Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
File:                     a2235d90-d905-4ef7-9447-870904044658.mft (raw, json)
Hash identifier:          lEa/OknaNSKcXzP6zuyeFSYwqvpBi8WxPVaYkOigUcQ=
Subject key identifier:   81:87:10:79:BB:5E:A1:97:D2:4B:77:67:45:74:54:0D:6A:C2:50:CE
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Certificate issuer:       /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial:       010D0C9F4328584BC23468949F1165C1F9CF2200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
Manifest number:          010D0C9F43285842A45A7069EEA6084843DC8A71
Signing time:             Wed 05 Nov 2025 12:00:03 +0000
Manifest this update:     Wed 05 Nov 2025 12:00:03 +0000
Manifest next update:     Sat 08 Nov 2025 12:00:00 +0000
Files and hashes:         1: 08d9d418-eca8-3d3e-837a-6480ce768ba2.roa (hash: Qi6XKl8yipd/0gTSTojGCwsqIz4rrgq3yOOuT+CvwcA=)
                          2: 11d908fc-bc25-34ad-bf81-bad94a354c28.roa (hash: QBLjR8azKmdbM9igoWSOk0rq1xvdFrzFJ7BqZM4SGvg=)
                          3: 29a80573-100a-3a8b-bb64-eb056360a689.roa (hash: JBtWgPPQyKrOlpzF7E+H2heCvzwDbpENj7HdqI55oOc=)
                          4: 58f01d29-71ed-3347-877b-62b78dca6289.roa (hash: 9IrvTjGnV+CAdaepd1TNkk+ct1Hnr8GF378IGyh/5dc=)
                          5: a2235d90-d905-4ef7-9447-870904044658.crl (hash: O1VdQlSiDJWnf0br/UZh5YXI9O4YeVG9vOhA4IX8tYg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:34:68:94:9f:11:65:c1:f9:cf:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
        Validity
            Not Before: Nov  5 12:00:03 2025 GMT
            Not After : Nov  8 12:00:00 2025 GMT
        Subject: CN=6727c935-1a07-4a30-acfc-d81db1732564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:4e:a3:dc:b4:30:24:c4:24:27:2b:c9:f3:
                    7e:1f:45:e5:08:5c:c4:ad:81:b7:f0:2d:a8:e8:d5:
                    e1:1a:c1:8c:d3:1d:d3:83:70:27:80:db:cf:a9:a9:
                    64:af:e9:81:43:6d:6a:3d:df:03:9c:b8:28:46:fa:
                    3a:fb:0d:92:7f:97:5f:98:ea:60:c8:ce:33:73:9a:
                    c6:63:0e:a8:34:18:f0:42:fd:c4:b0:cc:46:60:31:
                    7c:02:39:a6:e6:72:b9:87:dd:11:d2:a9:07:6d:de:
                    a8:ca:45:3d:80:0d:16:80:36:d1:4d:49:56:ce:c5:
                    68:2b:d7:0a:b7:77:55:13:45:6c:a1:93:31:b6:57:
                    ca:45:4d:75:c9:dc:e6:b0:9b:16:66:90:25:d4:fb:
                    eb:c3:6a:41:05:95:1a:b1:53:c9:be:4d:27:cc:0d:
                    70:5e:62:b7:95:0b:7d:a2:21:97:d3:d5:d4:27:16:
                    e0:39:15:e4:04:e7:95:70:96:ef:f6:07:82:68:47:
                    31:60:ab:fa:0d:8c:c7:58:4d:3a:12:55:17:c1:d9:
                    c3:7d:c3:3e:30:fd:29:2c:a3:70:0b:18:4b:ef:41:
                    c1:35:49:98:80:22:a2:94:a4:88:d9:cd:37:45:b2:
                    ec:ea:e8:14:76:37:65:a4:67:f4:da:c8:f6:b1:35:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:87:10:79:BB:5E:A1:97:D2:4B:77:67:45:74:54:0D:6A:C2:50:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl

            X509v3 Authority Key Identifier:
                keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:78:13:af:a0:91:7d:9f:fb:34:6a:42:f4:50:91:7e:c7:6f:
         ac:59:82:7c:60:1b:85:dc:2b:5a:e9:d2:c2:db:35:8e:2f:47:
         44:df:97:0c:59:33:bb:7e:d8:01:e7:48:e6:11:c0:2a:51:1e:
         55:cd:2d:48:4b:53:32:c2:c6:b2:f6:d3:a4:48:2a:f6:d5:e4:
         6b:61:ed:c8:db:0e:c9:a5:d0:66:74:a7:f6:a5:7f:e4:5e:58:
         25:c4:f4:a0:be:0d:38:67:53:4f:0f:49:29:17:3d:6a:8c:7a:
         8c:a6:a9:91:ee:d7:a8:57:04:e3:5f:79:0c:db:a3:2f:f7:b8:
         96:c1:4e:4a:7e:06:5c:5d:e1:bf:70:4d:e6:5e:cc:2c:6f:7b:
         fa:ac:51:2e:d2:36:2a:4b:5a:0f:fc:94:c7:97:8a:2a:aa:86:
         da:06:33:74:16:97:b7:98:a9:25:de:4f:71:74:f1:32:77:87:
         6a:a6:a3:4e:3e:7f:40:74:21:c3:43:a7:17:1d:da:29:2b:d7:
         31:70:5e:bc:0b:9e:52:c7:bc:74:cb:ed:1b:0e:7a:d3:d1:bb:
         a6:49:cf:ca:d9:1f:42:f2:26:09:e3:24:e7:9f:4a:80:99:f6:
         e2:7a:09:80:8a:83:05:d2:05:7d:87:21:43:0b:1e:59:7f:a5:
         8d:1c:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:43 2025 by rpki-client