Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
File:                     4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft (raw, json)
Hash identifier:          IWgrRiRMsilXwJIxnfMbgttDM5MUXJWeLh0VsRVslJo=
Subject key identifier:   12:27:74:52:B0:AE:2A:44:B9:F9:AA:4E:43:F9:EC:77:0E:C8:DC:2B
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F4328584BC16404513351088282E224A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
Manifest number:          010D0C9F4328584073A83F345BA4F4215AAAD788
Signing time:             Wed 05 Nov 2025 05:00:10 +0000
Manifest this update:     Wed 05 Nov 2025 05:00:10 +0000
Manifest next update:     Sat 08 Nov 2025 05:00:00 +0000
Files and hashes:         1: 249ec9c1-aae0-3b16-a897-6f80b435a876.roa (hash: I+zBAmBvqqvzFND55QbxIIIDX8ZTxxif4DSn35l09j0=)
                          2: 2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa (hash: ugkQUf4tMP52H6GW7UKm1JGaYfMGB4gPoaM37NGbNGQ=)
                          3: 37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa (hash: 8/d/nlaHb69YkCJtMO3ZjPDE9XHUvlhI4LBFgzay1cw=)
                          4: 4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl (hash: V1qb0+uGIPScsAbRK3TJgvuLiwpXb4AbDlXONcHZbYY=)
                          5: fbbccb53-1fb8-3043-81bc-0c04dc456033.roa (hash: E1htCgEXsTyTBnIrUIPQ8YDPWf48HQKhYyDByjNydM4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:64:04:51:33:51:08:82:82:e2:24:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Nov  5 05:00:10 2025 GMT
            Not After : Nov  8 05:00:00 2025 GMT
        Subject: CN=71ce849e-8e26-41dd-975e-103a86122754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2b:19:54:59:02:44:80:11:1e:10:05:6d:ed:
                    6a:66:1c:74:be:f2:61:24:b2:71:4f:4b:44:36:b9:
                    a6:73:47:70:6d:3e:f9:72:eb:d0:1b:6f:54:98:04:
                    75:cd:7d:8d:07:a3:cd:b5:ed:61:45:f9:af:22:c5:
                    15:da:c8:60:e7:9c:d9:fb:26:fc:26:57:da:ec:93:
                    69:09:df:1b:e2:c8:87:98:db:35:0b:27:b8:67:ef:
                    35:8b:61:51:78:18:6a:1e:e0:c8:4c:82:b9:60:2c:
                    91:5d:40:30:b3:40:fc:84:c5:c4:2b:af:68:1d:30:
                    a0:d3:d9:8a:ca:28:1d:96:0b:f6:2c:86:89:97:a5:
                    f6:74:b4:2e:60:6a:c8:7d:ee:f3:6a:a6:0a:60:aa:
                    70:b7:1b:74:0c:77:c2:55:28:d9:fc:d1:07:41:43:
                    57:d1:9e:35:57:c8:0e:05:e8:aa:24:74:f6:c7:6f:
                    92:7b:8f:ed:7b:f3:11:e3:2c:e6:07:35:7f:91:42:
                    62:f9:ba:3a:12:31:d4:59:a7:c6:05:61:b9:fc:8f:
                    28:16:56:f4:3e:46:9c:ae:da:c1:c6:19:fa:16:6e:
                    f3:7d:fe:16:52:66:82:be:a2:02:4f:ad:f0:85:af:
