Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
File:                     75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft (raw, json)
Hash identifier:          +S89RABNuLxpU+YSW1hcvvDn99PCOMHF6CfLqoQ/F4k=
Subject key identifier:   22:BC:F8:4A:20:D5:24:64:8B:5A:EF:11:A6:2D:E6:F1:52:9D:DE:2C
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       04B61CB1BD2EA77C7D4FE4C1BB463912286B326A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
Manifest number:          01DD
Signing time:             Wed 23 Sep 2026 08:03:15 +0000
Manifest this update:     Wed 23 Sep 2026 07:58:15 +0000
Manifest next update:     Thu 24 Sep 2026 08:24:15 +0000
Files and hashes:         1: 3136392e3132382e34382e302f32322d3232203d3e203630393030.roa (hash: zaCr0/gxJoBaTFus9xSecY3rBLH7/zp1H9neeS1yvAs=)
                          2: 323630323a663530633a3636303a3a2f34382d3438203d3e203630393030.roa (hash: sR5jR2PclGFB9Gx6SA5ShFWREq6uRKGBDhYj0s/GXxs=)
                          3: 3136392e3132382e34392e302f32342d3234203d3e20323134373537.roa (hash: +qVxWSgzIirPoVSwjXw11nx5abrm5SmIMavDzOyA5Bw=)
                          4: 323630323a663530633a3233313a3a2f34382d3438203d3e203630393030.roa (hash: SH3X35fPe1/We6fzmfS638gESKX9clG9685+K0PfdAg=)
                          5: 323630323a663530633a3633313a3a2f34382d3438203d3e203630393030.roa (hash: e5linJZIp8hhP6NvYuxHcJiqoJPUI/YToTvejx0O2iI=)
                          6: 323630323a663530633a3a2f34382d3438203d3e203630393030.roa (hash: 4KFIyMavS9Qbt5suC5dMsG8jxvh3fhjwja7tMo/jWUI=)
                          7: 3136392e3132382e34382e302f32342d3234203d3e203539393230.roa (hash: PxHjgfF2DSYRI4ylgdoTNYfwRoDFuWUZp0oAKCUB3A4=)
                          8: 323630323a663530633a3231323a3a2f34382d3438203d3e203630393030.roa (hash: ONDXMZsFOZ8j19rR4Xmo0DCAkEghl4dt58OQWAL5QS4=)
                          9: AS199177.asa (hash: 2SjTGwekBsY6YLFkqsg8AaSQK4pdgH0hTcx6QYhNJ2w=)
                          10: 323630323a663530633a3634303a3a2f34382d3438203d3e203630393030.roa (hash: SoF9zKadc4JeL8F9Mtl6YAu8IR63Ds00GIVwmXcJ1V8=)
                          11: 323630323a663530633a3431313a3a2f34382d3438203d3e203630393030.roa (hash: jgSefNGoY5D4SRqQzcfmQIN42CWk9kAqYTw66MWj5TU=)
                          12: 323630323a663530633a3233303a3a2f34382d3438203d3e203630393030.roa (hash: T19L0SxGK/giiF/RLRPd//My6yPUiRp94xdiEyp6TmM=)
                          13: 323630323a663530633a3231303a3a2f34382d3438203d3e203630393030.roa (hash: LVJUIsOCM+LBPHTDrUMU/qnBZFVnfmgPx3mGzoE/pKQ=)
                          14: 323630323a663530633a3235303a3a2f34382d3438203d3e203630393030.roa (hash: /2Vv4/M467VkkSEtrhi+2tDOA7BpgHYnhy+n/kBOMyE=)
                          15: 323630323a663530633a3231333a3a2f34382d3438203d3e203630393030.roa (hash: /G4n7PuQvu8o1iWD+SVQBPsa+uxWoIEaW5UX9VcDtig=)
                          16: 75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl (hash: CYm5Xp7SnJvvr/wCKgDu4x058qaxacIr0rAJemXI1/c=)
                          17: 323630323a663530633a3832313a3a2f34382d3438203d3e203630393030.roa (hash: igXKNpVdSdrzcNa9UR2iapdpZwt9kbgw8HGDw9EMc5w=)
                          18: 323630323a663530633a3235313a3a2f34382d3438203d3e203630393030.roa (hash: g/xHxKO/CLvwZhq2T8kAFSoDKWhP03iIq9NK0XapUI4=)
                          19: 323630323a663530633a3232303a3a2f34382d3438203d3e203630393030.roa (hash: 1DawOWo3T/dnLcnqj6GbK9PsrDrY5cLsJzxQC2c2has=)
                          20: 323630323a663530633a3637313a3a2f34382d3438203d3e203630393030.roa (hash: Hfr3pv/sFI910pkRvJ2xlxqpn+jcoOPTRWrEbuAOY/s=)
                          21: 323630323a663530633a3831303a3a2f34382d3438203d3e203630393030.roa (hash: l8MIHis2p3lLfYOvQaw8gUE8YMyCOAsXJHQzMdtCruE=)
                          22: 323630323a663530633a3635303a3a2f34382d3438203d3e203630393030.roa (hash: bw+a9hCxOdYS+8k4RL1bY6vYQ4PmjXO8d7026uBDVnI=)
                          23: 323630323a663530633a31303a3a2f34382d3438203d3e203630393030.roa (hash: F+hFBlVk82/HQvZfGs7NpsVpE0zb8UWIGPpboqOsuV4=)
                          24: 323630323a663530633a3232313a3a2f34382d3438203d3e203630393030.roa (hash: m32cKiGlh8igmzhQp8Ce9utbNGCINKc/WLJt+F3081g=)
