Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File:                     C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier:          jgu/4LF1v/SKHVFzYWyuhB1VhBh+ASlNHKiWexs8jEw=
Subject key identifier:   48:73:45:BA:85:EF:7B:52:8F:4C:7B:85:26:A5:BE:6F:ED:9D:18:DA
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer:       /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial:       787F26FB8859CFD444B2AF5154B4C663190B5B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number:          01D6
Signing time:             Wed 29 Jul 2026 08:37:38 +0000
Manifest this update:     Wed 29 Jul 2026 08:32:38 +0000
Manifest next update:     Thu 30 Jul 2026 09:15:38 +0000
Files and hashes:         1: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: ArUfILTVdPV/xNgrUMZFDYhaVkRFzlTnphTzuDha7tw=)
                          2: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: 3jQkUtvWA4dapdhNjkvL6E6jrzEvA3Mcn2m0ZRuBWD0=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:26:fb:88:59:cf:d4:44:b2:af:51:54:b4:c6:63:19:0b:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
        Validity
            Not Before: Jul 29 08:32:38 2026 GMT
            Not After : Jul 30 09:15:38 2026 GMT
        Subject: CN=487345BA85EF7B528F4C7B8526A5BE6FED9D18DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:35:f9:f9:63:3c:29:b3:f6:c2:99:a8:6d:
                    61:25:ec:64:78:3a:b1:50:53:92:4f:24:8b:87:7d:
                    86:07:fa:60:63:cf:c9:d3:6f:03:76:d8:1b:14:60:
                    e6:42:68:3f:14:6d:63:ed:b3:f0:08:af:c9:85:43:
                    4a:5d:1c:e5:61:46:2f:e4:13:2a:b2:37:b9:45:75:
                    bf:53:14:7a:47:1a:e3:03:3c:ad:33:ad:2f:ed:c3:
                    03:40:ac:c3:1c:07:c0:2a:53:22:a5:e1:24:4c:1f:
                    e7:7e:e5:dc:98:07:ca:ed:fc:6d:a1:3f:ff:52:ef:
                    5c:d5:9a:08:25:2f:93:13:b3:c1:c0:2f:5e:71:c3:
                    8a:38:03:80:29:ca:1e:4e:bc:1f:f2:ca:e0:3f:41:
                    b7:13:01:0a:c2:62:55:27:40:bc:6a:f2:f6:83:66:
                    e6:be:33:4c:23:a0:42:a9:1c:61:c7:19:2d:f1:c8:
                    c5:b2:96:aa:d6:0d:7e:ab:28:33:8a:1f:70:90:88:
                    07:3c:b2:be:7e:06:10:83:34:84:ed:78:61:4d:dc:
                    bb:4d:3b:e1:c1:16:20:06:b4:d7:50:0b:2f:70:66:
                    a2:bb:97:e1:8f:fa:ea:b1:af:83:b9:30:f3:9b:32:
                    07:c2:52:b4:28:e3:4b:6e:45:7f:34:a8:1a:00:8b:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:45:BA:85:EF:7B:52:8F:4C:7B:85:26:A5:BE:6F:ED:9D:18:DA
            X509v3 Authority Key Identifier:
                keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:c5:d8:3a:12:20:eb:d4:b1:5f:43:30:d7:fe:14:c7:61:
         03:20:97:02:13:a1:7a:f7:ea:62:80:e9:88:10:57:9c:f5:60:
         90:f8:46:26:b0:31:55:40:48:ca:71:fe:73:c0:a5:65:a4:89:
         9e:08:09:d7:8f:60:af:50:ac:65:40:25:a7:5a:f0:d0:64:e7:
         1e:89:5a:e2:7c:3d:67:92:ab:c4:bd:f5:51:e9:58:ab:20:38:
         6b:cc:46:82:2a:8b:04:c9:4e:f2:4a:38:53:8a:ac:60:13:5c:
         ac:26:36:84:a4:b4:3b:e6:95:df:b8:85:02:43:31:bb:75:37:
         b4:21:e5:9a:d3:a8:5a:65:db:58:15:cb:c4:ba:0b:0b:f4:fd:
         bb:d0:06:b3:62:b8:17:ec:c1:ec:7c:03:c7:72:a7:d3:f7:44:
         6f:ea:f9:68:d7:2a:89:ec:5f:1e:4b:dc:68:9f:dd:cd:e1:36:
         f5:0c:35:b1:cf:79:58:89:69:1d:71:8b:cf:e7:fc:eb:66:86:
         48:d7:5d:5f:4c:29:88:71:3c:42:6a:2e:31:1a:9e:de:1b:bf:
         4c:c5:c6:91:63:92:a0:e9:a6:67:59:70:67:83:2f:ba:b7:5e:
         6d:41:0f:7c:7c:ae:74:a1:ab:c9:f5:8b:99:5e:47:8f:b4:f3:
         52:ca:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:25 2026 by rpki-client