Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
File:                     5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft (raw, json)
Hash identifier:          PENF2j9k9ij+adBrezRq1GuKXGiHRxDKcYM4b0PYipA=
Subject key identifier:   3B:36:7E:2E:1A:9F:EC:49:3E:3B:27:0A:D1:86:3F:9E:23:04:73:17
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Certificate issuer:       /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial:       010D0C9F4328584BC01C62E3650FE7BCBE90C880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
Manifest number:          010D0C9F432858430F2F06B7719E44923FB01CFB
Signing time:             Tue 04 Nov 2025 18:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:03 +0000
Manifest next update:     Thu 06 Nov 2025 18:00:00 +0000
Files and hashes:         1: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (hash: bpOoPGSapgoN7fK3cWBCHVKvTXuXmavX/WiU9WXKfbU=)
                          2: 5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl (hash: gzxH+gE+/eg9TEzYJItaV5vtOJjiMs0lhisMhoL1Q1E=)
                          3: 62c49f59-b1a7-3fbc-94cf-246143f8fbdb.roa (hash: USVF7VW24dJDpa8Ty7lSCM5fa1FnVk1PJFSLycQWbLs=)
                          4: d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (hash: mUA6MrAmBUPwTx5wjrJaFYpwottnek13I15rYQUzK8A=)
                          5: f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (hash: 38+uHtgwckP5wro4+RnNaiuIOt57jQV1pPV6BqO7BIA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c0:1c:62:e3:65:0f:e7:bc:be:90:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
        Validity
            Not Before: Nov  4 18:00:03 2025 GMT
            Not After : Nov  6 18:00:00 2025 GMT
        Subject: CN=edf95953-5cc7-42d9-893b-b54a25886baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:64:17:57:01:02:ab:03:67:08:f6:d5:dc:
                    d9:40:ca:ce:66:2f:97:09:4e:32:cf:e7:83:b8:77:
                    5b:1d:d6:b5:69:a7:d4:fd:59:ce:5c:4b:4d:10:40:
                    f6:bc:19:33:4f:94:da:0c:f7:b8:c6:75:97:7f:2f:
                    98:42:ac:a3:b1:03:3a:a9:db:84:e1:bb:57:05:45:
                    c3:17:6e:80:9f:1b:22:f3:9a:98:fe:b8:e9:1b:ad:
                    19:3b:dc:8d:32:24:61:84:91:07:3d:81:83:73:21:
                    9e:d7:d1:a6:34:27:f3:73:32:94:a3:1d:e3:6b:dc:
                    50:68:37:c3:87:bf:0a:6e:fb:71:d6:51:1b:98:b5:
                    a7:16:25:e2:6b:d0:ac:ed:37:4c:f3:92:44:5c:25:
                    1a:5d:ad:ae:cb:c6:d6:57:f0:10:3a:60:4f:59:48:
                    82:14:41:40:21:cc:24:5b:83:dc:02:6a:b4:87:3a:
                    1b:ec:5b:d0:13:ed:55:a8:12:b8:d4:8c:a3:03:1c:
                    a5:b7:52:33:a9:93:62:a7:0e:a1:cc:36:d2:c1:9f:
                    51:59:69:ab:47:fc:4d:64:20:88:9e:32:41:e0:b9:
                    49:78:47:aa:b8:ac:22:a6:f4:14:01:99:5d:63:5d:
                    aa:8e:75:09:c3:ad:72:6b:4a:10:e8:ae:1a:ab:a2:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:36:7E:2E:1A:9F:EC:49:3E:3B:27:0A:D1:86:3F:9E:23:04:73:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl

            X509v3 Authority Key Identifier:
                keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:59:c7:ab:f9:42:d5:54:f3:55:7b:46:f8:44:a7:01:05:b5:
         0a:e5:69:52:75:b4:d3:d6:5f:a8:91:a2:8e:fb:f6:8d:b8:d2:
         e7:1e:48:51:3f:7c:6e:46:56:ac:3a:8f:2e:01:50:40:86:f7:
         f6:d0:74:30:63:d3:5f:33:84:03:b6:73:b0:b9:bf:f8:4a:9e:
         ab:f7:d4:50:a9:b3:6e:ab:4a:84:21:bd:34:bd:c6:01:c0:5c:
         d6:56:21:73:f7:73:e9:68:c7:b6:0c:4e:24:38:a2:67:fe:0e:
         42:52:4e:1e:a2:82:ff:f0:0f:d3:34:1c:8d:9f:a4:b5:2d:a7:
         65:00:8e:f8:b8:ad:da:23:2e:ce:55:39:b5:b6:bd:c0:d7:8d:
         86:6c:66:aa:49:b3:e4:47:2d:85:a0:24:a8:c3:a2:c6:35:c4:
         0e:d9:4a:10:84:0d:0c:d3:d5:1e:c0:b8:e1:7d:4c:6e:09:7f:
         8c:61:fa:93:29:ea:43:fe:1e:40:0d:70:cd:1c:a5:34:46:fa:
         cf:35:c7:98:24:7a:a3:44:87:32:d6:d8:45:a3:57:53:88:66:
         aa:4b:9d:ce:1e:23:3c:2d:7e:f5:45:7c:d4:ba:cb:cf:40:50:
         59:ab:6b:d3:f0:26:51:e7:51:96:fe:72:b1:d8:c6:c9:6f:91:
         aa:af:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:47 2025 by rpki-client