Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
File:                     43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft (raw, json)
Hash identifier:          wVex6GpfYwgKCCWPRMuYTsysed0YKeEdnZ1M7wduZr8=
Subject key identifier:   C0:D0:0D:1D:DF:BF:AC:67:4A:0D:06:45:E0:EC:79:01:6F:38:25:5C
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       1668BAACB879EA775FEA068198327EE3EA845058
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
Manifest number:          01AC
Signing time:             Tue 12 May 2026 17:20:06 +0000
Manifest this update:     Tue 12 May 2026 17:15:06 +0000
Manifest next update:     Wed 13 May 2026 20:01:06 +0000
Files and hashes:         1: 326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (hash: VpgS+RML1f6D9HT2iGquOB/7Rg+/aypKQBnS7XagYpo=)
                          2: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: TNhkpfquy4RSYkNr/6TI4JM4K1aI8WDh3EI9bDH5/tI=)
                          3: 326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (hash: EepqtJ/1AIBSbcvfmTBNRqAuwz/KXjpikda3abvNVMo=)
                          4: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (hash: 2a8dpyz5EAHNvXCqv6ifQ4B0VTk/TpWgxKbk/+FwaDo=)
                          5: 326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (hash: KTyh2SEV5HU612WTdMvSAjCnScbC24rbm18nZVQRDCM=)
                          6: 326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (hash: kOf0Y/COmTzTMU6cdvvc0ZRdNI7Zl9i67Ci7JrJ9pQ4=)
                          7: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: DZRukcmd95/CGy0FlZlIkAqKif6bdCvjwCU/Yk6I/eE=)
                          8: 326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (hash: 8iHgh4mRlo/rwO1Bw19ggiPQiQEw7HmgXiK7jodqthQ=)
                          9: 326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (hash: mW+xJRpA1JLCAhpFJnSztJR3X1zJVko4+BIjilS/nmA=)
                          10: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl (hash: yvPlV4c8+Y9yttrRmRfbMoBulJdfKBvfSeSyJqtYkgQ=)
                          11: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (hash: ru4Yr5RUV+7D5LNisUxhVc3n5JvyKoCUlzd333tpYgc=)
                          12: 326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (hash: Mm4b5uiTirSzAclhjwrvqH8mQa5vVh+TWe3AWlTU2YA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:68:ba:ac:b8:79:ea:77:5f:ea:06:81:98:32:7e:e3:ea:84:50:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: May 12 17:15:06 2026 GMT
            Not After : May 13 20:01:06 2026 GMT
        Subject: CN=C0D00D1DDFBFAC674A0D0645E0EC79016F38255C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:47:f5:2f:b0:a1:c2:1c:62:05:b4:07:c4:
                    96:9f:c8:a6:e1:53:42:1c:bb:17:f5:8f:24:51:8c:
                    77:90:b3:58:76:2e:f8:88:ed:17:46:f9:f3:50:cb:
                    c2:23:dc:74:08:8a:c9:c7:0b:e7:b8:e9:f5:bf:12:
                    b1:af:63:98:22:98:04:64:31:e4:1f:8a:2b:69:f1:
                    5a:02:c2:9b:a0:07:9e:6d:19:90:ba:00:32:2e:9e:
                    89:12:73:f1:b7:4e:94:27:c4:78:0b:23:77:07:2d:
                    99:a8:44:ae:8f:36:58:eb:a6:5d:3c:11:dd:4f:0b:
                    1f:92:46:ca:96:14:1d:fe:44:a1:da:8c:6b:d2:58:
                    01:8b:5e:84:9c:0b:69:98:92:69:f0:5e:02:82:8f:
                    81:5c:21:f6:d0:47:08:ba:86:a8:00:07:bd:6f:84:
                    a0:50:9d:8c:9c:0c:12:34:28:a8:85:75:3f:8d:85:
                    bb:1c:77:0c:16:16:3a:ad:ed:1a:3c:f4:51:c8:2f:
                    fe:55:8c:22:1e:75:17:3d:33:73:50:d0:24:2a:5b:
                    20:94:90:34:39:02:7c:f1:41:ae:84:46:61:6f:68:
                    6d:6b:23:06:c8:4b:b4:03:f5:b1:c9:f8:23:32:7b:
                    a4:86:81:6e:b2:ed:20:57:42:8a:2e:6e:40:fb:a9:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:0D:1D:DF:BF:AC:67:4A:0D:06:45:E0:EC:79:01:6F:38:25:5C
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fa:ad:9a:ea:66:fe:2a:ee:15:a7:de:3c:08:59:bf:ae:a7:
         7e:e4:61:74:1c:e1:c4:d4:a8:1c:24:f7:df:64:f4:2d:78:dc:
         36:44:16:01:0e:ba:3e:61:0f:d8:b7:08:e8:b7:c4:c4:0c:83:
         3b:69:fc:28:b5:66:e2:c4:cb:84:80:fe:2e:4e:07:f0:a5:8d:
         85:f6:9b:2e:0f:9a:c8:23:73:02:14:d6:cd:1f:95:42:69:7f:
         3f:10:b8:17:f9:26:7c:46:39:59:ea:38:85:dc:82:9f:3e:da:
         c3:67:11:7f:20:e6:09:7d:1b:13:df:42:f8:e6:2f:5d:83:cb:
         4d:3a:0d:98:4e:2d:84:65:56:6c:05:8c:02:7a:1c:05:a3:05:
         a9:a4:d8:69:7d:2a:da:ce:57:9d:b0:ce:f7:3e:9d:a5:33:3c:
         be:1b:b3:25:0f:4f:1f:e7:45:64:f0:5f:f1:78:94:ca:60:ec:
         39:da:a6:23:66:e7:3b:42:01:07:5c:69:ad:24:34:21:72:c9:
         3d:92:ca:6c:2f:f1:fd:de:29:40:5f:14:9f:bd:10:27:37:cd:
         82:39:26:c1:63:96:d2:57:f1:e5:89:c5:5a:85:4a:e8:2e:2f:
         d3:98:93:79:67:a6:4a:bf:83:02:b0:ab:6c:70:b4:09:5c:6b:
         c0:b2:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:25:47 2026 by rpki-client