Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft
File:                     21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft (raw, json)
Hash identifier:          ChZWqteWGkX1SJZuDMlqIbL3CtikuPRtrbaP7t602Gg=
Subject key identifier:   A0:C8:95:D4:73:D4:C3:85:80:06:14:2C:24:F1:E3:BE:18:50:CE:AD
Authority key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7
Certificate issuer:       /CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d
Certificate serial:       010D0C9F4328584BC2AB9224D31311BC09CECFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft
Manifest number:          010D0C9F4328584343DFB10F6A9373687E86D95E
Signing time:             Wed 05 Nov 2025 16:00:08 +0000
Manifest this update:     Wed 05 Nov 2025 16:00:08 +0000
Manifest next update:     Fri 07 Nov 2025 16:00:00 +0000
Files and hashes:         1: 21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl (hash: YQ3WJBzirERllkniZobhAp5/ZiW7jRUr6p1sRUC0bOI=)
                          2: 3af2b5bd-1917-3ba7-a4ab-74f6cf47d2fe.roa (hash: sj4lZ2cWdYxv3841IHf9zmPB3ECl9wsaHL5dCvi8JAQ=)
                          3: 7d38a0b0-ea61-304f-9083-015162f8c564.roa (hash: YuUaq6IBB5grh5IQFNn36bnGPzL7q/ZmaSPpo0frqTo=)
                          4: ad69f7e3-f238-33c0-a7af-142ecd7edee5.roa (hash: X+kjvNzTSwuNSOCPHNvcCwrzwr5m3K9pdS8LYx6WpEg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:ab:92:24:d3:13:11:bc:09:ce:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d
        Validity
            Not Before: Nov  5 16:00:08 2025 GMT
            Not After : Nov  7 16:00:00 2025 GMT
        Subject: CN=39f51b77-fe9c-43f3-bcce-bf8c806e639a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:f2:8e:e3:74:98:7c:4e:d2:62:97:85:6a:
                    72:6f:93:b2:39:45:35:e7:bf:50:a8:55:d4:65:c7:
                    7a:d9:0d:be:9b:34:55:25:35:5a:2c:cd:4a:a9:56:
                    9b:bc:b9:e3:00:5c:0c:20:86:09:e4:3d:50:34:d8:
                    9e:6d:d0:48:d9:f8:0c:51:c1:93:7f:88:02:e1:df:
                    5d:bd:7e:6d:5b:e0:38:e9:66:67:03:f3:6a:90:d8:
                    4d:a3:29:28:67:07:f7:a1:9e:19:e2:9c:3d:c6:08:
                    73:34:f6:1e:4c:e1:36:f4:4b:fb:4f:f4:11:1f:3d:
                    98:b7:4a:a3:f1:a9:9c:19:62:fe:41:f7:be:ae:9e:
                    ed:8c:38:61:3c:48:1f:aa:9a:25:a7:21:07:78:36:
                    aa:66:1c:df:b4:9e:5f:85:79:e1:e6:ed:47:99:54:
                    7e:e9:eb:e7:18:67:e6:10:e6:52:32:06:f3:9f:88:
                    5e:83:ab:c5:a5:c5:56:b4:0a:7c:29:ab:5c:39:25:
                    44:fe:64:01:e9:f5:a3:89:7b:49:d8:4a:01:73:c4:
                    50:2b:2c:54:0c:9a:80:f4:db:7b:59:43:e7:d4:36:
                    60:59:bc:e2:ef:c6:84:56:32:45:d3:72:8a:5d:16:
                    58:95:e7:65:1c:9b:c0:ff:e9:d3:15:61:9c:82:32:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:95:D4:73:D4:C3:85:80:06:14:2C:24:F1:E3:BE:18:50:CE:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.crl

            X509v3 Authority Key Identifier:
                keyid:AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:95:d0:29:1e:1b:16:50:08:f6:90:88:52:56:59:85:94:
         43:21:58:5a:bd:8e:84:c5:4e:c4:a4:38:a4:55:68:ed:79:fe:
         7a:90:64:45:eb:7a:91:d1:b8:0a:5a:be:b6:ee:9c:2a:f7:5b:
         c7:91:79:76:d9:47:b5:4e:d7:71:0a:63:21:34:b9:4d:d1:ce:
         02:ad:35:1e:4c:87:fb:ef:56:4b:8f:38:5d:3a:89:55:2b:b2:
         70:f9:1e:3b:2e:0f:f3:39:e9:36:d1:d2:27:35:e4:b5:38:78:
         0c:c4:e9:5e:48:d1:06:bc:20:ff:fc:0f:5f:bb:26:24:0a:f2:
         92:5f:55:d4:4a:7e:70:9e:c4:ab:f7:71:c9:62:83:10:75:89:
         d9:27:e9:55:2d:94:7e:38:d9:38:a6:2e:a6:db:14:35:2d:d0:
         92:49:16:73:1c:4b:6c:c2:b0:d0:32:35:a3:b9:51:43:81:07:
         b3:bb:5d:84:58:7e:cc:a7:27:8f:18:d9:d8:d0:02:53:eb:4a:
         6b:b6:b7:73:8b:c5:86:96:4a:82:d4:d8:16:00:25:27:2a:cf:
         63:03:35:0c:80:f6:f3:2f:16:bb:b0:7c:01:4f:3a:51:25:4f:
         79:4b:61:83:28:dd:27:72:4f:3e:04:02:7a:e2:1d:81:93:c8:
         6d:7f:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:23:15 2025 by rpki-client