Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File:                     3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier:          NwOgR5Y+vaHP2cav9EuXnHEwYSu2EPIUGxfxniA2bGg=
Subject key identifier:   D7:A0:62:06:30:95:5A:60:6F:75:CA:77:77:B2:AA:3F:B7:8F:35:26
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer:       /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial:       73AD1558BFD900BCD166CA64F660867058039101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number:          9A
Signing time:             Sat 13 Jun 2026 03:49:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:44:28 +0000
Manifest next update:     Sun 14 Jun 2026 04:05:28 +0000
Files and hashes:         1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
                          2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: RnUuxDdyfeH0lKW8c55NSy59lMQuimp/Ka2EkN/zQ6s=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ad:15:58:bf:d9:00:bc:d1:66:ca:64:f6:60:86:70:58:03:91:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
        Validity
            Not Before: Jun 13 03:44:28 2026 GMT
            Not After : Jun 14 04:05:28 2026 GMT
        Subject: CN=D7A0620630955A606F75CA7777B2AA3FB78F3526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:d1:69:7c:86:3b:6a:59:2d:b4:07:05:4f:
                    ef:ae:e4:ad:35:17:00:42:c0:8e:5b:2d:0e:7d:56:
                    88:da:db:1c:46:44:b4:c9:fb:c9:5a:79:da:74:00:
                    00:01:90:ff:b4:20:22:27:8a:6d:4f:99:8a:cb:cd:
                    56:03:a7:05:34:86:30:bc:10:ee:b6:e2:ed:f3:dd:
                    eb:08:79:0f:e6:43:ff:3c:a0:00:2a:f5:12:01:ca:
                    0d:b1:81:e1:df:7d:3c:79:b8:68:9a:59:b6:17:71:
                    aa:0f:0d:6d:e1:e9:09:71:97:64:47:19:0f:c7:7c:
                    7d:00:c1:20:99:50:9e:cf:51:d5:02:18:f2:e5:de:
                    12:4c:58:04:7d:5d:30:ef:9a:c2:8b:b8:1e:6a:19:
                    10:2e:db:1e:0c:5f:31:b7:93:60:d2:33:d2:81:8e:
                    1c:b0:3d:d2:e4:8f:79:7b:ac:7f:a3:6a:67:a6:ca:
                    47:4d:f4:60:4b:df:ae:aa:f6:e7:01:72:4a:cc:c1:
                    55:77:ed:f9:cd:de:8d:be:46:0e:1a:94:b8:d5:50:
                    7e:08:f7:15:e4:f0:0e:c0:f8:29:f1:ee:11:43:bb:
                    32:f6:41:ea:49:34:03:9b:99:93:ae:40:c3:2e:f8:
                    c7:fd:67:bc:de:50:f2:64:73:cb:a9:f8:36:38:e4:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A0:62:06:30:95:5A:60:6F:75:CA:77:77:B2:AA:3F:B7:8F:35:26
            X509v3 Authority Key Identifier:
                keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:77:18:58:4c:5f:36:bb:97:be:02:ca:bd:e9:13:45:db:89:
         2c:3e:f3:4d:52:c6:fc:7c:27:35:19:23:1b:f0:d0:28:f9:1f:
         f9:ee:8a:37:11:bb:24:84:21:44:5b:44:00:18:1c:02:ea:50:
         50:2c:e5:b9:ce:db:7e:22:3f:f8:ee:6e:b1:6d:bc:29:8c:21:
         88:91:07:5a:67:98:8a:a4:56:76:5d:54:0c:03:45:05:db:86:
         1e:32:26:27:05:91:75:f6:e4:e8:80:61:62:a4:7b:57:34:15:
         aa:f0:4c:85:dd:d5:21:d6:84:5d:42:8e:08:c7:b1:21:e1:4c:
         a5:ac:69:1f:54:53:f2:1b:34:47:28:32:d7:50:a7:05:5e:7b:
         7f:86:d3:4a:87:e3:d2:07:ce:0d:93:a5:0c:bc:5c:86:16:3a:
         f7:0f:15:f4:9b:7d:fd:2a:fa:c4:ab:a6:12:bd:28:1e:de:c2:
         bf:7d:83:c5:68:1f:3f:c7:3a:d0:02:4d:79:d9:61:f7:c3:27:
         4b:dc:0f:2b:34:4d:c8:db:58:f3:e3:f2:a4:53:07:f6:a4:f5:
         51:4f:93:9a:c1:aa:e5:81:d4:95:0b:35:7b:56:bc:7c:d8:8d:
         ec:af:e4:d0:6b:70:f8:62:c3:45:5c:0a:1f:9c:5f:86:90:1b:
         b7:00:99:0f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUc60VWL/ZALzRZspk9mCGcFgDkQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwN2FjMmVjZTczZTUwYzllYWUyZmYwODZmMjRkNDVh
ODE3NWI3YjAeFw0yNjA2MTMwMzQ0MjhaFw0yNjA2MTQwNDA1MjhaMDMxMTAvBgNV
BAMTKEQ3QTA2MjA2MzA5NTVBNjA2Rjc1Q0E3Nzc3QjJBQTNGQjc4RjM1MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbN9FpfIY7alkttAcFT++u5K01
FwBCwI5bLQ59Voja2xxGRLTJ+8laedp0AAABkP+0ICInim1PmYrLzVYDpwU0hjC8
EO624u3z3esIeQ/mQ/88oAAq9RIByg2xgeHffTx5uGiaWbYXcaoPDW3h6Qlxl2RH
GQ/HfH0AwSCZUJ7PUdUCGPLl3hJMWAR9XTDvmsKLuB5qGRAu2x4MXzG3k2DSM9KB
jhywPdLkj3l7rH+jamemykdN9GBL366q9ucBckrMwVV37fnN3o2+Rg4alLjVUH4I
9xXk8A7A+Cnx7hFDuzL2QepJNAObmZOuQMMu+Mf9Z7zeUPJkc8up+DY45M3XAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU16BiBjCVWmBvdcp3d7KqP7ePNSYwHwYDVR0j
BBgwFoAUNwesLs5z5Qyeri/whvJNRagXW3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NzI4OTg4ODAxODc2MDJhNTBhMDM5MTAvMi8zNzA3QUMyRUNF
NzNFNTBDOUVBRTJGRjA4NkYyNEQ0NUE4MTc1QjdCLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvTndlc0xzNXo1UXllcmlfd2h2Sk5SYWdYVzNzLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NzI4OTg4ODAxODc2MDJhNTBhMDM5MTAv
Mi8zNzA3QUMyRUNFNzNFNTBDOUVBRTJGRjA4NkYyNEQ0NUE4MTc1QjdCLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAvHcYWExfNruXvgLKvekTRduJLD7zTVLG/HwnNRkjG/DQKPkf+e6KNxG7
JIQhRFtEABgcAupQUCzluc7bfiI/+O5usW28KYwhiJEHWmeYiqRWdl1UDANFBduG
HjImJwWRdfbk6IBhYqR7VzQVqvBMhd3VIdaEXUKOCMexIeFMpaxpH1RT8hs0Rygy
11CnBV57f4bTSofj0gfODZOlDLxchhY69w8V9Jt9/Sr6xKumEr0oHt7Cv32DxWgf
P8c60AJNedlh98MnS9wPKzRNyNtY8+PypFMH9qT1UU+TmsGq5YHUlQs1e1a8fNiN
7K/k0Gtw+GLDRVwKH5xfhpAbtwCZDw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:37 2026 by rpki-client