Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File:                     DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier:          4PBGHiMZjKLfsT92qV1zGwuZ3GcVezRPPCxPUQUIxyQ=
Subject key identifier:   EF:11:BE:A2:47:9A:50:18:7E:57:17:D5:9B:32:6F:0D:98:05:08:88
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer:       /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial:       50AB583F0D7785F5C945DC744CB5997E5F5AEAAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number:          BB
Signing time:             Sun 01 Mar 2026 15:45:13 +0000
Manifest this update:     Sun 01 Mar 2026 15:40:13 +0000
Manifest next update:     Mon 02 Mar 2026 18:19:13 +0000
Files and hashes:         1: AS60900.asa (hash: 0qS0zdFcBvyQExHkj36nBj+yE156nW7QF8snzcfkGFc=)
                          2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: tVk2Ebj0I6OotkmmuEUnlHw708UiNcjbMelL+Pz0W2E=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ab:58:3f:0d:77:85:f5:c9:45:dc:74:4c:b5:99:7e:5f:5a:ea:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
        Validity
            Not Before: Mar  1 15:40:13 2026 GMT
            Not After : Mar  2 18:19:13 2026 GMT
        Subject: CN=EF11BEA2479A50187E5717D59B326F0D98050888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:c1:59:87:91:fb:ab:2c:c5:68:07:a7:5e:
                    51:26:b1:89:9d:5e:06:98:be:36:9a:c4:b7:2a:2e:
                    93:af:64:2f:32:0b:69:ea:03:6b:c8:37:0e:bd:74:
                    d4:d4:ad:bb:09:87:43:4f:df:40:14:d3:b1:3c:ca:
                    ee:67:51:f4:14:65:1d:ac:e9:82:3c:55:96:30:f6:
                    20:ae:4d:8b:9f:c1:d7:a7:85:41:19:8f:04:0b:5f:
                    5e:d1:8c:88:55:16:43:00:92:d4:58:8f:4c:a6:fe:
                    d5:66:78:61:d4:aa:5c:52:cd:76:8c:d0:6b:a2:9c:
                    27:17:8b:ba:ac:86:5a:4a:21:6d:72:05:a9:dd:2c:
                    fa:fe:84:8a:96:4a:ae:4d:32:c3:41:ec:5b:4e:1b:
                    63:0b:c6:ee:c8:fb:71:75:a8:c4:23:5c:b7:1a:55:
                    47:44:fa:ab:eb:c9:0b:e6:62:9a:94:bd:f2:87:b3:
                    06:26:45:f2:94:58:40:6e:95:15:41:82:f5:7a:f5:
                    cf:1e:ec:8c:be:5f:0a:a6:77:14:3b:4d:05:78:42:
                    09:c0:ab:fb:58:d6:f5:30:ca:f3:e5:88:b4:cd:fa:
                    a8:e7:00:12:66:46:bc:68:32:4c:41:b4:d3:b8:0e:
                    b8:b5:f1:72:33:5c:c5:50:e5:b3:2b:9a:f3:af:0c:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:11:BE:A2:47:9A:50:18:7E:57:17:D5:9B:32:6F:0D:98:05:08:88
            X509v3 Authority Key Identifier:
                keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:55:2d:92:f2:2a:a6:85:84:8b:6e:72:ff:83:dd:63:65:d9:
         ae:2b:ac:99:fe:7a:a7:72:55:54:9c:85:d3:ae:d1:15:d7:cf:
         fb:e1:bb:26:03:73:ac:a8:52:2d:e4:00:07:0c:fe:65:39:ea:
         2f:ca:48:25:6c:18:3a:e2:84:dd:d7:65:f7:49:54:63:f2:5e:
         54:d3:7e:1c:dc:a2:9f:a3:d7:ae:f9:75:31:b9:2e:a3:85:3d:
         4e:ff:39:e8:73:e9:83:d3:b2:40:a8:9a:30:3b:95:73:79:7a:
         65:a0:d9:40:6c:be:f8:3e:1a:62:31:9f:6e:e0:86:fa:c8:ca:
         d2:1f:e6:d6:6d:e8:16:0d:cd:38:77:85:dc:40:57:02:ac:d2:
         8b:33:d4:67:2a:a7:0d:e0:56:d0:dc:6c:94:14:2c:14:6e:07:
         0b:27:1b:76:ea:e2:28:26:ae:9d:a6:b2:f6:ff:21:0b:73:c8:
         10:3d:e8:62:fc:0d:32:95:e9:2e:82:80:35:df:46:e3:86:b2:
         85:a8:6c:43:da:27:80:60:7f:82:1f:fa:c2:b4:07:22:bb:da:
         bd:1d:af:6e:6c:0c:47:9d:87:18:ed:71:66:68:f9:19:fc:59:
         a0:9a:e5:52:27:e7:e3:52:f1:b6:44:01:a1:25:29:43:6f:9b:
         0a:d3:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:54 2026 by rpki-client