                    2a:94:11:92:7f:e6:db:62:5e:58:09:09:1e:be:f3:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:27:74:52:B0:AE:2A:44:B9:F9:AA:4E:43:F9:EC:77:0E:C8:DC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:19:f4:00:83:ea:f5:11:3c:83:7c:d8:bc:18:28:f1:8c:
         01:81:9c:4c:0a:d0:64:3d:9d:7c:e6:77:16:1a:41:bf:7b:de:
         a0:97:35:95:2a:93:e6:07:21:14:c7:23:1b:c6:bf:3b:54:52:
         f3:f7:ea:bc:e6:f8:ae:93:8f:33:b6:12:b9:7f:88:7a:ff:bb:
         d8:17:8d:fd:d1:1a:82:c1:9b:64:61:39:14:3b:34:4b:22:f9:
         c6:c1:d3:79:d4:a2:ea:ab:1e:7b:60:ba:e0:2d:84:a4:a9:98:
         eb:b5:27:73:70:2a:31:63:fe:6f:f3:3c:37:6f:f1:74:ad:cc:
         a8:39:d7:9e:3e:88:cd:77:52:dc:9f:85:56:df:56:70:e0:b9:
         ed:c8:21:9a:79:cd:45:28:68:81:5e:8c:db:2f:fc:d5:5a:9e:
         2f:a2:51:b7:22:da:99:51:1f:99:01:69:a2:da:4e:17:a7:9a:
         3a:00:35:be:e6:11:e2:d3:7a:7c:f3:6c:fe:41:72:18:b2:41:
         67:30:f1:d5:69:e2:ee:d3:50:d7:18:0b:48:d7:21:2f:2b:e3:
         67:8e:91:65:f8:e2:03:22:61:9b:97:02:2b:33:67:5a:67:73:
         8b:53:a4:2f:87:f0:a7:a8:b5:fc:37:75:bd:76:4a:a1:e6:68:
         9f:e1:d6:ed
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBZARRM1EIgoLiJKgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAxOGJmZTktNTY0My00ODhhLWE5Y2QtMzljYjc4Y2Fk
ZmExMB4XDTI1MTEwNTA1MDAxMFoXDTI1MTEwODA1MDAwMFowLzEtMCsGA1UEAxMk
NzFjZTg0OWUtOGUyNi00MWRkLTk3NWUtMTAzYTg2MTIyNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgysZVFkCRIARHhAFbe1qZhx0vvJhJLJxT0tE
Nrmmc0dwbT75cuvQG29UmAR1zX2NB6PNte1hRfmvIsUV2shg55zZ+yb8Jlfa7JNp
Cd8b4siHmNs1Cye4Z+81i2FReBhqHuDITIK5YCyRXUAws0D8hMXEK69oHTCg09mK
yigdlgv2LIaJl6X2dLQuYGrIfe7zaqYKYKpwtxt0DHfCVSjZ/NEHQUNX0Z41V8gO
BeiqJHT2x2+Se4/te/MR4yzmBzV/kUJi+bo6EjHUWafGBWG5/I8oFlb0PkacrtrB
xhn6Fm7zff4WUmaCvqICT63wha8qlBGSf+bbYl5YCQkevvPFkQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFBIndFKwripEufmqTkP57HcOyNwrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4
YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNiNzhjYWRmYTEvNDAxOGJmZTktNTY0My00
ODhhLWE5Y2QtMzljYjc4Y2FkZmExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAxOGJmZTktNTY0My00ODhhLWE5
Y2QtMzljYjc4Y2FkZmExLzQwMThiZmU5LTU2NDMtNDg4YS1hOWNkLTM5Y2I3OGNh
ZGZhMS5jcmwwHwYDVR0jBBgwFoAU92gYKDUvn3LcLDIzRMtSiNLHGm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNi
NzhjYWRmYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYzxn0AIPq9RE8g3zYvBgo
8YwBgZxMCtBkPZ185ncWGkG/e96glzWVKpPmByEUxyMbxr87VFLz9+q85viuk48z
thK5f4h6/7vYF4390RqCwZtkYTkUOzRLIvnGwdN51KLqqx57YLrgLYSkqZjrtSdz
cCoxY/5v8zw3b/F0rcyoOdeePojNd1Lcn4VW31Zw4LntyCGaec1FKGiBXozbL/zV
Wp4volG3ItqZUR+ZAWmi2k4Xp5o6ADW+5hHi03p882z+QXIYskFnMPHVaeLu01DX
GAtI1yEvK+NnjpFl+OIDImGblwIrM2daZ3OLU6Qvh/CnqLX8N3W9dkqh5mif4dbt
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:21:29 2025 by rpki-client