Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
File:                     28168b94-cad8-4dae-a00d-057ac35417a3.mft (raw, json)
Hash identifier:          5bK/YNOIxffuHXImEs+i2rNEmDm5XFUODrQN/XYslN4=
Subject key identifier:   25:DC:BC:49:F4:C3:86:61:D5:C7:F6:D9:D2:7E:4E:53:F9:B2:8B:BE
Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
Certificate issuer:       /CN=28168b94-cad8-4dae-a00d-057ac35417a3
Certificate serial:       010D0C9F4328584BBF106423C0CF513486837840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
Manifest number:          010D0C9F4328584073A84AF6A0544A9F4F7A36ED
Signing time:             Tue 04 Nov 2025 09:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:03 +0000
Manifest next update:     Thu 06 Nov 2025 09:00:00 +0000
Files and hashes:         1: 28168b94-cad8-4dae-a00d-057ac35417a3.crl (hash: d7/lhjFhPp2pBcpSUVD//OtEuDve4R2aZJbGCYvm48Y=)
                          2: 49085c64-f3ef-35b0-8fbf-8ca6b36b4df0.roa (hash: XHVJiJb2Oib1OHD5i6edMA33I3qc1BYblTKfgOViXNo=)
                          3: 59ba3509-76c2-3b16-9160-b70599626c49.roa (hash: 1Tv+M9KeJHEJSK5NxJnMc1tCsC4UpTV2CBmdUDbV8x8=)
                          4: b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa (hash: JHLWSHUuxPvXiaTUNF780TXEbJU6nPpIc7qj58v7U7w=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:10:64:23:c0:cf:51:34:86:83:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3
        Validity
            Not Before: Nov  4 09:00:03 2025 GMT
            Not After : Nov  6 09:00:00 2025 GMT
        Subject: CN=ff85b723-7152-4400-a999-caeea776dda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:f5:53:70:59:7d:fe:e0:61:cb:00:f4:94:
                    0c:e9:28:36:f6:f5:3b:52:30:8d:af:33:f8:4b:de:
                    3b:9a:13:31:d6:74:13:89:d1:e6:17:b0:57:e1:de:
                    50:97:30:d5:07:8e:40:38:93:8c:d5:30:cb:d8:43:
                    da:7c:3c:6d:bf:4b:ed:0b:92:1e:50:ba:97:2c:76:
                    a0:da:b2:72:ff:3f:7a:44:55:1c:b4:27:cf:6c:eb:
                    55:56:bf:a6:84:0b:d1:16:23:fc:7f:08:13:e0:ac:
                    5a:c8:ff:24:7a:36:b0:41:a8:3c:b5:bc:d9:f8:7f:
                    67:ca:f0:e3:c8:9d:5d:19:e8:ac:9f:ce:9a:e4:e4:
                    92:5f:0f:01:61:40:ad:8a:88:5e:e5:79:91:aa:dc:
                    fe:0a:6e:55:34:92:64:62:be:2c:bf:16:34:2f:f5:
                    a6:8d:fd:f9:24:7e:79:9f:5b:8e:cb:a5:9c:60:a8:
                    47:c7:d9:bd:ed:a1:c8:51:d7:89:50:8b:b4:78:f0:
                    f5:6b:86:d2:34:c0:d5:23:54:8d:f1:ca:49:ed:60:
                    7b:2a:2f:41:7e:32:89:be:dd:c3:52:5b:08:db:11:
                    0e:d7:de:6f:e5:08:ca:02:a9:75:13:05:2c:0d:ec:
                    87:21:cd:8a:22:83:ff:b8:a0:b1:5f:98:d2:8f:c8:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:BC:49:F4:C3:86:61:D5:C7:F6:D9:D2:7E:4E:53:F9:B2:8B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl

            X509v3 Authority Key Identifier:
                keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:c9:45:b3:33:08:0d:ef:e6:fd:25:a1:b0:d0:2b:a4:fc:
         a7:16:51:d0:5f:e5:da:c0:9c:9d:e0:14:e0:c0:1e:0e:63:37:
         50:57:14:7c:41:87:e0:81:5a:99:ba:d2:6a:da:d3:fa:98:f4:
         a2:cc:8b:b1:e8:45:21:1a:65:8d:a1:53:9e:df:2d:ec:bc:56:
         91:02:5c:e1:ee:9c:22:51:7b:ba:34:a2:c3:c0:cc:c6:b4:51:
         cb:49:d5:ef:2c:57:c9:ba:30:1a:81:cb:aa:96:ab:fd:42:51:
         5f:05:62:b1:80:e2:a4:f8:30:4f:0d:55:53:c4:05:26:62:3d:
         53:38:31:42:48:d0:78:9c:a1:7c:5e:0a:72:58:7a:ca:1f:ff:
         18:47:40:a8:61:85:a2:3e:74:06:3a:ca:7b:e6:88:e1:98:96:
         d4:b4:32:74:c6:f4:78:db:b5:b6:74:25:9f:4f:fb:2b:88:78:
         9d:d6:65:7a:0d:54:44:22:95:1f:12:56:59:1c:16:68:ea:11:
         a6:eb:fd:a3:10:db:52:9e:4d:f4:ff:03:d1:7d:38:25:20:8b:
         7b:4b:6c:37:43:9f:74:34:09:28:11:e7:60:8a:86:bd:50:af:
         44:64:e9:77:c3:85:25:c9:cd:e0:74:87:45:8a:20:b4:17:67:
         5c:3d:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:45:54 2025 by rpki-client