Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
File:                     4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft (raw, json)
Hash identifier:          zvE5eLz6UFNC8nZUCGCOQJI3mUymlKrOOvaDKZnx5Xc=
Subject key identifier:   B7:DB:53:6E:44:8D:FD:B6:FE:64:F9:53:37:E7:7A:04:82:4E:5D:20
Authority key identifier: 4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8
Certificate issuer:       /CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
Certificate serial:       71AFC19D19C37481EF7922D70D5648803A5103EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
Manifest number:          B9
Signing time:             Wed 23 Sep 2026 09:01:44 +0000
Manifest this update:     Wed 23 Sep 2026 08:56:44 +0000
Manifest next update:     Thu 24 Sep 2026 09:17:44 +0000
Files and hashes:         1: 32332e3134302e32302e302f32342d3234203d3e20343031373630.roa (hash: JYka4q/SpkE1ju1vuX7IkdbkGd8YfduInR5R6Pavz90=)
                          2: AS401760.asa (hash: K++U+rZRj57xEHHqf+/EOKYn5SnBxRJBmTFFKjnswJA=)
                          3: 323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa (hash: 8cPnnYEXIJLCdlWfUy79K2LhqaM+LhE2rdws7KP1ppw=)
                          4: 4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl (hash: XtmVr0QgM4yYHwrFAKwGDSPogsmlVGF7gfxD9h556wY=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl
                          rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:af:c1:9d:19:c3:74:81:ef:79:22:d7:0d:56:48:80:3a:51:03:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
        Validity
            Not Before: Sep 23 08:56:44 2026 GMT
            Not After : Sep 24 09:17:44 2026 GMT
        Subject: CN=B7DB536E448DFDB6FE64F95337E77A04824E5D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:32:f3:d9:60:09:ca:e9:d1:6f:cf:e2:ba:
                    18:2f:5e:ac:15:d7:85:a6:d1:ff:5e:93:f4:51:29:
                    3c:b5:ae:7a:34:23:54:2b:8e:c3:d1:de:93:d6:75:
                    2d:6b:07:a3:90:09:16:00:c7:8b:96:1a:3e:cd:13:
                    d3:81:e4:62:6a:61:2f:4e:68:38:99:96:b8:e4:15:
                    61:51:d5:20:97:57:9f:68:b9:31:8c:1f:1b:fe:8a:
                    3b:e3:72:d0:84:47:a0:07:84:5a:0a:0b:54:6b:bf:
                    7d:a0:07:c0:ae:97:db:b6:09:db:0f:0c:84:c5:30:
                    c7:c7:f0:75:7d:58:83:a7:09:d0:32:8c:4e:48:ee:
                    c9:09:55:90:8b:3b:c0:96:f6:b9:cb:76:8e:ef:c9:
                    5a:85:c6:4d:a9:de:77:b1:75:40:9f:cc:ed:6b:e3:
                    47:be:a1:9e:d3:b1:c4:48:37:1e:81:b4:12:49:da:
                    0e:f2:c4:eb:c5:7f:26:95:b1:a0:3c:c4:92:e4:46:
                    4d:c4:5e:9d:c5:39:b0:dd:c2:da:2e:7b:89:5d:33:
                    40:7f:ca:81:9c:aa:0a:3d:e6:55:bf:df:04:35:31:
                    7b:49:3e:a9:12:17:a2:9e:a3:44:4e:b6:e3:ac:c0:
                    48:52:bb:3e:a7:7d:6b:e3:97:47:44:93:99:a9:3c:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:53:6E:44:8D:FD:B6:FE:64:F9:53:37:E7:7A:04:82:4E:5D:20
            X509v3 Authority Key Identifier:
                keyid:4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:71:11:10:54:6b:55:fb:69:6f:ac:f0:2f:d1:27:0b:0c:
         19:cf:2c:0c:75:cd:49:de:0e:37:f4:64:b7:55:09:46:8c:f7:
         b6:24:f2:61:97:8f:90:56:a1:99:77:dd:36:f8:83:c5:da:d6:
         bf:b7:c1:70:89:2d:df:02:36:ae:e8:44:68:11:69:df:02:3b:
         e5:bd:2e:5c:38:92:d1:5e:4b:c8:2d:aa:ea:cf:f9:2f:17:e1:
         4a:e8:38:da:d9:33:da:68:8f:6e:8a:a1:1b:d4:c5:56:30:80:
         20:30:27:81:e6:95:71:a0:8a:0e:52:a2:31:68:81:e7:79:8c:
         27:79:6f:a2:70:0d:88:02:a6:26:2c:f5:e2:ba:ac:35:cc:18:
         f8:59:18:af:d8:bc:db:02:56:34:3b:5d:d7:f5:88:5f:22:2d:
         0f:ce:0a:ae:93:b5:ae:76:78:cd:25:17:b9:bb:36:ba:55:6c:
         95:28:b7:f5:a8:61:88:e0:4e:d6:3b:81:eb:ea:3b:6d:97:93:
         87:1b:fb:49:a2:1e:45:7e:a3:fd:de:12:28:4c:0a:54:1c:3d:
         f6:d5:0e:60:36:43:13:20:36:5e:45:7d:f4:98:3d:c8:1e:a6:
         7b:93:f3:a7:c4:5b:eb:be:7d:0f:63:94:74:15:3b:05:56:40:
         ee:47:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:56:34 2026 by rpki-client