Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
File:                     43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft (raw, json)
Hash identifier:          frf0e9FiKoMRGDlaDOintWat5cXtu0imVAcia6WdA1g=
Subject key identifier:   E9:1A:F7:80:89:45:0B:B1:2F:3F:C4:0A:32:A3:59:57:6E:83:E9:7E
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       01C0BBF6B1172146C1653EEB900EED8EB934A143
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
Manifest number:          0254
Signing time:             Sun 20 Sep 2026 10:00:36 +0000
Manifest this update:     Sun 20 Sep 2026 09:55:36 +0000
Manifest next update:     Mon 21 Sep 2026 13:11:36 +0000
Files and hashes:         1: 326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (hash: 7Qg16d5UjzTvvA20LCq7XI+cnBk0NS7Bkp8lEpeT5dA=)
                          2: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: nRaKcC4NBPssuUcem1FRWt9qGZSz3sE+ddCblVRurE4=)
                          3: 326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (hash: Ezk7JvekJpBllIMGiUZhD2yWgfgrMyoba3291J4yaC0=)
                          4: 326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (hash: eEgD1JY9gwdzkIT57lXbNaxLJPj1ufaM3LPeXaUyO90=)
                          5: 326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (hash: o+dcrNBsYXmSDefpwXK+HK7lZ1WIDPpDgbyJMDtKajo=)
                          6: 326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (hash: INj8nHxwPeNXx6CCKg4RD0kbIAkx+NS6ZnTz4Rv1ZL4=)
                          7: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (hash: ZmoOnatwXAhq6piyjplbxrAgytF+z0nQC5FYO259tVE=)
                          8: 326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (hash: xyShU3gulnzZN0a+rYIvgWlDu10NqWQLZl3hBhUp4lA=)
                          9: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (hash: kSJzfBQsScaJvuw8WOhYZvNhcTU9pJ0mUl1g2IfLvlU=)
                          10: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: q4sePGUBif26NLO9p7MthrFRp2SCnu6Mkqd00SLrYGQ=)
                          11: 326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (hash: gCZsDOPFWI1uQJVT//rktnc/Seupe1OJvSVGAqffjUc=)
                          12: 326130353a646663313a313032383a3a2f34382d3438203d3e203534323138.roa (hash: Gz5zcQ21/RtVA+3C7EYaEpV7+GYbDoSvADgZOuLVKPk=)
                          13: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl (hash: 4u/TMG8wxN0zLlnqVGHd6q3agAAR/aiD07jPRENH2gI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c0:bb:f6:b1:17:21:46:c1:65:3e:eb:90:0e:ed:8e:b9:34:a1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Sep 20 09:55:36 2026 GMT
            Not After : Sep 21 13:11:36 2026 GMT
        Subject: CN=E91AF78089450BB12F3FC40A32A359576E83E97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:76:db:d0:a4:4b:6c:53:76:5f:97:ad:b4:
                    af:f5:ad:0c:26:a8:b9:5e:70:86:73:f5:88:e3:bb:
                    32:f9:c7:db:46:8c:93:a6:e9:3d:52:73:9a:1c:93:
                    2f:8f:cb:7f:ef:d9:32:7e:84:ca:4e:e5:7b:0b:9b:
                    d1:c8:22:9e:03:27:9f:5f:c3:5a:24:23:4e:35:da:
                    9f:75:3f:c8:6e:1a:1e:1d:90:b1:b5:98:d7:b5:80:
                    aa:41:79:3e:9c:4b:a4:d3:b1:8a:cf:2d:aa:2b:e4:
                    d8:c3:96:9c:5b:6a:a0:05:a3:9c:5b:df:31:3f:a3:
                    3d:fc:ed:bb:f4:6f:7f:10:9b:78:c3:49:a0:bb:21:
                    b9:b1:31:3f:11:a3:f3:09:4c:fd:42:ef:54:44:a7:
                    73:d2:b8:74:11:da:22:6b:45:af:cf:19:b5:ea:c1:
                    0a:48:e5:19:6f:ba:05:52:96:a0:60:a9:1e:38:65:
                    24:55:d1:d0:14:18:dd:96:b5:cf:1c:df:96:2e:e7:
                    07:c4:8b:31:9d:09:32:d7:d3:99:92:9f:61:b8:b9:
                    41:d4:fd:86:c7:25:3b:0e:94:3e:24:ad:1a:c0:ad:
                    c6:96:f4:17:6a:92:91:d6:57:22:e8:6c:ce:72:09:
                    e3:fb:54:07:04:5c:4c:be:82:6b:4c:d2:c6:07:ec:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1A:F7:80:89:45:0B:B1:2F:3F:C4:0A:32:A3:59:57:6E:83:E9:7E
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:69:0a:d6:c1:c9:3e:9d:b6:5a:59:bf:77:7f:d2:46:e4:19:
         50:42:30:3e:f4:7b:74:33:5f:53:ac:e1:05:0a:e5:88:c0:fe:
         a4:b0:30:85:39:93:08:35:5c:8f:a5:d9:14:a5:89:5b:de:8a:
         2f:9d:73:52:5f:cb:84:74:f9:4d:8a:eb:8f:87:98:6e:a6:9f:
         e6:e7:47:fd:56:46:98:03:8e:38:5b:b6:27:9e:66:fc:11:db:
         65:7f:f6:c8:c4:0c:5e:5d:42:c2:4c:ca:9d:c5:03:53:39:50:
         ab:d9:be:19:42:6e:71:c5:12:b2:10:6d:d8:b8:43:4a:62:3b:
         6f:41:5b:11:a7:f7:8c:56:d3:9d:41:0f:05:c6:b8:2d:97:bc:
         a8:4d:77:88:d0:c2:e8:34:2f:fe:bb:f3:98:5d:53:32:57:d2:
         90:91:a4:0d:75:79:25:f9:ea:f9:1d:9c:d0:27:1a:86:4f:5d:
         ad:14:07:49:41:c6:52:6c:a7:ee:d7:8d:8c:64:79:8f:60:c0:
         6c:b5:f5:e0:15:89:7b:f1:9e:bf:36:58:e5:09:04:bb:77:0b:
         40:ca:03:59:eb:84:be:4c:27:7d:ee:48:14:37:52:66:8b:12:
         d8:4b:32:c6:86:c4:77:a6:7b:1f:34:5e:be:fa:40:94:6f:cc:
         4d:d1:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----