Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          vrKbmxHrP2EU0eytR5yOLOKJefXI/DYEbkpt53AR/zE=
Subject key identifier:   9F:B9:00:63:11:C6:C3:C4:A0:05:45:A9:99:CD:CF:33:CB:A8:C4:69
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       10B6C5C4F6E666B9C4548CD3AB4CA85A3B198A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0408
Signing time:             Sun 01 Mar 2026 05:14:28 +0000
Manifest this update:     Sun 01 Mar 2026 05:09:28 +0000
Manifest next update:     Mon 02 Mar 2026 05:57:28 +0000
Files and hashes:         1: AS59678.asa (hash: MrrWJ9l8lgWoC35oKfd53MWxXqNmbveRovZsM7Giidk=)
                          2: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: kdU3rwhJCsPQqK0ww3hFFmF1RepeTah6opmbBE8astE=)
                          3: AS48606.asa (hash: EScNJdBzHg1nNNAt7ptD/C/ubDb9ZOP+thla79EX3TA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b6:c5:c4:f6:e6:66:b9:c4:54:8c:d3:ab:4c:a8:5a:3b:19:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Mar  1 05:09:28 2026 GMT
            Not After : Mar  2 05:57:28 2026 GMT
        Subject: CN=9FB9006311C6C3C4A00545A999CDCF33CBA8C469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:a7:90:06:b9:14:a5:1f:f6:2e:a7:52:bb:
                    64:14:00:7d:11:fd:aa:08:bf:b0:a0:28:87:da:db:
                    e6:83:8d:f1:09:28:0e:2b:a6:f5:3d:06:80:11:38:
                    91:e0:5a:9a:1a:0c:89:5e:44:9c:66:53:eb:70:b5:
                    aa:d7:0f:72:1e:62:3b:22:bd:f7:76:74:8e:ff:65:
                    b7:a9:3d:af:ad:a2:26:32:36:e1:0c:84:bc:d1:5d:
                    70:5f:bd:1f:b7:44:77:27:c6:f0:bb:17:bc:09:f2:
                    ee:18:94:99:8a:0d:eb:3b:fc:cc:54:49:72:ad:53:
                    9c:94:d6:e7:98:8f:ea:50:d0:2c:82:31:2b:aa:71:
                    f3:fc:2c:7b:a8:c1:3f:5f:78:6f:61:f4:16:76:86:
                    dd:eb:7d:98:01:0e:9d:2e:cf:ef:5e:61:17:a6:f6:
                    54:11:7e:16:ea:45:0a:6f:a4:82:10:68:6b:6a:0b:
                    2b:de:e0:60:a0:f6:d4:28:d2:18:f5:57:89:f5:0c:
                    1a:b0:0c:3f:42:61:c2:34:c0:bd:63:52:9a:1e:ab:
                    7f:28:67:dc:9e:bb:3a:ff:61:bf:1e:5c:33:6c:69:
                    72:df:54:79:91:bb:c6:99:f8:62:57:5f:6b:b2:e2:
                    3c:7e:49:ac:c3:2c:18:46:7d:08:c0:f7:0c:f1:5f:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B9:00:63:11:C6:C3:C4:A0:05:45:A9:99:CD:CF:33:CB:A8:C4:69
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:d6:c7:b8:66:0b:22:a7:a3:72:9d:24:74:e2:21:88:be:
