Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
File:                     B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft (raw, json)
Hash identifier:          CZ5ApQjK0mgyM2Dj30v4YdQie7oPLzFIgbGU3cZJUTI=
Subject key identifier:   4A:C6:C4:EC:26:4C:15:27:A1:2D:A2:46:1B:BF:17:5C:4B:1C:39:7B
Authority key identifier: B9:36:4E:55:E8:3F:FE:7E:EE:FE:63:56:E9:FE:B6:3C:3B:36:61:E7
Certificate issuer:       /CN=b9364e55e83ffe7eeefe6356e9feb63c3b3661e7
Certificate serial:       0AA4A968674A9DAF19E381A2F8A2DA48490B1571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
Manifest number:          01B0
Signing time:             Tue 04 Nov 2025 05:21:28 +0000
Manifest this update:     Tue 04 Nov 2025 05:16:28 +0000
Manifest next update:     Wed 05 Nov 2025 07:58:28 +0000
Files and hashes:         1: B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl (hash: hT8TJq9hLMUdqmNksQwrqgYmHwXjpR6yKRgqiigh1MA=)
                          2: AS214495.asa (hash: 5/ypWwzVGgEmi/zBGtQqDvKO/2oEMx4cvCD7/1YE/9g=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a4:a9:68:67:4a:9d:af:19:e3:81:a2:f8:a2:da:48:49:0b:15:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9364e55e83ffe7eeefe6356e9feb63c3b3661e7
        Validity
            Not Before: Nov  4 05:16:28 2025 GMT
            Not After : Nov  5 07:58:28 2025 GMT
        Subject: CN=4AC6C4EC264C1527A12DA2461BBF175C4B1C397B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:6b:9e:38:65:c6:fd:fc:7b:fd:f0:29:64:
                    b4:c9:e3:1c:14:9c:7e:ac:da:27:2f:0d:4a:08:89:
                    e0:eb:0b:2d:ae:51:8c:1a:49:6d:7f:d2:a5:b3:63:
                    19:ee:c4:ee:b6:f0:e6:f4:99:87:9f:26:3e:c5:56:
                    1a:60:e0:bc:4c:9a:d4:45:eb:4a:5f:2b:d7:07:83:
                    31:c7:49:8a:0e:17:c0:5d:14:38:b3:e8:c7:64:6b:
                    bb:5e:d3:bb:f5:95:ca:e0:7d:86:34:a3:7a:06:e8:
                    6a:ac:2c:25:ff:89:85:e5:b0:d5:3a:c0:e9:e7:13:
                    ec:f5:7b:83:a7:33:f3:c5:ff:22:2d:dd:e1:24:9d:
                    99:c3:64:a4:a7:ec:ee:b7:b5:7d:e6:01:75:b0:6f:
                    9b:a9:8f:88:26:b6:7c:32:0b:af:e7:9b:b0:12:56:
                    6a:5b:ff:cd:84:2a:d0:76:a1:fa:74:aa:b2:54:9e:
                    ef:37:71:7e:66:16:b0:e6:03:5c:4f:f3:08:81:89:
                    ac:e2:1a:e9:f5:4b:66:41:ea:25:ac:2b:6e:b8:15:
                    29:3e:89:16:c2:1e:15:9e:7c:b3:ec:e3:2c:84:e6:
                    5c:3b:1e:40:28:1b:e3:cd:6a:5c:08:80:60:a8:fc:
                    1b:37:88:1d:51:b2:17:e8:79:63:ee:0e:98:43:37:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C6:C4:EC:26:4C:15:27:A1:2D:A2:46:1B:BF:17:5C:4B:1C:39:7B
            X509v3 Authority Key Identifier:
                keyid:B9:36:4E:55:E8:3F:FE:7E:EE:FE:63:56:E9:FE:B6:3C:3B:36:61:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:67:24:be:0a:fb:27:93:f4:de:11:88:61:dc:27:d4:70:
         41:c0:c0:67:ff:d4:50:73:f2:7a:6d:58:32:36:42:20:a7:cf:
         1a:48:bc:8d:9b:4d:aa:9d:5b:69:ac:6d:22:1a:d7:e7:63:2d:
         69:35:d3:15:17:3e:7c:8a:52:2c:a9:4b:45:c9:02:e7:78:0f:
         24:7a:b2:96:09:6b:68:97:a8:1f:3a:f3:25:c7:79:5c:f6:7d:
         e0:72:f8:5d:5b:35:25:ca:fb:3e:85:73:71:35:b5:f2:41:0f:
         52:56:0d:54:5d:6b:85:61:ef:a5:f2:f2:e2:00:50:74:dd:b1:
         13:81:08:de:c4:ea:ea:69:43:67:c5:62:a7:34:f8:cf:54:04:
         e4:c0:91:99:ad:20:f1:ee:b6:a5:59:49:25:ae:0e:d9:50:16:
         dc:83:f3:0e:a8:39:9f:cf:4c:ea:cc:42:47:82:aa:0c:94:82:
         74:08:df:76:95:f5:02:51:33:47:33:e3:b3:6f:51:5d:36:fc:
         75:97:3a:7e:19:91:a0:70:3d:17:b2:e4:19:95:9f:4c:1f:17:
         73:2c:d2:f8:91:a1:4f:7d:d6:15:e5:34:6b:57:2e:53:4e:c2:
         4b:f8:ef:1f:95:c9:a1:38:8a:27:40:35:cb:18:5c:d3:4d:b2:
         17:ee:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:27 2025 by rpki-client