Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          5Bu54zAnvCu5kxDEb2gLDbDnQJ9ZmmzUkCnMtOZG3Pc=
Subject key identifier:   85:37:B4:2E:F1:68:35:E1:41:B5:24:2A:20:4D:30:DC:7F:61:8F:0B
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       72C3C7DF00DE215948ED138E1E3917428C592088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          044A
Signing time:             Sun 19 Apr 2026 06:09:58 +0000
Manifest this update:     Sun 19 Apr 2026 06:04:58 +0000
Manifest next update:     Mon 20 Apr 2026 08:09:58 +0000
Files and hashes:         1: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
                          2: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: y8VP+QUkOqQF4GvRwMVvEIFNgCAYN+QeWwOvPCjKQog=)
                          3: AS59678.asa (hash: 2FvpXOSTUdw5jOHpyEQZdH2x3a+CErN6zugHUFRZDBI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c3:c7:df:00:de:21:59:48:ed:13:8e:1e:39:17:42:8c:59:20:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Apr 19 06:04:58 2026 GMT
            Not After : Apr 20 08:09:58 2026 GMT
        Subject: CN=8537B42EF16835E141B5242A204D30DC7F618F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:e0:a5:7a:46:2c:4b:76:9b:ae:79:d0:25:
                    6b:43:dc:c9:41:3a:06:49:ff:bd:97:9b:0e:a2:29:
                    35:16:ad:74:db:9d:e7:af:39:5a:5f:e5:ec:84:62:
                    a2:1e:e7:6e:4f:48:da:6a:a2:44:48:6e:ba:10:53:
                    19:b0:32:49:ca:9f:df:5b:e1:60:b4:a3:93:47:5c:
                    53:a7:65:00:9b:74:92:fa:20:bf:71:1c:c6:35:84:
                    0e:1b:2f:dd:ad:10:1e:ff:a5:42:d7:1a:36:eb:81:
                    9e:c6:78:09:9b:36:99:aa:69:3c:f3:e3:f0:06:8c:
                    08:8f:78:34:ca:6c:64:ed:38:83:fa:95:74:10:83:
                    a1:f9:4d:22:f8:d4:97:59:ca:f7:20:0b:76:03:d2:
                    a1:40:b1:6e:e4:d5:a7:33:93:d5:5b:a0:ac:ce:d6:
                    6e:58:73:83:55:53:d1:3f:ee:b3:18:c9:61:48:a1:
                    2e:61:c2:55:c4:b9:f7:8c:c2:99:95:ca:68:b8:7c:
                    95:10:d1:81:a0:3a:71:9e:c5:c9:6e:0c:5f:48:4f:
                    68:58:f3:2d:5e:9c:d8:d1:1e:75:f0:dc:69:0e:e1:
                    5b:d6:21:1c:43:a4:09:9e:96:11:f0:28:26:ce:cc:
                    d3:03:97:9d:80:a4:de:d1:4a:fe:f7:de:e1:b3:cd:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:37:B4:2E:F1:68:35:E1:41:B5:24:2A:20:4D:30:DC:7F:61:8F:0B
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:88:72:2d:1e:dd:d0:fa:4e:fb:46:55:4c:34:43:a6:5c:
         78:a0:a0:44:9b:13:93:54:fe:f4:13:ed:22:72:c3:21:67:96:
         be:87:13:4c:61:73:2e:f4:54:a0:13:5e:66:83:9d:2b:73:1d:
         62:4c:57:a1:4e:b7:f2:2f:79:ed:7e:bc:d2:06:b3:86:b4:cf:
         7b:21:0f:21:7c:0d:f6:93:ca:d6:ab:0d:03:a2:a2:9b:a5:e6:
         97:f4:a1:4c:f0:bb:89:2e:dc:b3:04:94:1a:b4:cf:7a:9e:9e:
         33:65:89:63:3f:28:3c:fe:53:a2:b2:56:9f:f3:e9:f9:0c:46:
         50:96:0b:4a:0c:d0:2a:24:e6:99:97:04:cf:9c:ae:1b:c8:d4:
         bb:c5:45:1d:73:7b:e4:bc:92:25:94:13:e1:04:31:e1:8b:91:
         1f:8f:9c:23:0f:1d:b7:f4:60:fc:7c:d2:85:96:7f:2b:31:17:
         e3:08:9e:19:84:14:22:c0:4c:3f:ca:05:24:6b:b7:d2:d6:9a:
         4d:e9:fd:fe:5e:f9:91:82:de:86:c4:38:31:84:41:c5:9d:a1:
         e9:b0:4c:73:19:96:ad:0e:bc:79:5b:a4:0d:94:9e:08:17:d6:
         0f:8d:62:69:76:3e:24:58:08:89:e1:1f:1e:79:5c:40:ac:7e:
         de:40:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:14:38 2026 by rpki-client