Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
File:                     7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft (raw, json)
Hash identifier:          rWRiiD9YNBR+2AzD+oLLtD7nH74qxiOiEFabSeAg8/U=
Subject key identifier:   55:04:9D:87:2D:41:45:77:22:38:B1:D4:D6:4A:AE:C4:5D:C2:86:40
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Certificate issuer:       /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial:       020A19E04452A0A2514CEA341E2A56129C67D879
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
Manifest number:          0621
Signing time:             Mon 28 Apr 2025 06:26:00 +0000
Manifest this update:     Mon 28 Apr 2025 06:21:00 +0000
Manifest next update:     Tue 29 Apr 2025 08:58:00 +0000
Files and hashes:         1: AS16909.roa (hash: d5nqsB1jhovAy3qoVb9FMNWyw+l+C3yQebvqqrey64A=)
                          2: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl (hash: rpx6sWSHVNyLc+DeTO2rN55PHs1nacTlYOySAmV02/c=)
                          3: AS401507.roa (hash: eaAtR/gx8qePu3z87HRNc8i2Tgk865715SNsot6iyac=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0a:19:e0:44:52:a0:a2:51:4c:ea:34:1e:2a:56:12:9c:67:d8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
        Validity
            Not Before: Apr 28 06:21:00 2025 GMT
            Not After : Apr 29 08:58:00 2025 GMT
        Subject: CN=55049D872D4145772238B1D4D64AAEC45DC28640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:e9:53:75:77:fc:41:ae:77:05:ff:da:6f:
                    1a:40:22:ee:cc:16:46:02:77:a1:d0:44:3e:28:34:
                    95:9b:5f:d4:8d:f1:41:53:94:06:2f:5e:cb:78:e3:
                    2a:e2:50:c2:9b:09:b1:00:7e:fd:d4:82:49:80:1d:
                    58:55:02:99:8e:b4:da:67:97:9a:a8:66:f8:36:37:
                    78:a2:13:7c:90:63:75:19:0a:10:4f:88:3d:6d:a5:
                    16:27:c6:97:0a:f3:fe:b3:23:ee:79:0c:ad:29:a7:
                    65:3d:8d:4d:66:a3:8c:80:89:ed:4b:ec:f0:47:1d:
                    5c:af:75:f4:65:b3:3a:8e:ad:b4:fb:c0:f1:81:08:
                    70:d2:8b:ae:ee:12:66:7e:f9:70:30:a5:ca:77:d0:
                    8a:ec:bc:30:01:d9:79:a3:a8:e5:0d:84:2e:f8:b3:
                    e8:20:75:13:ce:7b:90:78:4c:80:46:2a:0b:89:c8:
                    f4:22:dc:fc:0c:4c:76:5e:c0:ec:e4:04:b8:bb:b1:
                    91:b8:26:09:84:e9:ed:fd:1b:76:6d:c9:3a:c3:3f:
                    7a:94:62:7f:14:57:7d:a6:e3:54:bf:2c:93:ba:f3:
                    b3:95:3c:4a:41:e1:c7:b4:d2:6e:c6:f6:f9:19:b0:
                    75:da:94:6f:ab:ec:9c:dc:95:e7:0e:61:65:7e:de:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:9D:87:2D:41:45:77:22:38:B1:D4:D6:4A:AE:C4:5D:C2:86:40
            X509v3 Authority Key Identifier:
                keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:03:1e:1f:15:f9:07:17:a5:16:4d:2a:3d:3f:cf:9f:2e:
         e6:48:03:1e:42:f2:85:12:41:56:f7:d9:68:4d:f4:fd:78:ad:
         17:b0:1d:f6:78:e7:3c:eb:f4:1c:2a:de:05:d0:43:13:37:4c:
         6c:be:cc:a7:4b:43:9a:59:ed:be:f6:40:e5:2e:01:cc:4d:ba:
         35:72:45:7d:8a:00:b9:57:ef:00:be:1e:4b:97:d1:d4:37:92:
         5b:35:68:7c:f1:b0:e2:8c:17:a2:da:ee:b7:18:f8:ab:f9:9d:
         b6:ad:6a:84:3b:81:bf:2c:8f:08:67:c7:2b:9e:87:ac:c3:61:
         24:8f:99:16:97:ad:bd:75:e5:05:6d:37:65:5a:a4:2f:d9:b2:
         a6:e2:04:a1:ee:8e:f9:90:8c:06:7d:d7:26:1e:5e:ee:da:21:
         a6:d4:fa:83:89:33:1c:54:61:56:47:c9:6b:90:68:0b:b2:8c:
         dc:64:3a:62:2c:e5:c2:13:6d:85:c4:d0:a1:93:a1:5a:cf:f9:
         85:46:40:b4:55:bf:a2:2f:85:e7:f7:57:05:a1:2a:af:91:48:
         a9:eb:e5:4f:de:dd:90:65:17:e4:f3:f8:46:1a:aa:81:7e:a0:
         d4:d0:d6:d3:91:17:39:49:24:08:06:8f:f3:25:67:e8:63:7a:
         c4:80:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:28:45 2025 by rpki-client