Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
File:                     bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft (raw, json)
Hash identifier:          hTu7Lg6l8vV5dRY6iOzVqOV/VGZLIqLsH+PJ2BxdcmI=
Subject key identifier:   AA:C4:F8:E7:92:59:11:B1:FA:CC:10:96:92:9F:70:7C:4C:BC:4E:CD
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Certificate issuer:       /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial:       010D0C9F4328584A331B5BF927AED22075AD9400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
Manifest number:          010D0C9F43285842ED8224AF59A78D58A1C61A2E
Signing time:             Sun 15 Jun 2025 13:02:03 +0000
Manifest this update:     Sun 15 Jun 2025 13:02:03 +0000
Manifest next update:     Tue 17 Jun 2025 17:00:00 +0000
Files and hashes:         1: 41f9aae5-6871-3e7a-9d20-457a9775f125.roa (hash: uePefL5QyV4T9ehz8W8bobyLJbkJyo4uiLZtZyB3cYc=)
                          2: 8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa (hash: vFO/QS13UpnlRIXt/nlsUupsRNhadQMGvMYFessPxT0=)
                          3: 95607831-8fd4-3725-bb6b-01dee3e9b844.roa (hash: aT9TCKkO1+9xgRLswzO0Aw3rIzBUKpYJ1wOyoM0v6cQ=)
                          4: bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl (hash: rR9Lk8vzmo6FwPtEoZvNV2NXDVcOpya8pLfCPnNCWkM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:5b:f9:27:ae:d2:20:75:ad:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
        Validity
            Not Before: Jun 15 13:02:03 2025 GMT
            Not After : Jun 17 17:00:00 2025 GMT
        Subject: CN=965ddbde-d674-4059-a0bb-e1c888381db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:bc:8c:40:c3:ed:c0:e0:1b:33:93:4c:d6:
                    c2:54:67:19:04:29:7f:d5:42:13:13:f0:6c:2f:d2:
                    02:be:c1:74:d6:30:5d:4f:ff:0f:e1:39:c4:70:7d:
                    b1:9b:a4:d8:a4:af:ea:2f:43:3c:27:d5:a1:cb:ef:
                    2b:b0:fd:07:d9:a4:4a:1f:49:fd:8d:32:ec:0a:e5:
                    91:62:6e:b9:78:d0:db:2f:40:6d:ec:dc:99:d5:e9:
                    c1:c1:75:45:79:75:91:b6:c3:b7:18:41:70:b6:e2:
                    74:f3:b2:be:bb:64:b6:fc:14:32:1e:f4:85:d8:28:
                    a6:71:a9:e3:a5:54:e1:67:b2:b7:38:b5:7b:ff:c2:
                    81:3e:b9:9f:66:1f:e2:bd:ba:a5:0f:97:0a:2e:1b:
                    4e:60:d5:f0:9c:ce:e1:9a:01:31:19:50:64:7a:fd:
                    00:d4:52:18:38:f4:1c:fa:2c:e8:c4:71:ce:3f:28:
                    78:d0:7b:52:09:7c:f3:64:0c:9e:eb:02:c9:a9:72:
                    e5:5c:ac:e9:de:6a:59:f2:60:d2:19:46:ff:8f:64:
                    75:5f:53:cc:98:6a:fb:75:a5:3f:94:c7:51:65:87:
                    b1:c6:a1:f2:c5:bb:5d:e3:61:28:0b:8c:c4:33:96:
                    a7:b4:9c:3a:cc:46:29:59:73:40:f4:2e:8e:58:23:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C4:F8:E7:92:59:11:B1:FA:CC:10:96:92:9F:70:7C:4C:BC:4E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl

            X509v3 Authority Key Identifier:
                keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e6:be:15:a8:3d:da:98:b3:bc:15:fe:47:b5:f4:c6:a2:09:
         fc:a4:bd:50:e8:86:3a:ef:95:e8:f9:79:37:ce:b6:d8:59:01:
         86:7f:ee:4c:5f:b9:a2:3b:f7:45:ae:3d:84:02:a3:6d:df:f1:
         6d:8d:9a:26:af:19:20:97:72:26:a7:27:75:a5:4f:f7:ad:06:
         0d:a5:26:f0:86:31:e3:cc:39:b4:c7:f9:77:82:e6:3f:a5:43:
         1c:26:5e:e0:01:b9:83:8f:5d:8b:f8:02:a6:d1:b6:a5:07:28:
         63:23:70:38:dd:69:b1:1e:2d:03:80:73:ea:f8:a0:d5:d9:36:
         c2:d3:81:8b:a2:a0:7d:07:7f:0b:0e:2b:ea:08:f7:b9:e0:bd:
         99:2c:c5:f2:b9:8c:6e:65:cd:60:37:99:f0:af:f5:30:7b:58:
         3d:76:aa:f1:ec:59:e2:02:96:62:2b:72:76:eb:ae:75:69:0a:
         fb:e2:21:30:5b:1c:48:7d:d7:c3:96:86:a8:81:c5:8a:44:ac:
         18:b9:02:df:d0:0f:6b:a7:9f:91:ac:74:65:b1:8c:2a:fd:6e:
         42:88:1c:6c:14:38:09:b2:5a:a0:22:7a:4a:f2:8f:e6:b3:2f:
         9b:39:9c:5b:0b:ee:c4:15:be:0a:8a:c8:b4:d8:e1:0d:08:30:
         b5:5e:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:18 2025 by rpki-client