Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          7+XcZHCi9aqwbXU7q+Q2dfaA5B+UzU+BHxMAoGKboxY=
Subject key identifier:   B9:77:37:A7:93:45:8F:35:14:02:17:E3:57:D0:55:89:3E:C6:3C:CC
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       5E47241CFE9AE7632FE8C2163280CD3692DE20A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          02A1
Signing time:             Sat 14 Jun 2025 00:48:35 +0000
Manifest this update:     Sat 14 Jun 2025 00:43:35 +0000
Manifest next update:     Sun 15 Jun 2025 03:40:35 +0000
Files and hashes:         1: AS59678.asa (hash: MrrWJ9l8lgWoC35oKfd53MWxXqNmbveRovZsM7Giidk=)
                          2: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: LJLm05wW5KgTw6HNdgEpZ9LyFYA+DQdzS1QkiO983wg=)
                          3: AS48606.asa (hash: 5NWb4N+D0OquyokzVrf8CTeFzp8KBWxtJJ16mYNyMNg=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:47:24:1c:fe:9a:e7:63:2f:e8:c2:16:32:80:cd:36:92:de:20:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Jun 14 00:43:35 2025 GMT
            Not After : Jun 15 03:40:35 2025 GMT
        Subject: CN=B97737A793458F35140217E357D055893EC63CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:4e:12:4d:c5:cf:d3:a9:17:b4:cb:ba:57:
                    95:1d:03:71:02:ba:f8:fe:7c:10:46:fe:6d:26:07:
                    a1:47:61:9a:d1:57:da:53:e5:b3:5a:9b:d5:34:37:
                    26:95:2d:3f:fa:f9:64:9d:86:e7:a5:c5:c6:ab:eb:
                    9d:93:d1:0b:dd:d6:2d:25:ce:a7:88:ce:0f:3a:c2:
                    2c:ba:87:9f:da:97:d7:19:69:38:b1:b0:bb:38:16:
                    a8:06:fe:11:b6:4d:ed:cd:b3:99:ce:68:e9:22:c5:
                    bc:e8:17:c5:d3:48:b3:f6:56:e6:dd:94:1f:fc:c5:
                    63:22:1e:bf:b4:5d:69:e0:dd:ba:6e:36:20:11:eb:
                    f0:db:32:c6:5b:86:3a:ed:61:3f:89:69:e2:08:bd:
                    f1:07:2d:b9:c0:09:94:88:0a:f0:4f:e0:f3:8d:65:
                    79:b1:28:d6:01:31:ed:95:3f:1e:d7:7f:1c:59:23:
                    c4:a8:7e:0b:cc:3e:2d:29:7f:4a:a7:fb:eb:73:b0:
                    d4:99:9c:1f:f1:88:10:9d:ad:66:54:a5:5f:34:72:
                    66:f8:a3:ac:34:65:a3:4d:91:16:7e:0d:b8:23:6d:
                    19:25:4b:e2:8c:bc:80:ae:59:d6:17:a6:2b:12:77:
                    91:55:3d:b5:e8:d6:9e:d2:60:f0:4e:25:5c:51:88:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:77:37:A7:93:45:8F:35:14:02:17:E3:57:D0:55:89:3E:C6:3C:CC
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:da:be:3a:f3:e6:04:9e:f4:c7:8e:82:f2:51:db:ad:fa:
         cb:f9:8a:f7:55:76:58:45:19:da:e6:10:0e:7a:46:8a:26:e4:
         d7:8e:36:b3:ee:76:53:81:d5:22:76:4a:be:b8:f4:bb:27:70:
         fa:8c:cf:19:5e:95:52:d2:5f:6d:b3:a0:1b:a9:40:36:a7:53:
         a7:7e:d6:f5:ef:ce:30:35:17:3a:ba:57:62:60:0e:c8:17:90:
         b8:2a:0e:49:a6:6c:69:dd:5f:f8:c9:ae:b9:c8:cd:2f:fd:de:
         ab:6b:a4:91:65:46:94:a5:e9:18:f9:21:59:da:06:28:79:ae:
         7b:d5:5c:e9:04:cb:2c:c7:28:be:7b:91:64:d1:93:0f:70:a0:
         87:0f:ed:ea:cd:5e:0d:d7:c9:5d:33:95:ad:ab:bd:1d:d6:3c:
         53:bd:05:db:ee:f2:98:1f:bc:10:e4:ab:0f:56:88:4f:3e:1d:
         08:b8:f2:e7:40:60:90:28:ab:73:cc:82:ca:67:77:89:33:2b:
         9d:13:10:3b:4d:46:18:5a:89:17:c2:6c:7a:50:7c:cd:ab:3e:
         59:9e:7f:ff:36:b7:93:0d:ca:70:14:d6:3b:57:0c:26:ce:2d:
         85:fe:39:fd:96:dc:54:67:06:22:7b:3b:0c:93:69:de:a2:a8:
         23:5d:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:54 2025 by rpki-client