Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft
File:                     52ef44c2-b190-4c91-a394-c8a96856e595.mft (raw, json)
Hash identifier:          hOPa7xmiH3AofZo5KKa00XRgONa4x5H5LY+pVFU1GNI=
Subject key identifier:   BD:54:D2:75:73:DB:C7:83:3F:D8:45:87:0B:86:4D:0F:3B:5F:74:F5
Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A
Certificate issuer:       /CN=52ef44c2-b190-4c91-a394-c8a96856e595
Certificate serial:       010D0C9F4328584BC03A29C02A60266E3BA2C540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft
Manifest number:          010D0C9F43285840B715B61DE80684C5BD28DBC2
Signing time:             Tue 04 Nov 2025 19:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:03 +0000
Manifest next update:     Fri 07 Nov 2025 19:00:00 +0000
Files and hashes:         1: 388ce95a-0e5d-339d-b810-cf59b1b00d6d.roa (hash: Vj8LGlIYSQuo1ApdfDnLwLUxOtzLgB/3tdv+1DscPjQ=)
                          2: 52ef44c2-b190-4c91-a394-c8a96856e595.crl (hash: nbOJbeuY5iSmuua96/dOudgV5Z/AsDvzgFx1z+J8uL8=)
                          3: 809f7e04-e2b2-3be1-adc7-5bcc6f27a7bc.roa (hash: wMrL8LUaii6R4c8zC46cJj5oyQ5ft35at0IKRpvJMmA=)
                          4: b98046e9-e215-3beb-b627-8d082108f26e.roa (hash: NYvdbel2TRN6it1AZ1vC0JkPhGNG+Yhof5PE9JPp+9E=)
                          5: edbaea99-aa77-370f-b495-b6afb9512a4c.roa (hash: fQFsjhpUzyDK7vK4BoCSmx2MZ2s0W5PhA6qJLIx4NjQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c0:3a:29:c0:2a:60:26:6e:3b:a2:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595
        Validity
            Not Before: Nov  4 19:00:03 2025 GMT
            Not After : Nov  7 19:00:00 2025 GMT
        Subject: CN=54fa445f-6fdf-4cb8-9565-05f011c9c494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:90:ba:3d:05:3c:bf:65:95:49:78:d7:61:
                    84:88:84:e5:e6:c2:f6:39:98:02:87:b6:b4:c8:4c:
                    57:b3:1c:1e:e0:50:9b:fe:10:88:24:48:6f:d5:d0:
                    82:c7:69:85:c2:40:60:a2:89:ea:67:6b:f7:22:73:
                    63:8d:b4:ba:f6:ac:ff:ee:02:8f:5b:a5:c3:c2:c8:
                    2f:6f:30:03:89:9d:2d:ae:d6:3b:df:f1:e7:f1:b3:
                    49:96:de:10:28:a0:65:b7:57:16:4f:80:56:36:32:
                    ca:1a:82:4b:69:91:ce:e3:34:7d:dd:16:53:bd:45:
                    af:56:d6:8d:ec:5b:ac:00:e2:38:77:d1:55:cc:4a:
                    3b:11:a6:54:81:39:d1:40:18:89:90:46:e3:8d:56:
                    07:b9:63:c5:26:24:f2:19:e4:7d:91:fd:54:52:5e:
                    12:1a:62:b7:0c:a6:a4:20:6e:c1:48:ec:ba:d1:b5:
                    c7:8f:11:fd:5d:5d:e6:95:89:42:d1:9a:a8:bf:ae:
                    f6:1f:ea:b7:25:1b:73:40:14:20:e2:b4:c1:d5:73:
                    3e:f7:a4:8e:e9:36:53:bc:40:9d:2b:70:86:a6:a6:
                    de:c3:1e:be:7f:65:8e:ae:d5:55:e2:c7:07:cd:a8:
                    ba:3a:f7:35:c3:90:6b:07:41:07:80:b9:54:90:a2:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:54:D2:75:73:DB:C7:83:3F:D8:45:87:0B:86:4D:0F:3B:5F:74:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl

            X509v3 Authority Key Identifier:
                keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:68:68:0d:a8:f5:8d:91:43:e7:c1:df:c5:f8:9c:17:8e:
         66:29:f1:f9:d2:05:e3:bd:fb:8a:8a:09:33:9d:34:63:e6:51:
         7f:49:d2:0d:84:b7:54:ab:82:f4:e7:b5:9a:c5:fd:f0:4e:76:
         2d:11:b5:03:06:f0:fd:19:c9:50:d3:18:0f:a1:2c:04:4e:63:
         12:41:01:1f:b7:a2:b3:54:0a:86:f1:b3:e1:16:4f:14:7a:40:
         24:ac:98:50:53:8c:bd:53:7f:f0:5b:35:ca:1f:91:be:ff:d4:
         bb:70:c9:9e:d2:98:24:c1:04:a8:df:39:cf:0c:8a:77:3d:9f:
         39:19:86:92:0f:72:c1:78:64:39:e4:d2:09:9e:6e:99:3c:34:
         81:77:d0:01:aa:57:4b:b4:a0:65:d5:36:88:3f:b3:6f:23:7b:
         74:1c:23:50:d4:a6:d3:07:c1:9d:bf:65:4b:e7:b2:c2:0b:8c:
         1a:ff:51:34:d4:bb:97:40:1c:9c:cf:3b:6e:a2:51:8f:ef:35:
         77:03:b3:6e:46:d6:1e:61:76:b6:2d:f3:0c:e4:c0:6a:74:57:
         49:a5:b1:a6:80:b7:21:64:cc:7c:d9:c1:9f:2c:53:59:0a:1b:
         ac:0b:f3:70:04:a7:a0:80:11:ba:b0:aa:78:36:60:66:1b:eb:
         4b:b5:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:33 2025 by rpki-client