Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          L0e1NFShWhj3/Fx86WoSThNCCuWHOJOyBDNJIk1vw20=
Subject key identifier:   5C:48:81:A3:C5:87:79:AB:58:E0:7D:F4:24:1C:5C:EF:5A:61:65:E2
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       10BCA42391CABE2F741B2DDBC3246F395B47A1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0429
Signing time:             Wed 25 Mar 2026 10:49:39 +0000
Manifest this update:     Wed 25 Mar 2026 10:44:39 +0000
Manifest next update:     Thu 26 Mar 2026 12:24:39 +0000
Files and hashes:         1: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: +VfnsXsRrSWwldd1nMVmZpyvrrG2l8FEsaDVwK/Oetw=)
                          2: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
                          3: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bc:a4:23:91:ca:be:2f:74:1b:2d:db:c3:24:6f:39:5b:47:a1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Mar 25 10:44:39 2026 GMT
            Not After : Mar 26 12:24:39 2026 GMT
        Subject: CN=5C4881A3C58779AB58E07DF4241C5CEF5A6165E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:94:a2:d2:0c:a2:7a:0b:1e:54:fc:75:e2:
                    2a:42:25:56:08:a0:60:82:34:35:aa:4e:98:6b:e9:
                    c7:c5:1f:1e:0b:ba:a5:04:50:8b:d2:d6:c9:5c:99:
                    05:7f:6a:e2:a2:1c:61:77:49:39:5b:0c:95:3a:79:
                    48:5c:e5:eb:eb:db:9e:cd:68:f4:ae:60:8a:2c:dc:
                    09:47:c2:4e:44:17:c4:61:9a:1a:e8:8a:e7:e6:0a:
                    5e:af:c6:e9:f8:0f:5e:b4:a1:47:bf:eb:ba:a2:b9:
                    d8:91:06:ab:4c:a2:b9:8f:d9:8f:a1:8a:1f:6b:33:
                    3a:14:01:d1:9e:ff:4c:1b:36:7b:ac:41:28:a8:7d:
                    6d:0d:a2:4c:12:e8:e8:5a:2c:f9:c3:ed:9c:4c:00:
                    e9:78:00:a8:9e:be:60:ed:24:4b:a1:3f:b8:cc:33:
                    31:59:4b:f6:fa:1a:ce:e2:ad:43:b6:ba:ec:74:92:
                    92:b7:2e:f0:00:fd:a6:54:15:04:af:7c:6f:68:a1:
                    8c:b6:10:46:2c:66:01:18:2f:cb:93:c4:b1:86:b8:
                    71:e3:9f:11:fc:30:e2:09:a4:1b:e2:36:d2:34:b0:
                    67:74:52:f4:9a:4c:d0:3d:ba:f6:d1:ed:14:fc:90:
                    e7:19:f3:48:b5:94:5c:6f:af:8c:4e:0f:bf:a4:36:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:48:81:A3:C5:87:79:AB:58:E0:7D:F4:24:1C:5C:EF:5A:61:65:E2
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:76:f0:92:af:0f:41:aa:61:93:4a:d1:05:a3:03:f8:47:bb:
         42:e7:8e:0a:b4:39:74:50:6e:92:13:49:37:b8:df:1d:36:72:
         ea:a7:f9:6a:5e:9e:ef:4f:95:3a:b0:b2:32:70:05:74:1e:2e:
         82:0f:d7:60:52:fd:df:f8:c8:ea:eb:f6:d9:d2:b4:50:9d:dc:
         7c:c0:eb:5a:be:18:9f:7c:cc:57:d6:b2:d2:e7:52:00:39:1c:
         47:3e:af:f1:4e:73:22:a8:5a:09:eb:1b:f5:d5:63:57:1e:15:
         33:6d:8e:a6:c7:17:c7:ac:37:4d:e4:2a:bf:77:6d:6e:16:8d:
         2d:69:33:ba:bd:eb:7f:97:28:9d:3d:0b:c3:7f:ef:ed:59:bf:
         31:36:06:bd:80:37:57:d2:51:25:ce:e3:66:d6:e1:9b:61:ac:
         da:7e:0f:9d:ea:26:09:4b:84:da:4d:88:24:02:6a:b1:c0:cd:
         1a:02:57:ca:10:e6:6b:97:b3:64:a4:da:81:76:2f:54:da:87:
         72:1b:90:1d:50:ef:a0:4c:58:d8:21:d4:19:6f:99:16:79:61:
         77:75:a5:56:29:12:bf:d4:f5:62:41:c2:ab:00:2c:ab:e7:15:
         2f:9e:bf:56:10:2b:c4:80:47:40:67:92:9f:e8:5d:6a:80:6c:
         15:4b:41:ad
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUELykI5HKvi90Gy3bwyRvOVtHofwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2FkZmY0Mzk4NmUwNDIzODM5OTNmNmViOTMxZjIwODE0
MzJlMThkNDAeFw0yNjAzMjUxMDQ0MzlaFw0yNjAzMjYxMjI0MzlaMDMxMTAvBgNV
BAMTKDVDNDg4MUEzQzU4Nzc5QUI1OEUwN0RGNDI0MUM1Q0VGNUE2MTY1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVJSi0gyiegseVPx14ipCJVYI
oGCCNDWqTphr6cfFHx4LuqUEUIvS1slcmQV/auKiHGF3STlbDJU6eUhc5evr257N
aPSuYIos3AlHwk5EF8RhmhroiufmCl6vxun4D160oUe/67qiudiRBqtMormP2Y+h
ih9rMzoUAdGe/0wbNnusQSiofW0NokwS6OhaLPnD7ZxMAOl4AKievmDtJEuhP7jM
MzFZS/b6Gs7irUO2uux0kpK3LvAA/aZUFQSvfG9ooYy2EEYsZgEYL8uTxLGGuHHj
nxH8MOIJpBviNtI0sGd0UvSaTNA9uvbR7RT8kOcZ80i1lFxvr4xOD7+kNiMXAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUXEiBo8WHeatY4H30JBxc71phZeIwHwYDVR0j
BBgwFoAUOt/0OYbgQjg5k/brkx8ggUMuGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMC8zQURGRjQzOTg2
RTA0MjM4Mzk5M0Y2RUI5MzFGMjA4MTQzMkUxOEQ0LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvT3RfME9ZYmdRamc1a19icmt4OGdnVU11R05RLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUv
MC8zQURGRjQzOTg2RTA0MjM4Mzk5M0Y2RUI5MzFGMjA4MTQzMkUxOEQ0Lm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAEXbwkq8PQaphk0rRBaMD+Ee7QueOCrQ5dFBukhNJN7jfHTZy6qf5al6e
70+VOrCyMnAFdB4ugg/XYFL93/jI6uv22dK0UJ3cfMDrWr4Yn3zMV9ay0udSADkc
Rz6v8U5zIqhaCesb9dVjVx4VM22OpscXx6w3TeQqv3dtbhaNLWkzur3rf5conT0L
w3/v7Vm/MTYGvYA3V9JRJc7jZtbhm2Gs2n4PneomCUuE2k2IJAJqscDNGgJXyhDm
a5ezZKTagXYvVNqHchuQHVDvoExY2CHUGW+ZFnlhd3WlVikSv9T1YkHCqwAsq+cV
L56/VhArxIBHQGeSn+hdaoBsFUtBrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:56 2026 by rpki-client