Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
File:                     4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft (raw, json)
Hash identifier:          ZEgLuXy35zpy2SgMcVkDABckfRb0AkQ/n7woUXnskPw=
Subject key identifier:   CD:E7:F2:BB:50:81:3F:96:C8:9E:F1:9B:A4:E0:80:49:F4:07:DC:A5
Authority key identifier: 4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8
Certificate issuer:       /CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
Certificate serial:       52706E33FEC38239B1B5F734729959E976F45E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 08:30:55 +0000
Manifest this update:     Thu 23 Jul 2026 08:25:55 +0000
Manifest next update:     Fri 24 Jul 2026 09:55:55 +0000
Files and hashes:         1: 4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl (hash: kNhF7bDj/nWWut98eIcPAtWtVqFuRz4CEwZ1laagIdg=)
                          2: 32332e3134302e32302e302f32342d3234203d3e20343031373630.roa (hash: JYka4q/SpkE1ju1vuX7IkdbkGd8YfduInR5R6Pavz90=)
                          3: AS401760.asa (hash: K++U+rZRj57xEHHqf+/EOKYn5SnBxRJBmTFFKjnswJA=)
                          4: 323632303a64393a323030303a3a2f34382d3438203d3e20343031373630.roa (hash: 8cPnnYEXIJLCdlWfUy79K2LhqaM+LhE2rdws7KP1ppw=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl
                          rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:6e:33:fe:c3:82:39:b1:b5:f7:34:72:99:59:e9:76:f4:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0
        Validity
            Not Before: Jul 23 08:25:55 2026 GMT
            Not After : Jul 24 09:55:55 2026 GMT
        Subject: CN=CDE7F2BB50813F96C89EF19BA4E08049F407DCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:f7:41:f1:e5:5b:ab:5d:9d:66:43:cd:b1:
                    ba:c0:c5:ad:8e:c6:9b:d7:31:c3:d0:01:6c:e3:26:
                    14:ff:8b:7e:84:77:fd:37:37:fd:34:c9:cd:6a:b0:
                    5d:72:5d:94:30:82:94:bc:70:09:d5:e2:c1:25:50:
                    54:95:b2:c5:50:47:41:dc:13:4d:b6:96:e0:ed:e4:
                    6b:09:51:9e:ce:86:ce:17:7a:9a:12:79:af:ce:d2:
                    e3:af:45:4d:bd:ea:93:6f:9a:f9:f1:a5:66:16:ec:
                    00:15:a1:07:c1:c3:4a:52:8b:c7:69:40:e1:c6:b1:
                    30:68:55:eb:02:cf:87:ac:bf:7f:c8:6b:45:7a:36:
                    86:2a:64:25:c4:31:95:9f:7e:73:ee:86:f5:1e:02:
                    43:e4:0d:1a:65:68:6f:ce:74:e4:d2:fe:e2:29:99:
                    15:ba:de:c7:2f:c9:2b:5f:ec:06:c6:1e:21:14:1f:
                    2b:b2:97:40:5a:7f:e9:68:82:33:4a:2b:44:6d:31:
                    4d:07:fd:25:98:5f:3e:c3:e0:d9:bf:53:1b:43:bd:
                    9d:71:f8:87:1f:5f:c4:77:c5:4f:1b:86:cc:2b:56:
                    13:bd:53:cd:0f:3c:9e:74:5c:40:2a:ba:4e:9e:b7:
                    aa:b9:38:ba:81:56:e0:c8:f8:6f:7f:7d:17:89:de:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:F2:BB:50:81:3F:96:C8:9E:F1:9B:A4:E0:80:49:F4:07:DC:A5
            X509v3 Authority Key Identifier:
                keyid:4D:38:A4:FE:84:0C:F5:EF:A4:E4:46:9C:CD:6F:62:95:E3:74:1F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccaa716c95de19f6e2acc97a78c69c8845a7f705fa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/4D38A4FE840CF5EFA4E4469CCD6F6295E3741FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:76:ea:cf:6b:50:89:e8:1f:04:9f:12:c9:a8:40:c2:e6:e0:
         94:a2:06:20:06:b3:64:85:da:24:57:1b:ca:f3:d1:04:19:8e:
         c4:e8:7f:3f:09:87:ba:a0:3c:0b:83:73:f9:c5:c2:05:fd:a9:
         0f:9b:47:92:e3:e4:7c:71:8c:17:69:56:7b:1d:64:f3:49:03:
         38:b1:be:9e:d3:0d:c6:0d:6d:bb:57:9b:ae:d9:de:50:cf:cd:
         5b:f0:28:95:5e:20:4c:57:74:d3:35:92:d9:61:23:7a:20:7d:
         03:ca:66:94:fb:ad:ae:71:ff:d1:bc:b2:8a:e2:d4:b0:cc:6f:
         db:5e:9e:bd:84:5b:df:62:ff:b5:f4:97:99:67:7d:48:e8:e2:
         21:e5:ae:dc:e9:88:a4:37:90:f3:ad:f4:ea:d6:56:72:26:cc:
         bf:0c:ea:f1:df:c8:c6:41:46:d1:76:f2:76:ef:19:50:a1:02:
         ac:9e:fd:a4:23:7c:5f:7e:d7:f5:9d:e5:c3:d0:8d:25:f5:e4:
         b5:af:03:0a:09:e6:44:92:a7:6c:be:d0:5a:d3:ee:12:a8:38:
         e6:03:af:14:0f:16:c8:0c:a0:91:99:1f:dd:63:ab:0b:01:f1:
         b9:ac:c0:5b:19:91:c1:6e:e0:84:74:ad:a1:22:3f:e3:6c:c6:
         89:df:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:10 2026 by rpki-client