Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
File:                     B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft (raw, json)
Hash identifier:          F4wqzsX+2ZElDKC8GaOhf4lQiHyVTQFZmjsciIKTE94=
Subject key identifier:   53:00:57:BE:98:E9:A4:16:7D:88:EB:22:08:63:56:20:63:1D:51:F9
Authority key identifier: B9:36:4E:55:E8:3F:FE:7E:EE:FE:63:56:E9:FE:B6:3C:3B:36:61:E7
Certificate issuer:       /CN=b9364e55e83ffe7eeefe6356e9feb63c3b3661e7
Certificate serial:       24425495CD9C4F65EA1C7FFAA42BB09847DF1E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
Manifest number:          0102
Signing time:             Sat 28 Jun 2025 11:26:45 +0000
Manifest this update:     Sat 28 Jun 2025 11:21:45 +0000
Manifest next update:     Sun 29 Jun 2025 14:17:45 +0000
Files and hashes:         1: B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl (hash: OLcVMfmGShlFou3jAr56InG8GTKmvWSumcMrNh4wZNc=)
                          2: AS214495.asa (hash: 5/ypWwzVGgEmi/zBGtQqDvKO/2oEMx4cvCD7/1YE/9g=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:54:95:cd:9c:4f:65:ea:1c:7f:fa:a4:2b:b0:98:47:df:1e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9364e55e83ffe7eeefe6356e9feb63c3b3661e7
        Validity
            Not Before: Jun 28 11:21:45 2025 GMT
            Not After : Jun 29 14:17:45 2025 GMT
        Subject: CN=530057BE98E9A4167D88EB2208635620631D51F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:a7:e6:08:be:17:68:ce:21:8f:9d:c3:67:
                    8f:67:66:d6:dc:b8:32:57:70:30:56:1c:7c:3d:b7:
                    34:e5:3d:27:54:f6:c7:1d:71:09:e0:31:a8:5a:91:
                    4a:9f:a0:7c:79:76:ad:f4:3e:3b:06:c4:47:e4:97:
                    bb:cb:b7:8f:53:65:60:98:79:b7:7c:54:52:2b:ed:
                    98:5e:e0:c3:8e:98:20:98:5b:a9:c1:4d:b1:40:59:
                    7a:08:09:2a:8c:ae:84:92:27:f6:fa:dc:14:a0:a1:
                    d9:79:ee:5f:7a:2f:a2:83:a0:6e:9b:bf:93:cb:b3:
                    81:ed:da:67:ce:d9:1a:fc:ff:d2:0b:de:ce:09:0e:
                    ed:f0:58:66:fb:e3:0d:d0:79:a2:f9:c6:29:ea:2d:
                    35:bf:41:9e:6f:b2:54:4f:91:01:41:bc:5f:1e:c1:
                    92:90:4f:05:10:fa:34:23:2a:22:a8:3c:7a:6d:54:
                    6f:95:02:0b:3d:af:a4:29:c2:c4:e3:47:7b:6b:7f:
                    9e:f6:e8:f6:8f:87:29:5a:d9:2e:c2:1c:19:35:24:
                    9b:5d:fd:7b:63:54:d0:5b:a2:aa:4e:90:c4:07:b3:
                    3f:a9:aa:51:11:29:e6:20:8f:40:bf:0e:49:02:49:
                    2e:4a:e9:f2:0c:94:9f:f0:b6:ec:69:df:cb:d2:5a:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:00:57:BE:98:E9:A4:16:7D:88:EB:22:08:63:56:20:63:1D:51:F9
            X509v3 Authority Key Identifier:
                keyid:B9:36:4E:55:E8:3F:FE:7E:EE:FE:63:56:E9:FE:B6:3C:3B:36:61:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:07:e0:f2:a0:4e:41:7a:2b:89:f3:e1:82:a0:23:cd:c6:
         0a:de:29:53:7c:85:df:5a:ca:b8:47:91:41:5a:8b:62:de:a7:
         23:73:3c:4b:76:1c:60:a2:55:0c:9b:cd:f5:70:e1:aa:16:13:
         de:09:19:cd:d5:80:71:e9:7e:ac:c5:dd:d5:6f:92:88:86:9f:
         30:38:c0:e6:16:4c:2e:4d:8e:71:ee:af:e4:7a:8a:53:7c:cd:
         93:01:27:dd:e4:20:18:94:43:54:13:0c:c3:a4:06:36:b6:18:
         2e:0f:a9:9e:75:11:de:21:78:b5:1a:6b:ea:07:b2:ee:fc:ff:
         d9:6c:31:6f:df:47:6e:6a:df:2f:83:a4:af:07:0f:42:03:a6:
         7d:5b:79:95:ae:13:21:7b:c9:8f:7b:0d:f3:35:34:b8:53:66:
         06:e1:97:cd:5d:d9:d2:45:a1:f2:7e:3a:30:27:28:65:38:25:
         d2:c4:3c:8c:a6:7a:0e:aa:b7:11:32:8c:89:d6:95:a0:b9:0a:
         5f:48:ad:5a:1d:f0:da:34:05:5c:34:ae:97:b3:07:07:36:2f:
         b8:07:a0:5e:7d:c4:2a:de:a7:1c:98:c0:80:7c:ae:9e:47:0c:
         bc:60:ae:c3:54:7a:e3:63:23:cb:3c:f9:71:ee:a5:03:7a:43:
         fb:dc:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:35 2025 by rpki-client