$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft File: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json) Hash identifier: aHaoWCQPu6H5OysTDvTnTsXbHP4kGwFlwuknHlh+Y0o= Subject key identifier: 67:38:6B:E2:76:D2:53:41:6C:2D:C8:67:0D:40:B0:C7:ED:92:E7:5F Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE Certificate issuer: /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe Certificate serial: 39170C55633F7EE79520B6581F91DDBF03F0DEC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft Manifest number: 0148 Signing time: Mon 03 Nov 2025 21:18:46 +0000 Manifest this update: Mon 03 Nov 2025 21:13:46 +0000 Manifest next update: Tue 04 Nov 2025 23:23:46 +0000 Files and hashes: 1: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: XPih6YZnBDQuLPXp/EQcJ79Subfh/HHHeNzD3NmYavg=) 2: 3139352e3133372e3235322e302f32342d3234203d3e20323136313338.roa (hash: vEIuj42KJ0Qp5JHCx13Q/KJM4vmrtpJ4xdh8fMGXb6U=) 3: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (hash: 6Nbavc8JB81EZ5PdDQdVGn6cq8HL5cS0r2vLSX9cTDY=) 4: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: md/+wqbJ3H+kkEZwDt/4Y8xfAoML1rGfQ9Cm9/0s+PE=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 23:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:17:0c:55:63:3f:7e:e7:95:20:b6:58:1f:91:dd:bf:03:f0:de:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe Validity Not Before: Nov 3 21:13:46 2025 GMT Not After : Nov 4 23:23:46 2025 GMT Subject: CN=67386BE276D253416C2DC8670D40B0C7ED92E75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:1b:fd:2a:28:3b:35:be:4b:85:a4:ec:cb: f6:92:bf:f9:56:96:60:80:79:67:dd:e5:a2:05:8c: 4a:43:53:58:18:1c:b6:a2:35:31:42:a0:51:01:7b: 00:cf:c5:bf:6e:66:f1:a0:33:1d:c1:b9:b2:a0:c7: aa:dc:0e:a2:4a:4f:0b:9d:ec:e3:87:da:92:13:72: 4d:08:35:a7:d3:99:2a:13:ae:c8:1e:fd:be:7a:07: a3:70:29:e1:24:4d:ef:ee:b6:6c:e4:5d:cf:28:8b: fe:f0:90:58:a1:96:f9:49:e2:13:bf:e6:75:28:bd: 30:ab:fc:10:be:8a:bd:94:3c:97:58:e8:07:7b:2e: be:2c:d3:e1:1d:2f:22:ac:fc:97:b3:3b:31:1c:ac: 6f:58:8f:39:73:66:83:80:6f:fe:1f:7b:5a:67:24: 06:b5:ff:2b:7c:4f:32:d9:8b:07:bf:93:53:9d:9f: b2:a2:cf:95:97:b5:42:7f:f7:48:a2:da:29:c4:29: 65:a0:c2:e7:40:b4:83:99:fd:f8:17:54:27:1b:bd: 74:8b:02:40:27:3a:a7:e9:95:1d:cd:68:1f:c2:b5: ba:40:bc:d8:78:99:83:70:be:f9:b5:b3:ff:be:ba: 5e:1b:61:82:bf:68:a1:b9:47:de:56:22:89:03:0a: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:6B:E2:76:D2:53:41:6C:2D:C8:67:0D:40:B0:C7:ED:92:E7:5F X509v3 Authority Key Identifier: keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f6:1e:66:5e:29:f0:66:75:88:76:e2:ef:5b:df:09:96:95: 1f:b2:49:42:5e:39:05:ab:1f:fc:b6:ea:57:cc:72:c1:6f:7d: 35:45:60:53:16:45:8c:a7:2e:ed:e4:11:ab:4f:b6:1d:e6:40: 28:bb:8b:b7:91:2e:cf:63:b5:48:90:d9:85:c2:3e:2d:f8:0a: 93:9d:5a:71:88:5a:97:a5:12:2f:d1:ec:fa:0b:c4:22:a6:0e: 37:06:26:47:58:d1:6b:f0:0d:c0:1d:72:57:5e:e5:35:24:05: a5:fd:38:f9:9c:c0:9c:f0:7a:f9:9b:5b:0e:ba:58:75:07:8e: f2:8c:20:4b:26:50:3c:9b:f3:23:07:9e:f2:24:b3:93:ee:af: 52:80:3c:b2:16:fc:8e:15:51:1d:cf:dc:20:28:41:e7:c7:08: 05:d8:96:cf:2d:69:05:43:a4:64:d6:eb:de:c9:95:bc:66:80: 27:0a:b1:25:16:38:e0:db:a6:f3:07:35:5f:75:48:99:d5:d1: 77:db:3f:7b:c0:42:b5:95:d5:96:ab:e3:ff:d0:d4:53:f7:d3: 55:2f:d0:84:2a:77:63:08:9c:7a:27:28:f7:8a:3d:3f:ca:5a: e8:2b:0d:24:04:e6:72:81:9c:72:bf:a5:41:ad:6a:83:a3:64: 20:c1:04:86 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUORcMVWM/fueVILZYH5HdvwPw3sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdiMWZiMTgzOWE0MTRmMmJiYWFmYmUwZWZjZDBmMjAy YmNmNzRmZTAeFw0yNTExMDMyMTEzNDZaFw0yNTExMDQyMzIzNDZaMDMxMTAvBgNV BAMTKDY3Mzg2QkUyNzZEMjUzNDE2QzJEQzg2NzBENDBCMEM3RUQ5MkU3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL1Bv9Kig7Nb5LhaTsy/aSv/lW lmCAeWfd5aIFjEpDU1gYHLaiNTFCoFEBewDPxb9uZvGgMx3BubKgx6rcDqJKTwud 7OOH2pITck0INafTmSoTrsge/b56B6NwKeEkTe/utmzkXc8oi/7wkFihlvlJ4hO/ 5nUovTCr/BC+ir2UPJdY6Ad7Lr4s0+EdLyKs/JezOzEcrG9YjzlzZoOAb/4fe1pn JAa1/yt8TzLZiwe/k1Odn7Kiz5WXtUJ/90ii2inEKWWgwudAtIOZ/fgXVCcbvXSL AkAnOqfplR3NaB/CtbpAvNh4mYNwvvm1s/++ul4bYYK/aKG5R95WIokDCvm7AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUZzhr4nbSU0FsLchnDUCwx+2S518wHwYDVR0j BBgwFoAUB7H7GDmkFPK7qvvg780PICvPdP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMS8wN0IxRkIxODM5 QTQxNEYyQkJBQUZCRTBFRkNEMEYyMDJCQ0Y3NEZFLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvQjdIN0dEbWtGUEs3cXZ2Zzc4MFBJQ3ZQZFA0LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv MS8wN0IxRkIxODM5QTQxNEYyQkJBQUZCRTBFRkNEMEYyMDJCQ0Y3NEZFLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAj/YeZl4p8GZ1iHbi71vfCZaVH7JJQl45Basf/LbqV8xywW99NUVgUxZF jKcu7eQRq0+2HeZAKLuLt5Euz2O1SJDZhcI+LfgKk51acYhal6USL9Hs+gvEIqYO NwYmR1jRa/ANwB1yV17lNSQFpf04+ZzAnPB6+ZtbDrpYdQeO8owgSyZQPJvzIwee 8iSzk+6vUoA8shb8jhVRHc/cIChB58cIBdiWzy1pBUOkZNbr3smVvGaAJwqxJRY4 4Num8wc1X3VImdXRd9s/e8BCtZXVlqvj/9DUU/fTVS/QhCp3Ywiceico94o9P8pa 6CsNJATmcoGccr+lQa1qg6NkIMEEhg== -----END CERTIFICATE-----Generated at Tue Nov 4 13:50:21 2025 by rpki-client