Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
File:                     5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json)
Hash identifier:          aoplYvuUZWTwlfAFghIsNbVIMMlywaLUwQyzWcaehNA=
Subject key identifier:   DE:CC:26:22:1E:B5:91:33:DF:28:82:CB:9B:7F:A2:3D:4A:8E:2A:6E
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       207B590E6E9D29702F03395A38A27FF0C6282C3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
Manifest number:          08BB
Signing time:             Wed 23 Sep 2026 19:34:07 +0000
Manifest this update:     Wed 23 Sep 2026 19:29:07 +0000
Manifest next update:     Thu 24 Sep 2026 20:21:07 +0000
Files and hashes:         1: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: FP2GcPl1oqzQ+eRkIyENNz9EPh4eTbzn4nru1plQMo8=)
                          2: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: jbMUD8UxhBCZnxEMR5BRGXYMTKz3FSqJjbwVaWABIzA=)
                          3: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: UA31leNR+0mj8/zdmcjnYvU1v4hTPJ5jiqPEKStBAY4=)
                          4: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: 1pb6iRZh2u+VRf6t/MOcNiNfWkPg0JFXwGKHzeC9LoI=)
                          5: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: 8GVd9alC6053lwGZtWQQiYRA2PwVGFqVWQ/8Hf3Xvbc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 20:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7b:59:0e:6e:9d:29:70:2f:03:39:5a:38:a2:7f:f0:c6:28:2c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Sep 23 19:29:07 2026 GMT
            Not After : Sep 24 20:21:07 2026 GMT
        Subject: CN=DECC26221EB59133DF2882CB9B7FA23D4A8E2A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:73:e3:ce:cc:88:40:ea:22:bf:6f:5b:02:
                    87:4e:95:9f:2a:ce:ae:86:8c:e2:d7:f0:a2:43:a6:
                    d8:09:b3:f6:83:86:64:40:72:52:00:52:09:3f:45:
                    d1:9d:26:a2:b1:5e:76:b5:5f:d5:08:10:e0:7f:b8:
                    c2:81:c1:b1:2a:74:4b:ba:e6:2d:90:68:43:7c:02:
                    f5:35:85:31:be:5f:f6:3c:9a:85:20:09:c8:2a:0e:
                    aa:7e:95:99:b1:bd:2b:cd:03:38:a1:5d:3f:d9:82:
                    e5:ca:d9:eb:c8:07:fd:66:1c:d3:d3:51:b3:16:0d:
                    99:cc:e7:90:de:ee:5e:73:a6:83:e6:fd:2a:51:35:
                    62:f7:93:43:94:63:d4:87:eb:5d:47:ee:f6:bb:52:
                    41:64:87:1c:cd:64:84:70:a5:63:87:1f:ca:ad:24:
                    9e:78:1a:ec:ad:56:24:08:b4:cc:c2:bf:37:7a:11:
                    3c:61:56:56:74:dd:75:d4:08:53:cf:c4:d0:c5:ff:
                    0f:74:38:d4:72:7e:d7:b0:c1:89:28:82:1a:c0:08:
                    e5:d7:5a:8d:10:ea:f0:98:b7:34:26:6d:48:7e:ae:
                    fa:8f:f8:2e:e4:6d:67:54:bb:8f:12:9c:79:34:68:
                    00:15:ae:64:8b:23:3e:30:e2:1a:dc:fb:db:f8:0c:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:26:22:1E:B5:91:33:DF:28:82:CB:9B:7F:A2:3D:4A:8E:2A:6E
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:a7:ab:a8:90:91:79:60:58:59:b5:f1:cc:00:fc:61:9b:
         15:c8:34:ad:9b:bd:17:0e:ca:63:82:4d:70:99:f0:2e:e3:8b:
         f5:92:20:3e:30:ed:8e:78:dd:1d:3d:c8:54:7e:76:7f:a2:06:
         d9:55:62:72:f6:04:11:9c:1f:be:02:c5:a6:ab:e1:64:1c:20:
         4e:a0:79:d5:af:43:32:b7:1d:6f:c4:cf:22:52:13:ad:77:f9:
         57:b1:9b:a6:fb:9f:dc:32:b6:0e:73:1a:f0:29:1d:b6:9e:d9:
         66:96:6d:dd:53:94:09:29:67:26:59:18:f9:14:23:73:80:53:
         86:3b:43:4a:73:5d:5c:69:38:fd:2e:1b:3c:68:62:b5:f8:f7:
         cc:a4:c7:63:c1:c3:13:4e:53:83:40:f7:94:28:25:68:d6:d8:
         b0:6b:39:5c:1b:71:37:fb:ce:4e:12:a9:75:b0:4d:3b:32:48:
         d8:47:ba:2d:54:51:84:b4:90:42:41:1d:e6:c2:7a:96:07:ff:
         7d:bd:06:34:8f:db:f0:a4:db:40:7d:13:a5:d5:77:fe:e7:f0:
         53:69:29:86:24:a6:7a:a3:c9:03:b2:14:0f:33:dc:37:e1:dd:
         f4:66:3b:cb:5a:35:fd:16:a2:b4:79:0d:03:5d:8f:94:71:2e:
         93:3a:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----