Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
File:                     07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json)
Hash identifier:          Hg9leu1ZkgQ3LfdX095H/utpuKVgIvV0WetPaklV0JI=
Subject key identifier:   95:01:AE:80:AE:00:E3:1A:AB:8B:C1:C3:77:FD:26:0A:B9:07:90:D7
Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
Certificate issuer:       /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Certificate serial:       31408030378BAE2B587308561666CCEC819C9BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
Manifest number:          01F3
Signing time:             Thu 12 Mar 2026 18:53:33 +0000
Manifest this update:     Thu 12 Mar 2026 18:48:33 +0000
Manifest next update:     Fri 13 Mar 2026 22:27:33 +0000
Files and hashes:         1: 3139352e3133372e3235322e302f32342d3234203d3e20323136313338.roa (hash: vEIuj42KJ0Qp5JHCx13Q/KJM4vmrtpJ4xdh8fMGXb6U=)
                          2: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: qt1lRixJHh9XyItwoGIF3dWNakYVeDxMJqfX168G6bM=)
                          3: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: cuAScfI3UTqIYjy7nXeyEPPjrA3Njwa/u/6lZuZsBFU=)
                          4: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (hash: 6Nbavc8JB81EZ5PdDQdVGn6cq8HL5cS0r2vLSX9cTDY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:40:80:30:37:8b:ae:2b:58:73:08:56:16:66:cc:ec:81:9c:9b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
        Validity
            Not Before: Mar 12 18:48:33 2026 GMT
            Not After : Mar 13 22:27:33 2026 GMT
        Subject: CN=9501AE80AE00E31AAB8BC1C377FD260AB90790D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:99:ec:e8:c8:cb:77:dd:13:f4:98:46:3a:
                    4e:dd:33:00:09:54:68:a9:5d:87:02:84:32:e0:b0:
                    e7:7d:98:99:56:7c:53:ff:c9:3e:ee:ab:7c:92:2c:
                    ee:85:25:39:fa:85:4e:93:1d:2f:d3:96:a6:43:c9:
                    b3:9a:51:b5:cd:76:e7:f2:c5:27:e8:cf:8c:d4:10:
                    8f:59:28:5c:4a:6f:6e:ce:46:cf:f7:d9:58:b7:fb:
                    68:ea:97:eb:62:1e:ea:86:ae:d4:16:4d:5f:15:af:
                    04:28:a9:39:b2:d1:1e:e3:2c:50:d0:bb:49:ff:8c:
                    c1:45:f5:c9:20:a9:1a:a6:7d:69:e9:56:46:4d:50:
                    7e:ae:10:18:d5:5a:0c:05:27:aa:f9:97:3c:8c:44:
                    97:cc:0d:65:24:72:5d:5a:96:e2:f2:fa:34:69:3c:
                    67:9b:57:67:eb:46:e7:ed:82:25:4f:46:f8:3d:a6:
                    ff:e4:8a:11:59:85:5f:b5:ea:e6:9f:ce:2a:db:5f:
                    9c:1b:9a:ae:17:28:58:18:34:4c:59:fd:71:a1:e0:
                    d8:e1:a6:0b:ab:1a:2f:50:3f:ee:5f:75:5d:23:a0:
                    dc:3a:e3:18:b2:16:66:93:60:16:d0:ab:7c:ac:81:
                    26:8d:2e:c9:37:bb:25:c8:f7:0b:bb:cc:ab:13:dd:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:01:AE:80:AE:00:E3:1A:AB:8B:C1:C3:77:FD:26:0A:B9:07:90:D7
            X509v3 Authority Key Identifier:
                keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:84:94:6c:4e:56:10:b4:04:55:13:bf:a5:a3:ae:6b:91:40:
         5d:67:ed:df:0e:c3:b1:96:72:a0:ba:83:84:9a:75:e3:44:31:
         12:77:26:8f:31:ce:00:9c:37:bc:53:0a:22:e1:43:fa:0c:52:
         5c:ad:c8:b1:f6:48:f5:0f:79:56:ef:46:cc:fc:d6:1b:3d:61:
         7e:18:05:fb:b3:ae:81:8f:3e:eb:5a:75:82:bb:79:28:6c:0f:
         d6:0d:f4:86:d4:86:32:3d:20:4f:25:30:4d:44:60:b5:d5:90:
         ca:60:7e:60:76:ec:1c:7f:1c:13:36:aa:98:9e:e2:3c:cb:1c:
         03:1e:a5:05:4b:b4:46:e8:25:de:11:34:b3:44:b5:ce:86:26:
         56:05:e1:2f:2d:a7:22:64:b0:a8:00:55:7b:83:a8:e6:a0:43:
         58:e5:c9:bb:a2:d5:ef:e6:33:ac:a0:cc:bf:6e:1a:ac:7a:9f:
         8b:65:8e:35:f5:f0:4f:77:24:be:42:ed:cc:5c:64:ad:ba:33:
         c3:cc:25:fa:b0:9b:15:ad:25:3c:33:0e:14:41:f8:c6:4a:d8:
         54:7f:f8:99:30:8c:27:61:ee:cb:d4:31:86:a3:14:45:94:b0:
         e2:39:68:a4:e4:08:c3:64:78:02:82:23:f1:7e:f3:5e:18:d0:
         6b:e5:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----