Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File:                     DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier:          3g8vEFfrrlnokkwQ2Y6BpPAXS4PDL49jrzRZDRCFbB0=
Subject key identifier:   60:21:10:1F:2E:D0:5F:C1:75:63:40:17:A4:EC:C4:56:19:21:C7:07
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer:       /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial:       46F9B687EE6C1C5B48ADE25BDB93163FA9C1AE6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number:          011F
Signing time:             Tue 12 May 2026 10:13:53 +0000
Manifest this update:     Tue 12 May 2026 10:08:53 +0000
Manifest next update:     Wed 13 May 2026 12:30:53 +0000
Files and hashes:         1: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: ffcrNyHrMxVmLdCFx7oNb7l1NvtmQYlH8ptgmkjCMhY=)
                          2: AS60900.asa (hash: yTpfelC3+BYwrAy39KSDdJClIIbArtpKZWCYmVGM4MU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f9:b6:87:ee:6c:1c:5b:48:ad:e2:5b:db:93:16:3f:a9:c1:ae:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
        Validity
            Not Before: May 12 10:08:53 2026 GMT
            Not After : May 13 12:30:53 2026 GMT
        Subject: CN=6021101F2ED05FC175634017A4ECC4561921C707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:0d:e6:47:96:ce:42:6e:41:54:48:dd:78:
                    73:ff:88:6d:3e:bb:75:dc:8d:17:52:60:1d:b0:59:
                    c4:cd:93:4e:ea:16:03:ec:76:85:30:65:9e:d9:e2:
                    1e:34:e4:24:d1:e4:0f:bb:52:fb:9c:5d:a4:2f:f9:
                    ed:33:01:06:d8:ff:7d:82:a7:cd:a4:73:38:4c:33:
                    ab:e1:f0:35:c8:bd:2a:54:1e:8e:63:c5:49:e8:c2:
                    5e:95:24:82:e9:0b:23:8f:e4:27:9f:86:b4:ec:1d:
                    0b:04:42:c1:44:8e:aa:9d:d5:53:89:e9:66:21:d7:
                    43:c3:0e:84:a0:ce:5a:f9:3e:45:cb:63:d2:15:aa:
                    37:9d:03:8e:5b:96:9b:ad:a6:9e:50:5c:a5:65:4d:
                    bf:25:8d:84:7a:95:f7:8e:4f:7b:24:80:67:15:a1:
                    e3:5e:d7:17:bc:b3:a1:f2:7c:26:07:ce:e4:10:6d:
                    da:61:29:b0:c2:23:ce:a5:3f:d9:53:bc:94:91:de:
                    ac:13:9a:ca:4b:e3:57:7b:e5:d0:41:ed:2c:fc:74:
                    15:71:cc:d4:e5:24:ce:b5:a5:c1:5f:ab:8a:bf:f7:
                    f9:08:fe:c1:da:bb:0f:92:1a:58:c7:d8:d6:f4:02:
                    b3:ba:d1:05:52:f2:2a:b7:77:27:4b:ff:89:35:50:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:21:10:1F:2E:D0:5F:C1:75:63:40:17:A4:EC:C4:56:19:21:C7:07
            X509v3 Authority Key Identifier:
                keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:68:18:cb:3c:4f:ef:9d:07:dd:ba:cd:fa:32:ce:86:bc:
         db:13:43:85:44:b0:1c:b2:d4:05:12:65:9b:c3:be:12:f0:de:
         65:05:7c:0c:db:a7:88:a7:bb:6b:08:81:9c:fd:01:31:bc:a6:
         62:30:17:89:6c:f1:61:96:14:9b:2d:56:24:0f:ef:36:46:d1:
         ca:2f:8d:b7:f8:ea:17:67:3c:b3:b4:bc:26:12:47:a3:77:d9:
         11:0b:c9:33:48:e5:a6:7b:ca:5e:32:c4:79:aa:a0:cf:b6:57:
         e8:f8:8d:6d:4b:68:b1:4c:67:35:14:17:f5:47:27:88:1c:f5:
         37:a8:09:2d:06:7d:0a:8b:32:ab:b7:53:9d:2f:fe:e9:e9:db:
         2e:1d:09:c6:27:ca:52:c5:29:ad:83:4c:1d:d5:31:ef:c7:82:
         24:be:54:51:07:b8:36:29:a7:5c:1f:6a:e8:bb:e9:9c:38:d6:
         db:89:cb:1f:d8:09:d8:e9:cd:6d:37:bd:a8:b9:a6:91:ab:18:
         1e:0b:73:56:01:cc:26:77:1a:8b:ea:48:96:a7:13:2b:cb:44:
         91:75:4f:81:30:d0:b5:dd:5f:40:93:97:98:65:e9:32:1b:60:
         82:14:eb:95:e8:19:51:a9:27:d2:b2:c3:7c:a1:1a:e9:a7:ab:
         5a:7e:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:47 2026 by rpki-client