Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File:                     DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier:          Nkbn9MjfxQv0RkYTaFYTyo8+b+VHty/2tIoLI1AHU1A=
Subject key identifier:   74:0E:AF:1A:62:C4:0C:70:55:46:1F:C7:5D:0C:03:82:16:55:96:FE
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer:       /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial:       5433F53C8F0707D0E09278B41648557698C60EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number:          FE
Signing time:             Sun 19 Apr 2026 07:10:37 +0000
Manifest this update:     Sun 19 Apr 2026 07:05:37 +0000
Manifest next update:     Mon 20 Apr 2026 11:03:37 +0000
Files and hashes:         1: AS60900.asa (hash: yTpfelC3+BYwrAy39KSDdJClIIbArtpKZWCYmVGM4MU=)
                          2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: CMewn/0LwxJDf4Gsxnvs2bpGTsYiVVCb2tIAQzK8o5U=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:33:f5:3c:8f:07:07:d0:e0:92:78:b4:16:48:55:76:98:c6:0e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
        Validity
            Not Before: Apr 19 07:05:37 2026 GMT
            Not After : Apr 20 11:03:37 2026 GMT
        Subject: CN=740EAF1A62C40C7055461FC75D0C0382165596FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:a9:66:b6:21:0d:51:49:12:36:cd:cd:a0:
                    25:8f:e3:ac:76:ad:4a:11:15:b2:1d:62:44:b7:c8:
                    ef:e9:81:a4:fa:1f:a4:a5:5b:ec:ff:c0:f1:8e:b0:
                    77:c2:e4:aa:6e:94:e1:e6:3a:07:1d:d3:65:ee:96:
                    9e:5f:08:23:67:07:7e:98:fb:bd:82:c4:49:88:d2:
                    09:9d:f0:ba:fd:b2:ac:7f:f5:94:6e:04:0a:8e:23:
                    ad:c7:9e:f9:5b:4b:9a:26:5f:ee:fd:cd:90:2d:79:
                    15:08:87:fa:77:25:48:c1:aa:1c:04:d6:27:c2:e1:
                    53:e2:86:42:f0:2c:35:e0:33:84:37:fb:1f:cc:ab:
                    1e:df:d0:c7:7d:86:07:2f:a2:d6:fa:fe:de:65:d6:
                    f0:31:f3:8c:32:e5:a2:a1:30:62:04:62:82:90:c4:
                    0b:ba:65:b1:87:b5:e7:23:13:80:fc:9b:0f:c4:35:
                    9f:20:da:9a:75:07:ca:cc:05:c3:4e:58:f4:03:9b:
                    30:ca:a7:fd:b3:54:d3:df:ba:f3:1a:e2:96:18:b3:
                    44:d0:e4:bc:93:33:76:d1:3b:ae:13:bb:88:cc:ba:
                    b3:e1:0c:00:e0:7b:a8:a9:bb:23:50:0f:86:46:2f:
                    b9:4c:41:40:a3:46:40:39:7c:64:2b:9a:18:b4:af:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:AF:1A:62:C4:0C:70:55:46:1F:C7:5D:0C:03:82:16:55:96:FE
            X509v3 Authority Key Identifier:
                keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:6c:bd:95:0a:fe:f9:fb:d8:64:5a:5d:53:21:46:fc:bc:
         e5:a4:43:75:23:16:4a:de:fb:fd:ea:e7:62:25:a0:be:c3:25:
         78:a0:88:2e:b1:25:cb:19:bb:c7:cb:8e:4b:8d:d8:98:35:e6:
         4f:a5:d1:bb:9b:24:71:c0:f6:4e:ec:eb:f2:85:fd:49:2a:00:
         35:09:52:76:ef:a3:16:de:d4:ca:c9:f3:e0:8b:d3:d4:a2:14:
         12:60:2d:6f:45:3b:cf:d7:e8:ec:e8:20:b3:82:59:61:a3:97:
         3d:aa:28:92:fa:b5:92:a6:2f:9c:87:e5:ba:f1:aa:e8:82:38:
         67:c0:7f:88:3e:94:9b:5a:b1:00:14:81:dc:87:e2:ad:bf:f0:
         50:eb:3b:21:ae:00:29:17:dd:a6:7d:b1:7e:19:5d:db:d9:28:
         57:16:92:bb:8d:65:31:64:3d:30:62:a1:d8:c5:ac:85:51:3b:
         d6:cd:3e:a4:0f:25:03:06:ce:04:a4:02:b8:2d:78:ba:35:a9:
         2a:59:86:18:0a:5f:2c:dd:d8:c3:6a:f6:9d:53:2f:fe:37:08:
         e9:3a:b2:d7:ad:02:fa:cf:ab:8a:b9:d9:8a:7c:1e:94:b8:26:
         e7:b0:2d:96:a1:7f:91:85:9a:a6:ac:13:5a:1d:57:08:a5:54:
         bd:82:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:39:58 2026 by rpki-client