Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
File:                     d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft (raw, json)
Hash identifier:          GKqyZP4432/DxPOErzB0qiBBhPqu69IHrfVKViljmx0=
Subject key identifier:   E9:AD:2B:CB:2D:66:AC:3E:B1:AB:4B:D6:D6:3F:0F:6F:E5:89:21:D1
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F4328584ABF27AFEEA44E58E2F7B4B7D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
Manifest number:          010D0C9F4328584073A8202817D9E533F07E3F5D
Signing time:             Mon 04 Aug 2025 17:00:03 +0000
Manifest this update:     Mon 04 Aug 2025 17:00:03 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:00 +0000
Files and hashes:         1: 090ad2c8-45a9-398b-8ad5-38b3a912609f.roa (hash: v3hzV6ImGHMyC6UjCNVcMcHjeHDAckZGY5Pd62iP+Nw=)
                          2: 0c36fa28-8e19-3731-adab-dbaa5a6120c8.roa (hash: cPtd3OYFiBUixRJijEsEfusoTUxdrI9+kuW+RZj97+8=)
                          3: 2a3598a6-3c51-3995-b0a7-612073b7b44d.roa (hash: GwwqRygAj8bMcJHxlsGCOHCXPbSoy3mcLTGvKQbjv08=)
                          4: b55e8b3c-8a04-3164-9aa1-9ee277dc4c73.roa (hash: yWjt/yjflc1ud5ooBUyTdL4vf7eE3xZXFXZNvXIhgaY=)
                          5: d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl (hash: nK4khFQLyr7+1VjjLO1wDtzWjyAxVHA7QVcO//BtZPc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:27:af:ee:a4:4e:58:e2:f7:b4:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Aug  4 17:00:03 2025 GMT
            Not After : Aug  7 17:00:00 2025 GMT
        Subject: CN=3e0f903d-258c-4603-8543-7398d58e99c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:3a:c7:b4:00:d7:a6:f0:04:bb:bc:cc:ff:
                    47:80:8c:1f:ae:43:47:d0:51:e7:58:fa:25:c4:4c:
                    cc:e8:4a:48:66:6b:f5:35:38:54:8c:1e:46:ce:39:
                    98:32:e5:30:31:eb:b4:48:95:62:65:e9:24:99:82:
                    70:4a:8a:91:1a:a4:e1:d6:10:1a:db:f3:59:f1:c3:
                    6d:6b:23:18:0f:3f:1e:01:d9:d7:2c:b2:6e:0c:04:
                    4d:8a:6b:85:e5:b7:78:63:9a:5e:2d:a7:08:5a:b6:
                    a5:3d:5c:62:d1:d1:61:3a:e8:a0:e7:f6:5e:ac:55:
                    8c:f4:be:4e:50:ca:c2:a5:75:25:28:2b:13:46:0c:
                    24:d1:56:10:48:1b:f0:28:6f:42:88:6a:67:de:0d:
                    93:1a:ee:c4:18:0c:83:d2:dd:f0:59:6a:22:36:a8:
                    ad:4a:49:78:39:e0:84:28:22:0d:d6:c4:03:71:9f:
                    12:33:79:84:37:d8:df:75:37:a4:c2:8b:64:1f:97:
                    0d:a3:62:55:d5:4f:bc:bd:38:ef:c6:4d:5b:8a:1e:
                    52:c4:79:4b:fe:a5:9b:01:cd:56:0f:e0:44:fc:d8:
                    01:c9:cd:ff:8d:5e:d1:46:05:eb:8e:29:8d:c1:77:
                    7e:1e:f9:82:b0:e8:58:51:47:b5:73:cb:7f:2c:60:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:2B:CB:2D:66:AC:3E:B1:AB:4B:D6:D6:3F:0F:6F:E5:89:21:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fe:fd:94:3d:ba:d2:27:b2:49:ca:4e:5f:87:54:25:94:26:
         47:86:53:9c:76:44:01:96:d6:55:70:6c:b0:8e:ab:29:18:83:
         dc:73:fe:b2:9c:bc:63:6e:16:1d:4b:98:aa:40:ae:77:14:dc:
         09:a5:36:97:32:31:d1:5a:e6:6b:33:37:03:2c:b2:ec:bc:dc:
         6a:db:f2:9c:01:29:28:dc:79:45:e1:4a:44:f8:32:bc:01:6e:
         22:ca:3c:dd:d4:b7:39:9c:69:58:99:13:32:36:28:5d:24:55:
         60:7f:2a:1b:af:72:39:c3:93:f4:62:cb:3a:05:63:d9:12:bb:
         1f:19:d5:6b:c6:8f:38:60:65:8d:0b:91:13:dd:2a:d5:b6:07:
         74:0e:7f:92:4c:9d:dd:0c:45:d4:62:65:5f:98:0c:46:4d:5b:
         ac:c1:be:f8:a9:19:b2:ca:9d:09:3b:1d:05:4a:ee:37:83:e5:
         57:8f:cc:1f:c2:12:33:37:5c:e1:52:45:cc:6c:d7:1b:48:c6:
         2c:1e:8c:20:b9:ad:25:8f:3f:7f:60:de:6b:33:63:25:a3:0c:
         ee:f0:c1:db:89:5c:7f:41:40:ba:41:27:91:48:16:48:ee:80:
         06:73:87:86:61:38:ce:1a:08:df:20:4d:00:39:86:04:e1:9e:
         13:2b:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:50 2025 by rpki-client