Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
File:                     43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft (raw, json)
Hash identifier:          la/DF9Y8fJ8rtih57nTcOmtCID6qhKqT20XsJjQVPiI=
Subject key identifier:   54:D5:05:A0:61:BE:09:26:48:20:36:FF:6C:66:A7:92:F8:B9:10:B7
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       13905C9C53DB51BCBB2F3108185314A8EDF1C1CD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
Manifest number:          96
Signing time:             Mon 20 Oct 2025 04:31:53 +0000
Manifest this update:     Mon 20 Oct 2025 04:26:53 +0000
Manifest next update:     Tue 21 Oct 2025 07:12:53 +0000
Files and hashes:         1: 326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (hash: Mm4b5uiTirSzAclhjwrvqH8mQa5vVh+TWe3AWlTU2YA=)
                          2: 326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (hash: mW+xJRpA1JLCAhpFJnSztJR3X1zJVko4+BIjilS/nmA=)
                          3: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (hash: 2a8dpyz5EAHNvXCqv6ifQ4B0VTk/TpWgxKbk/+FwaDo=)
                          4: 326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (hash: 8iHgh4mRlo/rwO1Bw19ggiPQiQEw7HmgXiK7jodqthQ=)
                          5: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: TNhkpfquy4RSYkNr/6TI4JM4K1aI8WDh3EI9bDH5/tI=)
                          6: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (hash: ru4Yr5RUV+7D5LNisUxhVc3n5JvyKoCUlzd333tpYgc=)
                          7: 326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (hash: kOf0Y/COmTzTMU6cdvvc0ZRdNI7Zl9i67Ci7JrJ9pQ4=)
                          8: 326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (hash: EepqtJ/1AIBSbcvfmTBNRqAuwz/KXjpikda3abvNVMo=)
                          9: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: DZRukcmd95/CGy0FlZlIkAqKif6bdCvjwCU/Yk6I/eE=)
                          10: 326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (hash: KTyh2SEV5HU612WTdMvSAjCnScbC24rbm18nZVQRDCM=)
                          11: 326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (hash: VpgS+RML1f6D9HT2iGquOB/7Rg+/aypKQBnS7XagYpo=)
                          12: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl (hash: kssgOMPyBdXHGuJwEntG+Cc2YTRF5SvTWiyxUx2eNgs=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:90:5c:9c:53:db:51:bc:bb:2f:31:08:18:53:14:a8:ed:f1:c1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Oct 20 04:26:53 2025 GMT
            Not After : Oct 21 07:12:53 2025 GMT
        Subject: CN=54D505A061BE0926482036FF6C66A792F8B910B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:e8:ce:21:ae:b2:82:f3:2d:ef:67:ae:64:
                    7a:42:4a:1f:e6:05:47:e1:d6:dd:fe:36:9d:63:60:
                    a1:a0:18:ec:f0:f2:df:d7:2b:38:0b:c4:f1:9f:a2:
                    df:35:c8:76:e6:3b:d7:53:7f:1e:42:79:22:08:cd:
                    88:84:53:e6:68:97:62:90:4e:6d:5e:be:0e:86:ba:
                    3f:45:80:74:51:15:69:f0:53:7a:d6:8a:7d:ce:c3:
                    11:0d:12:89:8b:91:2f:c8:e5:2a:a3:ea:65:ea:49:
                    47:0c:9b:42:a5:f9:aa:18:5a:92:8a:0c:c0:d2:7a:
                    51:f7:aa:5e:08:33:d3:00:58:40:e9:bf:12:11:0b:
                    88:9d:08:8c:98:3f:cb:dd:35:20:1d:c1:4d:05:09:
                    62:bb:39:82:76:7d:e9:82:1f:e6:93:98:de:ab:13:
                    d0:72:55:98:11:25:fc:ec:6d:32:ff:8c:bf:31:2e:
                    2c:3d:4c:2e:81:b8:c1:b6:70:6f:60:8f:7f:32:fc:
                    46:cb:85:8a:5a:f0:95:f4:40:b5:77:eb:db:fe:f8:
                    57:a8:93:f0:35:87:30:f1:74:91:8c:eb:35:1f:fd:
                    33:9f:3f:76:79:8d:0a:09:08:cf:8d:62:40:65:ec:
                    08:c7:26:ea:67:79:a7:b4:37:b7:ed:eb:35:6c:19:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:05:A0:61:BE:09:26:48:20:36:FF:6C:66:A7:92:F8:B9:10:B7
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:44:02:54:71:f5:2a:9d:2b:26:21:9c:7f:af:e6:1e:73:
         e4:81:35:5a:32:34:a9:f3:07:16:50:42:37:bf:30:ce:43:e5:
         bb:45:4b:d3:20:2f:d7:f7:2b:3b:4b:9e:05:ea:4c:ce:36:46:
         7b:30:e0:54:bc:7e:23:0e:6c:6e:28:51:60:9a:58:10:a6:c7:
         3f:c0:24:8e:62:73:b9:01:63:e8:49:75:34:cc:30:a8:41:2d:
         b9:ed:01:5e:63:29:4f:31:e4:9b:40:00:e4:8b:60:86:11:bd:
         c2:45:b5:3a:e2:6a:64:2b:bc:30:0b:68:d6:41:9c:b4:6d:15:
         9d:fa:3a:9d:25:c8:36:2c:bf:44:3b:52:60:fa:3a:4a:54:43:
         64:d5:a4:8c:d3:d4:7a:4c:32:a2:04:e7:e9:f4:45:df:e3:08:
         5e:6e:30:fc:83:3d:5c:8f:d4:89:b1:d5:4b:bc:e5:01:a7:3d:
         af:f1:a9:2a:17:c3:c0:fc:c4:c4:82:21:73:bd:3d:34:17:3a:
         43:25:20:a7:a6:f6:be:a8:81:9d:c0:b7:af:f9:3d:87:20:97:
         80:b0:7a:49:02:29:30:22:8e:8f:57:00:f8:2e:4d:11:f7:fa:
         1c:4b:51:b0:72:4e:62:62:04:10:a3:44:31:d8:c1:94:ab:36:
         2a:06:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:12 2025 by rpki-client