Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
File:                     6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft (raw, json)
Hash identifier:          c8Z6oLh0aRBbZxG9mD/E6WwxCft2lHPo5aDeGRJC+g0=
Subject key identifier:   0F:24:45:FE:33:70:FA:12:A5:C9:2A:09:4B:07:F2:8E:28:4B:BB:7E
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Certificate issuer:       /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial:       43692F9BFD09F9B76EC0C50CBAF7BD5AD660EA31
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
Manifest number:          89
Signing time:             Sat 10 May 2025 03:50:59 +0000
Manifest this update:     Sat 10 May 2025 03:45:59 +0000
Manifest next update:     Sun 11 May 2025 06:56:59 +0000
Files and hashes:         1: 326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa (hash: cWy6hH8z0Stz3hvANwE/cHPzw2sGZwonnP+PwrD+Iqk=)
                          2: 326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa (hash: ooX9djOw3RoLG7T1ZD2r7tMD8gSskVj80tCsBLS2uWY=)
                          3: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (hash: PAUZsioMtEm7PxJwzY2q0rE7BZSWPV/A+DJkY9MRxFw=)
                          4: 326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (hash: BY6+GEhFD/PUqx1YR9dxLwyybbZCnXdYBuNKFYmfqPw=)
                          5: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (hash: gmd4m0SeuJjWvfJO+FAdmNrRqnHVsJB1sR4hYLzeA2Q=)
                          6: 6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl (hash: ICOysnEtYMaPxLxR4i3rxv/bpf6acyFzJOCdtZbXIO0=)
                          7: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (hash: yyyoxGppzrPBpHyS7wtUfV1AEfqPV4X0yk1eLPwNlw4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:69:2f:9b:fd:09:f9:b7:6e:c0:c5:0c:ba:f7:bd:5a:d6:60:ea:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
        Validity
            Not Before: May 10 03:45:59 2025 GMT
            Not After : May 11 06:56:59 2025 GMT
        Subject: CN=0F2445FE3370FA12A5C92A094B07F28E284BBB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:88:f8:a3:cf:4f:76:df:53:9b:e7:08:97:
                    00:bd:78:e5:ff:96:ae:c7:88:a0:3a:d2:2e:5b:d0:
                    54:31:a8:c2:12:ae:b3:69:af:46:79:24:af:be:50:
                    aa:43:b5:e4:33:40:d4:ca:4a:d3:6b:f3:0b:95:1f:
                    39:6d:24:0c:22:1f:bc:fa:58:2d:26:b9:5b:9a:60:
                    6b:9c:46:ec:9c:2e:a8:b0:21:8e:7e:e2:0d:8e:39:
                    a8:e3:a2:5b:d9:4f:8c:36:eb:29:a2:b4:7e:19:b7:
                    75:72:96:22:91:a4:9e:62:7a:11:b6:b6:60:32:4c:
                    2e:e0:6c:59:cb:48:3b:a8:9f:ea:58:56:10:2b:bc:
                    89:0e:c8:c6:07:fd:c1:3e:65:dc:db:6e:51:d9:7c:
                    4f:50:3b:10:78:b6:c6:a4:a6:d5:4b:b4:cf:45:62:
                    71:e8:ff:f2:44:38:46:0d:40:c1:98:d4:aa:31:f8:
                    d4:61:0a:25:f4:fd:d5:b5:15:41:c9:d9:29:2d:18:
                    26:a0:3d:c3:0e:20:3c:90:fd:a4:3f:41:1b:9c:24:
                    e8:d3:d0:b5:55:66:80:84:0d:96:7d:60:78:b4:64:
                    64:ef:4c:9f:4d:e6:b4:a6:a7:a8:70:4d:cf:47:9c:
                    19:01:c1:ad:07:4c:cd:87:e4:a4:15:51:3e:9f:17:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:24:45:FE:33:70:FA:12:A5:C9:2A:09:4B:07:F2:8E:28:4B:BB:7E
            X509v3 Authority Key Identifier:
                keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:b7:5c:e2:da:90:44:7b:3f:b7:58:48:6c:72:c2:56:99:
         81:1d:39:3a:97:a5:3a:34:24:88:72:a1:0e:90:93:f0:ee:63:
         93:91:09:5e:98:98:da:1d:d0:66:fb:53:7a:c2:81:06:ed:14:
         31:48:86:8f:d0:5b:db:df:c2:26:2c:f8:74:ca:11:d4:47:e1:
         14:46:d8:a2:98:72:7e:28:1e:a2:2a:8a:bd:27:0e:fc:94:7b:
         54:ba:59:a3:a8:e8:d5:3e:de:19:c0:47:1a:e2:e2:24:ce:ff:
         ea:fb:c0:82:24:56:54:a2:38:d4:35:5a:23:56:a7:14:99:c0:
         a1:82:70:21:43:5a:4c:fd:55:dc:c0:55:6a:b9:95:02:1a:96:
         dc:bf:91:f0:48:fd:58:14:13:24:b4:73:bb:66:b4:3a:e2:b7:
         3c:21:a5:cb:7c:61:bb:25:ad:f9:59:27:c1:cd:d6:18:40:b6:
         f5:ba:b1:30:2e:16:6d:99:d5:4b:4c:8b:30:9f:00:d9:6b:7e:
         ad:77:69:5d:e1:e3:94:d7:fb:ea:c4:7c:3b:1d:81:0a:c5:2f:
         88:60:58:6b:91:46:55:d4:c0:43:f6:b1:09:22:57:b8:46:14:
         34:35:ad:e7:12:a7:75:92:fd:9f:ad:c9:4e:0f:3b:09:c3:25:
         e9:ab:3b:2a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUQ2kvm/0J+bduwMUMuve9WtZg6jEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI3RDY2QzIzMTQxRTc3OUI1RjQ5QkRCMzBEOTlBMTVG
QzQzODkxQjAeFw0yNTA1MTAwMzQ1NTlaFw0yNTA1MTEwNjU2NTlaMDMxMTAvBgNV
BAMTKDBGMjQ0NUZFMzM3MEZBMTJBNUM5MkEwOTRCMDdGMjhFMjg0QkJCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFIj4o89Pdt9Tm+cIlwC9eOX/
lq7HiKA60i5b0FQxqMISrrNpr0Z5JK++UKpDteQzQNTKStNr8wuVHzltJAwiH7z6
WC0muVuaYGucRuycLqiwIY5+4g2OOajjolvZT4w26ymitH4Zt3VyliKRpJ5iehG2
tmAyTC7gbFnLSDuon+pYVhArvIkOyMYH/cE+ZdzbblHZfE9QOxB4tsakptVLtM9F
YnHo//JEOEYNQMGY1Kox+NRhCiX0/dW1FUHJ2SktGCagPcMOIDyQ/aQ/QRucJOjT
0LVVZoCEDZZ9YHi0ZGTvTJ9N5rSmp6hwTc9HnBkBwa0HTM2H5KQVUT6fFyXNAgMB
AAGjggJnMIICYzAdBgNVHQ4EFgQUDyRF/jNw+hKlySoJSwfyjihLu34wHwYDVR0j
BBgwFoAUa31mwjFB53m19JvbMNmaFfxDiRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMy82QjdENjZDMjMx
NDFFNzc5QjVGNDlCREIzMEQ5OUExNUZDNDM4OTFCLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0Mzg5MUIu
Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNk
NTgzNmZmMWIyOS8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0
Mzg5MUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAFtrdc4tqQRHs/t1hIbHLCVpmBHTk6l6U6NCSIcqEO
kJPw7mOTkQlemJjaHdBm+1N6woEG7RQxSIaP0Fvb38ImLPh0yhHUR+EURtiimHJ+
KB6iKoq9Jw78lHtUulmjqOjVPt4ZwEca4uIkzv/q+8CCJFZUojjUNVojVqcUmcCh
gnAhQ1pM/VXcwFVquZUCGpbcv5HwSP1YFBMktHO7ZrQ64rc8IaXLfGG7Ja35WSfB
zdYYQLb1urEwLhZtmdVLTIswnwDZa36td2ld4eOU1/vqxHw7HYEKxS+IYFhrkUZV
1MBD9rEJIle4RhQ0Na3nEqd1kv2frclODzsJwyXpqzsq
-----END CERTIFICATE-----
Generated at Sat May 10 11:30:10 2025 by rpki-client