$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft File: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json) Hash identifier: BdU23+qgqKXYqJT9uNFF/SisD5c+fwZ3/bbCWOXHCi4= Subject key identifier: 84:13:8B:B2:FF:B6:8F:33:54:EA:CD:D4:B1:14:4A:96:CF:1F:45:CF Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE Certificate issuer: /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe Certificate serial: 646859E896070BE39B60447B2B3E8A24DDC8D511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft Manifest number: CA Signing time: Fri 01 Aug 2025 21:28:02 +0000 Manifest this update: Fri 01 Aug 2025 21:23:02 +0000 Manifest next update: Sat 02 Aug 2025 23:41:02 +0000 Files and hashes: 1: 3139352e3133372e3235322e302f32342d3234203d3e20323136313338.roa (hash: vEIuj42KJ0Qp5JHCx13Q/KJM4vmrtpJ4xdh8fMGXb6U=) 2: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (hash: 6Nbavc8JB81EZ5PdDQdVGn6cq8HL5cS0r2vLSX9cTDY=) 3: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: md/+wqbJ3H+kkEZwDt/4Y8xfAoML1rGfQ9Cm9/0s+PE=) 4: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: uKRPUqqicJN3XHijdSfKGJofrRQbdbdWzvpKwXcKuu8=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 Aug 2025 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:68:59:e8:96:07:0b:e3:9b:60:44:7b:2b:3e:8a:24:dd:c8:d5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe Validity Not Before: Aug 1 21:23:02 2025 GMT Not After : Aug 2 23:41:02 2025 GMT Subject: CN=84138BB2FFB68F3354EACDD4B1144A96CF1F45CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:7d:d9:22:82:9d:20:0b:e4:2b:6c:0c:e2: 59:b1:44:29:da:32:31:f3:97:ce:d1:c9:bd:ce:12: 9d:40:8e:c1:fb:20:b3:d6:69:a5:a4:b7:32:81:8b: 3d:4e:c9:cc:34:7e:2d:98:ac:6f:8e:e3:2b:fb:a0: 39:2e:8b:40:3f:e1:c0:83:fa:64:66:99:d4:36:3b: 4b:f7:a2:43:cd:a0:d2:4e:b9:1b:13:29:44:2a:e6: 75:c3:b6:1a:1b:f7:62:ac:48:7e:53:ee:cf:b0:82: 1b:1b:6c:b2:aa:97:a6:37:d0:85:e7:38:9a:da:33: 29:0a:e0:c5:f1:4d:af:43:8d:8b:9b:e5:3e:d2:38: 83:ab:0d:85:1c:0d:6d:b3:be:45:4b:8e:34:4a:89: 71:91:1a:30:1f:6c:aa:49:f9:3c:53:1e:12:b2:f3: 2f:e1:4d:a4:3a:1d:41:14:37:b5:db:10:0b:97:80: 75:68:a7:7c:76:3a:8d:bd:5b:fa:4c:27:ed:5f:a0: 33:bc:81:4c:60:fd:4e:5d:e2:54:87:d9:c6:3a:32: 19:6e:cd:e4:54:b0:df:75:14:83:d4:6b:3d:7f:ab: 3e:39:35:2a:2a:38:20:7c:bc:a0:ab:96:d2:7c:5d: 3e:4d:96:e5:db:b4:80:a9:f7:30:90:78:fd:4d:2c: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:13:8B:B2:FF:B6:8F:33:54:EA:CD:D4:B1:14:4A:96:CF:1F:45:CF X509v3 Authority Key Identifier: keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5a:e9:d4:c0:c2:a2:fb:37:de:0b:d1:ea:2e:cc:ed:f6:fc: 1f:5b:47:de:a1:6a:6d:dd:15:2f:15:01:81:68:87:a9:82:ea: 51:f0:6e:39:9b:6e:79:b8:cd:75:d1:a2:e8:9b:34:88:8c:90: ae:9d:d7:9c:2a:c2:d7:45:3f:1b:e0:55:18:3b:fc:30:75:f6: d3:50:a5:eb:9f:52:d6:92:88:53:d2:01:f7:c6:2f:08:1c:97: 42:da:5c:09:cb:cd:95:14:97:1c:5a:77:0f:39:ce:e1:8a:4c: ec:65:73:10:2d:b0:df:b2:4d:5c:6a:c7:2e:38:5c:1b:24:7a: 54:a3:d4:45:90:c8:11:66:61:36:f1:47:32:38:fe:4b:4b:4a: 85:a1:a8:63:bc:8d:da:a4:c3:73:78:4b:6a:5b:40:42:3f:8e: b2:d2:3f:68:f6:d7:da:05:87:c4:f4:28:4f:90:26:75:9b:18: 2c:fa:c3:a4:9b:cc:ad:66:0b:86:4b:cb:72:5d:f9:09:00:a9: b1:a2:fd:62:7d:0b:6a:c8:76:8e:ad:d3:e3:ec:ed:3f:9b:21: c7:a1:ac:ea:8d:3f:42:ed:01:ef:34:12:f7:28:b4:34:6d:da: 9e:b2:f2:5e:fd:c5:10:65:2c:65:94:da:c8:61:58:7a:80:28: 86:df:b2:21 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUZGhZ6JYHC+ObYER7Kz6KJN3I1REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdiMWZiMTgzOWE0MTRmMmJiYWFmYmUwZWZjZDBmMjAy YmNmNzRmZTAeFw0yNTA4MDEyMTIzMDJaFw0yNTA4MDIyMzQxMDJaMDMxMTAvBgNV BAMTKDg0MTM4QkIyRkZCNjhGMzM1NEVBQ0RENEIxMTQ0QTk2Q0YxRjQ1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9iX3ZIoKdIAvkK2wM4lmxRCna MjHzl87Ryb3OEp1AjsH7ILPWaaWktzKBiz1Oycw0fi2YrG+O4yv7oDkui0A/4cCD +mRmmdQ2O0v3okPNoNJOuRsTKUQq5nXDthob92KsSH5T7s+wghsbbLKql6Y30IXn OJraMykK4MXxTa9DjYub5T7SOIOrDYUcDW2zvkVLjjRKiXGRGjAfbKpJ+TxTHhKy 8y/hTaQ6HUEUN7XbEAuXgHVop3x2Oo29W/pMJ+1foDO8gUxg/U5d4lSH2cY6Mhlu zeRUsN91FIPUaz1/qz45NSoqOCB8vKCrltJ8XT5NluXbtICp9zCQeP1NLGZPAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUhBOLsv+2jzNU6s3UsRRKls8fRc8wHwYDVR0j BBgwFoAUB7H7GDmkFPK7qvvg780PICvPdP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMS8wN0IxRkIxODM5 QTQxNEYyQkJBQUZCRTBFRkNEMEYyMDJCQ0Y3NEZFLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvQjdIN0dEbWtGUEs3cXZ2Zzc4MFBJQ3ZQZFA0LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv MS8wN0IxRkIxODM5QTQxNEYyQkJBQUZCRTBFRkNEMEYyMDJCQ0Y3NEZFLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEARVrp1MDCovs33gvR6i7M7fb8H1tH3qFqbd0VLxUBgWiHqYLqUfBuOZtu ebjNddGi6Js0iIyQrp3XnCrC10U/G+BVGDv8MHX201Cl659S1pKIU9IB98YvCByX QtpcCcvNlRSXHFp3DznO4YpM7GVzEC2w37JNXGrHLjhcGyR6VKPURZDIEWZhNvFH Mjj+S0tKhaGoY7yN2qTDc3hLaltAQj+OstI/aPbX2gWHxPQoT5AmdZsYLPrDpJvM rWYLhkvLcl35CQCpsaL9Yn0Lash2jq3T4+ztP5shx6Gs6o0/Qu0B7zQS9yi0NG3a nrLyXv3FEGUsZZTayGFYeoAoht+yIQ== -----END CERTIFICATE-----Generated at Sat Aug 2 06:45:50 2025 by rpki-client