Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
File:                     B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft (raw, json)
Hash identifier:          +PzGnk0wDZZjqyRwcg1Wy7jAlUxobi80rLNcsQJS1IU=
Subject key identifier:   8C:7C:B5:C5:70:EF:07:FA:C1:AF:37:AA:99:DB:F2:82:BF:C1:E3:86
Authority key identifier: B9:36:4E:55:E8:3F:FE:7E:EE:FE:63:56:E9:FE:B6:3C:3B:36:61:E7
Certificate issuer:       /CN=b9364e55e83ffe7eeefe6356e9feb63c3b3661e7
Certificate serial:       14AFE6E2E2B7EFDA414589C691F90E0CD43C7611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
Manifest number:          01B9
Signing time:             Mon 10 Nov 2025 22:26:41 +0000
Manifest this update:     Mon 10 Nov 2025 22:21:41 +0000
Manifest next update:     Wed 12 Nov 2025 02:20:41 +0000
Files and hashes:         1: B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl (hash: ff/NIlsCzFM0z3bh3Im5o3TXKJ4jxzSW6//EOzfUH0Q=)
                          2: AS214495.asa (hash: 5/ypWwzVGgEmi/zBGtQqDvKO/2oEMx4cvCD7/1YE/9g=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 02:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:af:e6:e2:e2:b7:ef:da:41:45:89:c6:91:f9:0e:0c:d4:3c:76:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9364e55e83ffe7eeefe6356e9feb63c3b3661e7
        Validity
            Not Before: Nov 10 22:21:41 2025 GMT
            Not After : Nov 12 02:20:41 2025 GMT
        Subject: CN=8C7CB5C570EF07FAC1AF37AA99DBF282BFC1E386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:94:a9:33:ca:97:db:ed:af:12:bf:da:50:
                    a8:14:8c:aa:d8:db:41:58:26:ff:70:87:5c:02:37:
                    c4:b3:f1:37:f4:00:e1:ef:7c:e3:c8:47:eb:ef:97:
                    4c:2d:ec:fb:16:0d:4e:81:bf:a0:4a:3d:b2:b3:43:
                    54:75:0b:37:4b:55:c3:b5:eb:10:63:0b:05:2d:4e:
                    a4:92:43:fc:68:b2:72:2c:53:58:57:8e:c7:13:ab:
                    62:5d:f5:45:d0:2a:c0:85:cf:a2:d5:4f:bf:73:35:
                    83:e5:02:3c:e4:e0:34:8e:55:dc:db:23:fe:f5:16:
                    27:b4:5f:bd:29:22:ce:f4:7f:60:b5:3a:e2:8b:d5:
                    be:1b:83:ab:f5:7c:c9:d7:99:94:d2:d6:b9:71:bc:
                    43:20:44:a3:1a:8a:f4:55:d1:bc:f3:22:9e:3c:c1:
                    b2:91:7d:ae:01:8c:2b:d7:9e:05:0d:6f:c6:66:89:
                    dd:e3:d6:26:35:60:1b:2e:1b:f2:fe:1b:db:ff:3a:
                    00:33:59:50:f4:79:af:43:a7:5a:76:6f:8c:64:51:
                    b0:19:9e:84:ba:dd:00:74:2c:6b:ad:1d:fd:2d:c1:
                    73:31:12:2b:00:f8:b3:8e:77:5b:4a:3f:91:7d:9f:
                    dc:67:41:05:78:e7:70:45:58:31:33:37:b6:05:02:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7C:B5:C5:70:EF:07:FA:C1:AF:37:AA:99:DB:F2:82:BF:C1:E3:86
            X509v3 Authority Key Identifier:
                keyid:B9:36:4E:55:E8:3F:FE:7E:EE:FE:63:56:E9:FE:B6:3C:3B:36:61:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTZOVeg__n7u_mNW6f62PDs2Yec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/1/B9364E55E83FFE7EEEFE6356E9FEB63C3B3661E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:33:2e:30:76:24:1b:28:c5:1c:99:9b:4f:e6:d2:1c:3a:
         4b:b3:78:90:05:ea:ed:87:9e:bb:bc:41:44:a5:7d:23:0b:b1:
         37:86:0a:ee:8d:16:ad:61:06:a9:8e:cf:15:05:3d:5d:a5:25:
         c0:45:84:83:7d:20:2f:db:eb:b9:df:d2:d8:1c:3a:b7:e6:b9:
         1e:0a:17:e9:52:3c:8d:22:eb:99:dc:c5:36:04:d7:78:a0:5a:
         74:04:8e:01:5e:5e:59:cf:eb:b5:93:ba:f5:e9:72:5d:8f:fa:
         dd:2c:85:52:a8:cf:5b:22:fe:6c:f3:64:2d:63:94:e5:ad:e0:
         ca:b5:20:7f:14:45:bd:ea:89:74:40:b9:ed:cb:10:bd:f9:2d:
         fb:e3:92:e6:49:34:3e:c3:44:63:57:90:6f:09:65:be:44:d6:
         70:2d:07:2a:da:83:14:5c:ae:e2:92:90:34:09:4f:55:ec:88:
         a3:53:70:e1:96:62:36:a6:7e:ed:c9:67:f2:b6:9d:bc:69:27:
         1c:d7:6f:d7:24:b2:19:9e:ac:65:80:3d:a9:ca:79:86:3e:e1:
         8d:5c:e2:7a:ab:48:d8:95:92:31:07:74:e6:1b:48:0c:18:a2:
         b9:7c:9f:05:40:df:98:a7:44:75:3f:87:5c:25:83:c7:aa:ae:
         93:b5:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:42 2025 by rpki-client