b:
         55:25:c1:58:ad:f7:5e:5a:a7:d2:8a:77:e6:82:b2:b2:60:d0:
         eb:30:57:75:e3:98:05:0a:25:76:b8:1a:f8:98:b6:bf:b6:78:
         a9:d1:f9:6e:3a:9e:01:8e:f8:c0:02:4b:37:d2:31:a3:f2:bc:
         98:59:55:26:af:1c:67:75:06:cc:9d:d4:24:ed:c1:ec:40:cd:
         bd:61:fe:45:16:3a:3b:af:ec:34:e1:04:d2:4b:81:79:1a:29:
         d7:d9:a4:22:33:fa:39:2d:1c:23:8f:1f:e7:82:98:34:2d:70:
         63:5f:cf:f9:51:5d:70:9a:a4:59:eb:b6:60:fa:94:36:06:d5:
         17:37:ca:f8:60:51:e3:a5:8b:2a:45:7d:34:c5:ce:cc:6c:d7:
         53:19:3d:d1:b2:1a:4c:73:bd:1f:8b:50:9b:c7:9b:fa:2c:04:
         10:97:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:15 2026 by rpki-client