         36:d7:34:a8:dc:97:b3:b7:f4:24:d8:29:e9:74:a8:9e:f9:41:
         9b:48:3f:cc:50:9e:a2:70:a3:6f:17:5d:e5:0f:73:04:2c:00:
         b6:8b:ec:3f:48:d8:b6:66:8c:d1:6b:2d:ff:88:f0:9c:44:e5:
         1a:60:24:d2:40:28:02:8f:c6:63:75:c2:0f:ef:4d:49:4e:1c:
         6d:fa:47:21:c6:f3:61:b3:64:57:74:73:bf:09:e8:bc:3d:cb:
         3c:08:55:b1:c9:93:84:40:f8:4f:96:1c:56:61:26:25:ba:52:
         38:da:87:cc:e4:24:ec:70:a4:b4:0e:c7:30:c4:6f:9c:53:5e:
         d0:12:ac:a7:c6:57:06:55:1e:48:dd:5b:1e:c0:33:c3:5f:1a:
         50:85:5b:a3:fc:cd:a7:56:a0:ee:4e:40:27:48:a4:2f:4f:fc:
         6e:fe:21:7b:e0:90:c5:e4:20:11:00:16:70:62:5a:a9:31:96:
         86:7b:2d:d8:24:c5:c3:b5:e3:46:15:53:d8:97:05:96:70:74:
         e8:2d:24:a3:fa:fa:08:ae:19:07:de:e1:25:e3:f4:26:3e:24:
         28:49:2b:a6:cb:a9:a5:ee:c1:33:19:9b:d2:b2:8d:ee:2a:9f:
         87:d7:96:1c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUELbFxPbmZrnEVIzTq0yoWjsZigEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2FkZmY0Mzk4NmUwNDIzODM5OTNmNmViOTMxZjIwODE0
MzJlMThkNDAeFw0yNjAzMDEwNTA5MjhaFw0yNjAzMDIwNTU3MjhaMDMxMTAvBgNV
BAMTKDlGQjkwMDYzMTFDNkMzQzRBMDA1NDVBOTk5Q0RDRjMzQ0JBOEM0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9t6eQBrkUpR/2LqdSu2QUAH0R
/aoIv7CgKIfa2+aDjfEJKA4rpvU9BoAROJHgWpoaDIleRJxmU+twtarXD3IeYjsi
vfd2dI7/ZbepPa+toiYyNuEMhLzRXXBfvR+3RHcnxvC7F7wJ8u4YlJmKDes7/MxU
SXKtU5yU1ueYj+pQ0CyCMSuqcfP8LHuowT9feG9h9BZ2ht3rfZgBDp0uz+9eYRem
9lQRfhbqRQpvpIIQaGtqCyve4GCg9tQo0hj1V4n1DBqwDD9CYcI0wL1jUpoeq38o
Z9yeuzr/Yb8eXDNsaXLfVHmRu8aZ+GJXX2uy4jx+SazDLBhGfQjA9wzxXzp3AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUn7kAYxHGw8SgBUWpmc3PM8uoxGkwHwYDVR0j
BBgwFoAUOt/0OYbgQjg5k/brkx8ggUMuGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMC8zQURGRjQzOTg2
RTA0MjM4Mzk5M0Y2RUI5MzFGMjA4MTQzMkUxOEQ0LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvT3RfME9ZYmdRamc1a19icmt4OGdnVU11R05RLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUv
MC8zQURGRjQzOTg2RTA0MjM4Mzk5M0Y2RUI5MzFGMjA4MTQzMkUxOEQ0Lm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEApFLWx7hmCyKno3KdJHTiIYi+Ntc0qNyXs7f0JNgp6XSonvlBm0g/zFCe
onCjbxdd5Q9zBCwAtovsP0jYtmaM0Wst/4jwnETlGmAk0kAoAo/GY3XCD+9NSU4c
bfpHIcbzYbNkV3RzvwnovD3LPAhVscmThED4T5YcVmEmJbpSONqHzOQk7HCktA7H
MMRvnFNe0BKsp8ZXBlUeSN1bHsAzw18aUIVbo/zNp1ag7k5AJ0ikL0/8bv4he+CQ
xeQgEQAWcGJaqTGWhnst2CTFw7XjRhVT2JcFlnB06C0ko/r6CK4ZB97hJeP0Jj4k
KEkrpsuppe7BMxmb0rKN7iqfh9eWHA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:06 2026 by rpki-client