Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
File:                     07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json)
Hash identifier:          hHmXN7H3qsevcR17ByFq/nSVx0qcGclqv9bASlzU3FY=
Subject key identifier:   08:F2:9F:87:E9:C7:78:98:BB:68:18:42:33:93:89:CD:A2:95:FF:E2
Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
Certificate issuer:       /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Certificate serial:       45526D7D5BD449D3B14BE3223ADBDFFEE826CD61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
Manifest number:          0133
Signing time:             Sun 19 Oct 2025 04:50:10 +0000
Manifest this update:     Sun 19 Oct 2025 04:45:10 +0000
Manifest next update:     Mon 20 Oct 2025 05:34:10 +0000
Files and hashes:         1: 3139352e3133372e3235322e302f32342d3234203d3e20323136313338.roa (hash: vEIuj42KJ0Qp5JHCx13Q/KJM4vmrtpJ4xdh8fMGXb6U=)
                          2: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: ND8F1kYQ7Dnh+Rt+Fc8tpEC8goAn/zf85zVb7jTlM4k=)
                          3: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (hash: 6Nbavc8JB81EZ5PdDQdVGn6cq8HL5cS0r2vLSX9cTDY=)
                          4: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: md/+wqbJ3H+kkEZwDt/4Y8xfAoML1rGfQ9Cm9/0s+PE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:52:6d:7d:5b:d4:49:d3:b1:4b:e3:22:3a:db:df:fe:e8:26:cd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
        Validity
            Not Before: Oct 19 04:45:10 2025 GMT
            Not After : Oct 20 05:34:10 2025 GMT
        Subject: CN=08F29F87E9C77898BB681842339389CDA295FFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:e1:b9:1a:9e:1e:c6:c9:8f:9b:a8:1a:5a:
                    d9:73:7d:96:73:29:27:af:c3:8f:76:07:fe:d1:ec:
                    ee:09:b6:ff:21:c8:70:c2:d6:3e:95:5b:4b:2f:fb:
                    a2:d1:23:5b:fc:58:29:e8:27:9b:79:8b:86:12:7e:
                    9c:d1:d0:75:7e:9a:a2:06:b5:b4:83:4d:f2:2a:f0:
                    6f:1a:5e:9f:d6:8e:3c:20:75:ca:61:b2:05:be:ac:
                    d9:75:1f:12:03:5d:c7:a0:99:d1:f2:f4:20:35:89:
                    1d:3a:30:44:70:21:93:06:6e:40:2e:af:95:07:0c:
                    95:d1:5a:36:05:75:d3:99:b8:51:34:8a:93:ba:3f:
                    c7:3c:75:ab:d7:59:87:d5:05:92:f9:95:cf:f3:fd:
                    79:15:c6:e2:f3:f8:b5:90:a3:07:eb:03:18:16:29:
                    25:c2:0a:d3:eb:0a:ec:f2:3f:5e:d7:e8:2b:97:73:
                    1e:ab:47:7d:de:87:c3:93:8b:14:f3:aa:9c:e6:de:
                    68:ee:bf:c2:28:d3:0c:42:f0:8b:43:3d:b4:8c:93:
                    a2:88:ce:c4:15:9b:fd:1e:8d:b2:22:c4:15:b8:34:
                    c6:96:3c:02:ae:6a:f6:3b:c7:16:5a:c2:0e:f5:f5:
                    df:1c:3d:36:f2:c6:23:61:f6:a1:2d:b4:fe:53:75:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:9F:87:E9:C7:78:98:BB:68:18:42:33:93:89:CD:A2:95:FF:E2
            X509v3 Authority Key Identifier:
                keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:01:49:77:e2:3a:d6:4e:89:aa:87:fe:39:fc:15:0e:e1:9b:
         7f:91:90:43:dc:07:87:ef:b8:b4:6d:5d:c7:95:80:f2:56:65:
         6d:3b:65:3b:16:ac:9e:43:a7:da:b7:a4:a5:6c:43:1a:83:f8:
         d6:85:98:51:f3:76:b7:9d:85:de:aa:a3:e3:cd:f7:df:24:62:
         4b:b0:9a:d0:e6:f6:4e:e5:52:06:e7:c3:c8:83:d5:ee:a3:35:
         a4:20:c5:20:b2:df:97:6d:3f:d7:4a:b7:d5:8b:ac:23:4f:9f:
         e8:a2:a6:24:7a:30:f7:24:18:24:37:53:9e:1a:9f:cb:86:e2:
         73:34:41:39:cf:14:ac:bd:6c:3a:a4:3e:3e:c2:67:10:4a:b6:
         20:39:a2:3d:ea:7e:61:83:1d:3f:e8:01:97:c3:af:01:c7:cf:
         80:62:e5:3b:ac:30:25:15:0a:44:b0:b4:bc:af:b1:ef:26:f3:
         58:e8:f6:e1:72:9c:a7:a7:78:3d:4e:b9:6d:2f:2e:c2:c4:17:
         a7:42:9c:d4:6a:4e:53:f3:b6:ef:ac:99:69:86:e7:3c:a3:3a:
         5e:36:4e:0e:e6:b9:c9:83:57:30:de:6a:9e:b7:95:3f:00:08:
         1f:33:8e:b6:dc:5f:cf:f8:85:72:2e:91:71:a2:34:16:81:e1:
         42:d6:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:03 2025 by rpki-client