Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
File:                     2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft (raw, json)
Hash identifier:          iXwgD0kuZsJDNMhi5bL5hGoXjNwLFcMnll10Brh8jWg=
Subject key identifier:   8B:9A:58:19:EB:A7:E5:F0:9A:C6:94:70:6B:B1:3E:70:09:F9:78:DB
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F4328584BC01C6691918B54CE21DFFC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
Manifest number:          010D0C9F4328584073A81C9F4F6AE300898F4511
Signing time:             Tue 04 Nov 2025 18:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:03 +0000
Manifest next update:     Fri 07 Nov 2025 18:00:00 +0000
Files and hashes:         1: 06aa229e-21d5-3132-8604-c88f6941821b.roa (hash: J1lb8j+h5bCBxQ1T5K7LUj4DfvQUmRzrDsVRBS3wU+c=)
                          2: 2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl (hash: H2rRXdk5chCAPW5IDhM+kW7fRHXt/FqFJcO9eIp0eYI=)
                          3: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (hash: bg3189z/EYzL5D7RJ3SUjWsFldBj38tRULcD1wuB7hs=)
                          4: 6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (hash: rmnrH0kg3j8AKachKOzv+hbobvnV464ClagjwVDLyII=)
                          5: 638c64fe-64fb-347f-be0f-66a64d56454e.roa (hash: TAcb8PzFzLNADJKnm2xE5rWQVUIzotoxdiAQEemmvss=)
                          6: 6aaf0b5d-0ce4-34be-91b8-468066365036.roa (hash: Ah0knKDiPy3zWWhUv2+LHLz/wgNUMLOw6mGjgGfwF+c=)
                          7: 944447fb-baad-3395-926c-c3422f01b462.roa (hash: SwOQp+y43TY2lENerity/uSx0Yg1s3pByquQ9lhqFe8=)
                          8: a4696e90-da7b-3ac8-b1cf-2351e43df747.roa (hash: RQpbq4g0eucLPbDK/UlJzlS0HTwDjUCLooTVcoexkAQ=)
                          9: a7244564-9404-3b6d-a87c-23f016c7e4c6.roa (hash: hUXYwIX6t5yj6JPBDCPcSNrgrGfwLQeuZlmM51X3OkY=)
                          10: a943a62e-8af4-3728-ac21-db958b531f7a.roa (hash: Iz4B6BGamI5A/V0j0dPNYjooh6yFCEXGVt0P9fr16FI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c0:1c:66:91:91:8b:54:ce:21:df:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Nov  4 18:00:03 2025 GMT
            Not After : Nov  7 18:00:00 2025 GMT
        Subject: CN=bfc8a896-6782-469c-a9d1-dc463a1c1303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:2d:49:4e:db:d7:99:99:c6:02:e6:04:b2:
                    60:61:ee:87:65:14:dd:c2:9f:eb:2d:2d:0a:32:c4:
                    e1:4c:01:c2:41:20:25:1b:8a:71:8d:13:4d:81:7d:
                    db:6e:34:08:1d:97:88:35:d0:2c:46:e5:df:f3:db:
                    3e:00:64:3e:ec:d2:10:02:d6:83:a8:2b:0c:0b:81:
                    d3:d4:ef:ad:89:5d:52:8d:25:2c:74:d6:19:5b:b9:
                    15:63:29:df:47:2a:a9:f9:aa:ac:e2:59:66:fe:1f:
                    ca:9b:a5:de:7e:48:b2:67:fe:fd:45:a4:14:65:f5:
                    e5:bd:d7:b0:fc:cf:76:e3:01:a6:b2:de:e7:ef:cb:
                    51:b3:f0:13:a1:35:1c:19:54:fa:cd:48:d9:b2:bb:
                    dc:49:90:a6:21:88:45:b1:78:34:73:2f:b3:43:43:
                    14:48:1f:1e:4d:56:64:5e:24:78:3d:28:41:9a:bb:
                    c4:8b:ec:cb:5f:0b:9d:c8:8c:a9:35:88:f0:64:ba:
                    3f:50:cf:fc:ae:a7:0e:84:dc:0a:b8:a8:04:2e:b4:
                    55:f1:27:0c:c8:a5:57:86:4f:71:a1:eb:54:74:c7:
                    80:3f:a4:31:8e:33:cc:f4:f1:5a:3a:0e:da:76:15:
                    43:7a:aa:cc:e5:af:d7:e4:a7:d8:15:cd:00:13:4a:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9A:58:19:EB:A7:E5:F0:9A:C6:94:70:6B:B1:3E:70:09:F9:78:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:3d:01:1d:62:7e:13:10:ff:70:81:d6:7a:b2:7e:9a:80:
         55:01:d1:d0:c2:e8:b6:4a:67:aa:f8:e8:f6:11:35:3a:5d:39:
         cf:31:69:1f:ef:94:f2:13:ab:a6:49:f5:1d:8f:67:65:59:3b:
         b2:4a:05:a9:9a:d5:27:56:1a:54:7b:7d:29:12:57:e1:2d:63:
         23:b1:84:d0:8d:b5:35:3f:bc:54:29:99:58:ef:56:17:c8:a7:
         f1:06:ea:94:e8:82:12:71:11:37:6c:4f:46:90:24:24:f6:bf:
         bb:b5:0c:6f:3c:22:f6:93:db:37:f2:ca:23:7f:7b:bc:d8:d7:
         fa:e2:38:22:9c:e4:53:c1:3d:b4:70:ec:ef:e7:06:ea:98:93:
         29:16:c6:42:0b:27:2d:5e:12:bf:de:bc:37:ca:b2:8f:6e:e3:
         92:68:8a:5f:eb:93:60:da:70:53:79:a6:10:01:81:27:d7:30:
         9e:6f:a9:46:53:e6:ba:ca:53:56:16:9e:ad:e3:1a:6f:86:f6:
         71:7b:3d:83:c1:f9:44:56:db:ab:c5:63:39:17:03:ce:2a:e4:
         3d:d4:34:d2:ea:cf:09:84:1d:3f:76:24:dd:91:a5:16:42:02:
         01:ae:ac:e4:77:e2:6f:8c:9c:d5:71:94:18:54:84:7f:69:de:
         90:7e:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:43:58 2025 by rpki-client