Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
File:                     4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft (raw, json)
Hash identifier:          9DQ+6egexnEwgQew0OEKMdJGjZMlp00CEpmNPTFKAbs=
Subject key identifier:   3D:39:CC:EF:EC:A7:E7:08:7B:A8:BC:D5:CC:AB:57:FB:CF:44:18:AB
Authority key identifier: 4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8
Certificate issuer:       /CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
Certificate serial:       50F5D76C76B1E06D0C0277CF6157F87C76995F23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
Manifest number:          05
Signing time:             Tue 12 May 2026 08:44:01 +0000
Manifest this update:     Tue 12 May 2026 08:39:01 +0000
Manifest next update:     Wed 13 May 2026 12:28:01 +0000
Files and hashes:         1: AS401760.asa (hash: K++U+rZRj57xEHHqf+/EOKYn5SnBxRJBmTFFKjnswJA=)
                          2: 323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa (hash: 8cPnnYEXIJLCdlWfUy79K2LhqaM+LhE2rdws7KP1ppw=)
                          3: 32332e3134302e32302e302f32342d3234203d3e20343031373630.roa (hash: JYka4q/SpkE1ju1vuX7IkdbkGd8YfduInR5R6Pavz90=)
                          4: 4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl (hash: /J/t9O+VkYGCU9d6Lj35hSnBcEmQ/rE8J62kS1mlTlc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl
                          rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:d7:6c:76:b1:e0:6d:0c:02:77:cf:61:57:f8:7c:76:99:5f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
        Validity
            Not Before: May 12 08:39:01 2026 GMT
            Not After : May 13 12:28:01 2026 GMT
        Subject: CN=3D39CCEFECA7E7087BA8BCD5CCAB57FBCF4418AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:73:b2:80:f4:56:8b:ca:c9:72:3f:ea:24:
                    25:5b:5a:14:3d:be:bd:e7:ed:98:2a:e0:ed:04:d9:
                    42:81:14:5f:c8:2b:16:0f:26:39:ce:53:b3:37:4f:
                    a4:82:a2:a4:34:0a:4b:91:d5:00:59:b4:d3:02:49:
                    b8:dd:02:b1:93:93:5c:00:dd:18:a5:15:76:a6:5e:
                    aa:90:c1:80:a8:87:f6:ae:5a:5c:16:f6:81:0b:d6:
                    6a:9d:a1:a2:c0:92:61:0c:f6:3e:23:05:a7:66:29:
                    4f:c5:c5:c8:4e:f7:e7:3d:11:ab:b1:95:e4:93:df:
                    7c:a9:2d:0c:5d:17:e4:cb:3c:62:67:4d:21:25:f6:
                    af:76:f0:84:07:8e:10:f9:f2:ef:a8:6e:c2:a7:c4:
                    a1:32:38:f4:cf:b0:b4:c1:83:19:09:2e:6f:b6:30:
                    a6:12:51:72:69:43:42:a4:5c:70:57:aa:f9:24:bd:
                    b4:68:32:97:df:8c:4d:a6:81:c9:17:32:5f:0a:ec:
                    26:84:00:cf:4b:0b:5e:ce:8f:63:84:16:d7:56:27:
                    68:34:28:8b:dc:a7:4a:d4:e4:61:04:9a:d5:fb:47:
                    e1:5e:e7:b1:e6:13:46:88:74:66:e4:dd:f4:f7:b6:
                    f5:20:32:80:60:77:1f:0d:76:51:c6:1f:1f:00:99:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:39:CC:EF:EC:A7:E7:08:7B:A8:BC:D5:CC:AB:57:FB:CF:44:18:AB
            X509v3 Authority Key Identifier:
                keyid:4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:72:ea:4e:a7:23:ef:06:01:a5:9e:8c:93:d6:66:16:6f:34:
         48:da:ec:ad:1b:69:c3:13:d2:a1:c5:16:b0:9c:df:0d:7d:66:
         5e:00:e7:92:36:0f:9c:4d:63:a6:9e:3e:16:21:18:73:89:52:
         99:06:95:dd:60:1d:3c:35:e1:91:fb:8b:48:a3:80:e9:9f:01:
         1f:54:56:1c:57:7d:35:fa:dc:61:47:17:ad:bb:11:a1:d0:76:
         3f:d4:09:af:50:ec:d0:89:4c:e2:ed:68:98:21:2f:2d:6e:48:
         45:23:c3:69:45:35:ba:81:4b:e8:9d:64:f1:03:8d:fc:7e:f8:
         97:2a:46:a9:56:c4:de:bc:ae:2f:6b:94:a8:ca:a4:e9:fd:f9:
         02:9a:f5:ca:6f:01:c2:2d:5f:85:4a:60:04:f5:ee:71:e5:37:
         17:2f:90:c5:72:6f:23:9d:7f:5c:67:12:dc:cb:15:53:fc:61:
         12:cd:ba:89:6e:ee:6f:65:2c:fa:27:91:20:5a:58:21:7e:6a:
         2f:d8:a6:7d:22:59:f9:03:78:13:b7:49:c6:ca:b4:6f:69:1c:
         b2:6b:fe:17:31:ea:78:9e:ac:b4:df:78:98:25:01:65:d1:5f:
         d1:18:1d:df:6e:c7:a8:df:c6:12:c2:10:de:cf:63:6d:be:e2:
         86:f2:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:11 2026 by rpki-client