Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
File:                     07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json)
Hash identifier:          kgaOIG76+WCUs9AuNvU/VN9vNJBJko3h4mT26iWHfcc=
Subject key identifier:   EB:CE:54:2D:29:FE:89:95:AF:EE:07:09:0E:94:49:77:B5:9B:21:5B
Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
Certificate issuer:       /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Certificate serial:       169FF64EE97892F74C8C82F7281E45A4A55CBF01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
Manifest number:          0149
Signing time:             Tue 04 Nov 2025 15:23:46 +0000
Manifest this update:     Tue 04 Nov 2025 15:18:46 +0000
Manifest next update:     Wed 05 Nov 2025 18:45:46 +0000
Files and hashes:         1: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: V+QMrZU84bY5q2qrAR1IcuJNZgxO288lyaCzoQ2UQhs=)
                          2: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: md/+wqbJ3H+kkEZwDt/4Y8xfAoML1rGfQ9Cm9/0s+PE=)
                          3: 3139352e3133372e3235322e302f32342d3234203d3e20323136313338.roa (hash: vEIuj42KJ0Qp5JHCx13Q/KJM4vmrtpJ4xdh8fMGXb6U=)
                          4: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (hash: 6Nbavc8JB81EZ5PdDQdVGn6cq8HL5cS0r2vLSX9cTDY=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9f:f6:4e:e9:78:92:f7:4c:8c:82:f7:28:1e:45:a4:a5:5c:bf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
        Validity
            Not Before: Nov  4 15:18:46 2025 GMT
            Not After : Nov  5 18:45:46 2025 GMT
        Subject: CN=EBCE542D29FE8995AFEE07090E944977B59B215B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:4a:44:b3:9c:13:d8:57:45:a8:59:ac:f4:
                    11:3f:39:02:97:29:e3:4d:30:d8:72:55:58:ae:fa:
                    87:45:0f:e6:62:21:a2:3b:ec:d6:5d:9e:be:02:4d:
                    83:84:55:c3:c5:17:01:74:de:16:cb:4d:32:70:3c:
                    98:15:49:2b:68:27:55:dc:5c:ff:11:a2:47:bd:6d:
                    ab:01:b9:25:33:1a:b6:30:ae:b7:62:c5:34:e5:4c:
                    ef:88:42:4d:63:6e:f6:21:42:d8:0d:ff:40:94:d9:
                    f8:11:34:4b:c3:38:c7:b0:c1:3d:5b:1d:61:91:f0:
                    6c:53:ae:2d:99:c7:03:6a:64:e5:e3:a4:31:63:f8:
                    68:08:d0:cd:13:33:5f:4d:33:75:d5:8c:f8:23:6b:
                    19:a0:02:92:50:52:83:bf:85:3c:d3:34:15:ac:7f:
                    1c:85:9e:f7:23:d6:5d:c6:24:0c:8b:69:6c:00:e1:
                    f5:35:b4:42:8f:38:cf:ab:0c:7d:4f:41:93:d4:5c:
                    a2:31:0a:56:18:29:b4:70:f4:59:2e:bb:ac:5c:ff:
                    fd:a6:12:af:4f:64:50:20:62:2a:db:75:81:0a:e1:
                    d3:fb:27:fb:15:a6:ac:a6:11:03:c4:24:3c:d9:5c:
                    d7:d4:19:93:ea:6e:72:0d:f3:91:ec:d4:74:67:0a:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CE:54:2D:29:FE:89:95:AF:EE:07:09:0E:94:49:77:B5:9B:21:5B
            X509v3 Authority Key Identifier:
                keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:be:4f:17:df:d0:99:24:24:3d:18:be:55:c9:81:f1:3c:
         aa:70:90:80:11:5a:cb:7a:24:79:b1:c3:87:5d:0e:ef:c0:63:
         f9:ad:e7:68:69:ea:2d:27:07:7c:72:6e:b1:45:5f:75:0d:5e:
         4b:fc:66:ac:c3:e5:27:0b:61:7e:42:02:b0:e4:14:e1:e6:a8:
         1a:3a:75:1c:d2:5c:22:6e:bd:ad:5a:23:d5:ac:6f:6c:fd:b7:
         dc:22:2e:ee:18:e5:27:07:88:7c:39:f8:52:2b:15:62:c5:32:
         17:c5:3d:69:d0:40:eb:3e:11:e9:69:70:66:25:85:fa:a4:cc:
         48:bc:85:d1:f3:82:55:11:40:37:70:1a:dc:a5:b0:c4:ff:39:
         d1:8c:d4:bf:76:60:81:d2:1d:d0:55:4e:12:2e:1a:a2:6e:33:
         e1:11:15:25:12:ca:24:7d:39:3e:4a:95:83:28:b3:4c:c2:95:
         2f:cf:97:ec:7a:11:c9:89:6e:9c:f6:d0:a5:ec:2a:a5:26:4e:
         4a:14:e2:3e:94:ff:c9:8a:14:e2:c7:4d:d6:6a:71:40:af:ba:
         63:5a:df:1c:e4:ca:e8:6c:44:fa:8a:fd:be:c6:d4:e1:86:be:
         a0:e4:25:15:6e:ab:07:48:2e:0e:6b:16:bc:a9:7f:72:df:88:
         0f:b3:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:09 2025 by rpki-client