Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
File:                     1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft (raw, json)
Hash identifier:          5z56J51iLR0S2VNt7Uq+Sagu0kO32gizVsW3olWBUVQ=
Subject key identifier:   07:53:8A:1D:18:92:B5:08:38:30:06:8A:DB:B7:53:03:7D:03:93:B1
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584BBFA654C733D1316EFD703F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
Manifest number:          010D0C9F4328584073A8560D11F64EB5F74A5313
Signing time:             Tue 04 Nov 2025 14:02:08 +0000
Manifest this update:     Tue 04 Nov 2025 14:02:08 +0000
Manifest next update:     Thu 06 Nov 2025 13:00:00 +0000
Files and hashes:         1: 10029257-bda1-3754-b670-e0c603bafdfc.roa (hash: LwckHQz/5Ow0TLuYnSAX1uK7z8bTQQWh5KcXK3TJ3Gw=)
                          2: 1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl (hash: lKtRjVfdV7RuBLXLurakyXrPxShxYmkPMUBFdKMP1uo=)
                          3: 32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa (hash: 5kDBh4Y4Hj5ZkSVF8OCMVHyFy1OKLrNA8wKpAxGB0WY=)
                          4: 4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa (hash: 6y31zJVFqe6dUzivrtEE4qBDKsI69DLTZKQWV2zyMe8=)
                          5: 95288216-711e-31bc-8bb7-23252f7aee62.roa (hash: Pd6J1/Itg94KtyyIsCiLh4XYKo9CMwwP/dwabpOB4yI=)
                          6: a08ba1c9-38a7-31ad-a15e-0c70441029c0.roa (hash: mxFpclXeBPB0HEzVFVpqti78KNjf2KSb1+QvREXcMgg=)
                          7: b7751a83-4d77-3534-a692-22c9f15e2c5e.roa (hash: DOTdR1EtRrn+8CxUqT3aOrh/VeMt3yfHPb7V4+FVqls=)
                          8: cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa (hash: NmqWJvdIKEDC9V9gmt54hYlFJw+jRObrkGlMkqnBdZ8=)
                          9: de1bc31c-8942-32b8-94cf-739ae5317afb.roa (hash: Esns+LnI6/hccyhguM7vr1Q8A21NVte96OXj596QHEk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a6:54:c7:33:d1:31:6e:fd:70:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Nov  4 14:02:08 2025 GMT
            Not After : Nov  6 13:00:00 2025 GMT
        Subject: CN=a1d2debe-849e-4f3b-84ff-5f0f91559e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:d4:d8:3a:31:cc:61:07:47:34:f2:8b:b0:
                    35:d0:0e:d4:a0:e3:2b:f6:0a:b1:f0:84:43:9a:f1:
                    1e:c7:ea:de:71:51:65:63:09:ac:28:75:fc:20:ba:
                    d7:c7:a4:d4:f3:cc:3f:ca:54:b3:20:29:9d:c2:d0:
                    6c:e7:5e:69:fc:9e:14:2c:0a:18:cb:ab:d8:28:e6:
                    35:2d:ec:c0:74:d4:a2:06:5b:de:50:6a:48:c7:9d:
                    95:7c:50:e0:e5:7f:be:d6:98:78:8e:9c:54:a7:04:
                    40:04:f4:3e:d4:70:ad:a4:66:90:d4:fd:34:44:4e:
                    a3:d0:14:90:43:15:4c:f3:da:f6:b6:db:9f:4f:e6:
                    23:b2:06:6a:ab:de:ab:f6:23:16:cf:91:f2:54:b2:
                    ae:16:8e:2c:92:bb:01:5d:3d:5a:68:7a:30:d4:ef:
                    cb:96:bd:0b:84:cc:33:ea:d8:b5:0c:93:57:1f:df:
                    fd:b4:d4:a2:23:9a:4a:84:a9:4e:68:19:bf:8d:1f:
                    57:4e:4a:e6:34:13:98:98:00:3e:e8:c0:a6:13:00:
                    3c:4c:fe:7f:66:95:e4:61:e4:55:c2:63:63:53:a7:
                    86:75:df:30:a6:f7:76:cf:b4:db:92:dc:8d:56:c6:
                    20:98:6e:b3:ca:e9:e3:94:9f:15:71:70:9a:a2:51:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:8A:1D:18:92:B5:08:38:30:06:8A:DB:B7:53:03:7D:03:93:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:e0:6d:2c:32:90:24:4b:d9:d9:06:36:eb:9a:30:f5:ea:9c:
         5c:a9:ca:9d:ec:cd:8d:ab:29:ce:a1:92:a3:0c:9e:72:8d:32:
         c3:b8:87:b4:af:27:3b:81:22:0c:45:d8:48:68:99:61:5f:b6:
         bf:6d:7a:db:5d:67:84:57:bf:e0:45:2f:35:75:2c:e7:75:c6:
         2b:f6:56:42:65:2c:9a:02:9a:d0:ca:c4:c5:a1:b8:19:a9:a7:
         50:b5:de:99:d9:d5:54:3e:c9:49:d0:0a:d0:9b:d2:eb:17:b0:
         c4:c3:36:da:8c:d7:a2:12:8b:d4:b0:30:16:7e:a5:34:29:0b:
         1a:f0:db:dc:c9:97:39:2f:9b:20:6a:13:fc:fe:a7:d1:3f:8b:
         4b:9a:03:3b:c3:8c:ca:c4:49:32:bd:cb:25:d4:c5:d5:f3:37:
         ee:32:9e:4e:ae:4c:74:f0:33:26:5b:c1:0d:3f:33:03:1b:aa:
         77:45:50:3e:0d:56:fe:61:18:8d:e4:67:58:7f:c9:2d:d6:6c:
         6b:d5:c5:59:65:7d:f6:ff:ab:7e:35:16:61:e3:6c:94:1d:62:
         91:03:4e:af:fa:67:4b:64:49:74:19:cd:b6:e8:bd:51:f2:3b:
         fa:cd:3f:e8:c8:ee:8f:65:75:1b:58:0c:19:32:5c:8a:37:6a:
         2b:b0:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:36:45 2025 by rpki-client