                          25: 323630323a663530633a3832303a3a2f34382d3438203d3e203630393030.roa (hash: AL6+2uP7g5M1NNMQDkwtMEBJsfKU20jb7ddLMJ4V/yA=)
                          26: 323630323a663530633a3631303a3a2f34382d3438203d3e203630393030.roa (hash: O/PPIcD90mIgrmHHXqf3WhStc4e4+IO8YGppN3p3i1M=)
                          27: 323630323a663530633a323a3a2f34382d3438203d3e203630393030.roa (hash: O5vjoD+YZ8IVZDXTPU7AK+c1eDmQ81NyZrS4h7NxHCU=)
                          28: 323630323a663530633a3633303a3a2f34382d3438203d3e203630393030.roa (hash: fQW1GX3Kr0Te/y2lNDtphHfzKCPk3wuFqo2+/GTtLg8=)
                          29: 323630323a663530633a3431303a3a2f34382d3438203d3e203630393030.roa (hash: 9pBNMYYhWYCCtAnLlO1VaZ+4da1m1x1KH5NN9cAIKeg=)
                          30: 323630323a663530633a3231343a3a2f34382d3438203d3e203630393030.roa (hash: +guIOkGlCYi+Z8QlnRuCNHCJcaPeTqzTCpjGDkGlb08=)
                          31: 323630323a663530633a3831313a3a2f34382d3438203d3e203630393030.roa (hash: HlDKPEZApnEvl9dCEmWxqXWGVM6yvFyrcI9oKLBEj9Q=)
                          32: D6D172D72D23BAC1F197C131AD720E6E8230B003.cer (hash: M8a5aE/mky/dXjm+1vMzaR2Rz1aBMiI40fXXsnXen6s=)
                          33: 323630323a663530633a3636313a3a2f34382d3438203d3e203630393030.roa (hash: DH0+n+H9rnB0z+bU6/qvKuQ6i58cyqFXPoxyBJNo8sc=)
                          34: 323630323a663530633a3234313a3a2f34382d3438203d3e203630393030.roa (hash: F0mC/wMr+vXdADEF43hk73JaMtu2hebl2bgqE1N7Btk=)
                          35: 323630323a663530633a3631313a3a2f34382d3438203d3e203630393030.roa (hash: uMmgWIMsv/XBsd5/QlydXn6nFOyx4SfNUMKKZpMnbKI=)
                          36: 323630323a663530633a3637303a3a2f34382d3438203d3e203630393030.roa (hash: 7ThC/pGUMTc4ruk6E1IaEloLam8opQhNsDqMnk2xH7I=)
                          37: 323630323a663530633a3632303a3a2f34382d3438203d3e203630393030.roa (hash: OxSfs4uAqheZed5UA9XLKarmY5qrZ1AvNmTRNDDaoFs=)
                          38: 3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa (hash: WYyM4UXQi6zPRGhuJ3IiHQNtENa5s/nAKWv3C/eF1RI=)
                          39: 323630323a663530633a3231353a3a2f34382d3438203d3e203630393030.roa (hash: ccjCyb9FQhuHVAdmxJMb24WJ0PEVR0Id+EVjo/ymjxo=)
                          40: 323630323a663530633a3231313a3a2f34382d3438203d3e203630393030.roa (hash: 2QQK5pz9YpLxQi4uUh0VrSn5lRY6ESQ13JPXIWGIrL0=)
                          41: 323630323a663530633a3634313a3a2f34382d3438203d3e203630393030.roa (hash: o512WlQy9fmGTFi5taMzAv4154KaAKANhW5WWnL8l3o=)
                          42: 323630323a663530633a3234303a3a2f34382d3438203d3e203630393030.roa (hash: ZwkaE7fJeMQvqtdfhQicW8MJ2dJ3AmYGP78nB4M+vlI=)
                          43: 323630323a663530633a3632313a3a2f34382d3438203d3e203630393030.roa (hash: 2/Tf3HSHU9UmlnQ0tE5zdjjfH5uAQfgfRC9gY7liQa4=)
                          44: 323630323a663530633a3635313a3a2f34382d3438203d3e203630393030.roa (hash: o9jBRHrKHJrSYlJBazbXZsg9uRr8nMgcPYfQQ/P6hBA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b6:1c:b1:bd:2e:a7:7c:7d:4f:e4:c1:bb:46:39:12:28:6b:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Sep 23 07:58:15 2026 GMT
            Not After : Sep 24 08:24:15 2026 GMT
        Subject: CN=22BCF84A20D524648B5AEF11A62DE6F1529DDE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:71:07:f2:a7:3f:c7:48:f4:34:b7:f8:63:
                    af:e5:2d:4f:22:2a:d5:48:24:26:45:bd:53:29:07:
                    0a:a1:46:12:80:67:1f:ce:5a:27:3f:5f:98:e1:36:
                    57:23:2a:86:c4:98:c1:7c:2e:59:e2:a5:ef:88:c3:
                    9e:f7:8b:84:43:fc:6a:60:f9:d9:67:14:37:28:80:
                    70:3e:16:06:08:ab:68:99:fa:82:32:c7:2b:a2:6d:
                    dd:15:a1:c8:09:b6:46:8d:6b:cc:f0:ff:73:3a:07:
                    4a:ca:2d:7d:e3:7b:8a:7b:a6:65:9f:95:e6:ab:ce:
                    ac:64:33:37:9e:c5:d6:0c:94:84:9d:03:a4:fe:b9:
                    da:d6:19:88:91:fa:ab:9f:c2:8b:74:0b:dc:50:11:
                    0a:33:bf:db:78:ff:c9:c9:55:91:eb:20:46:7b:46:
                    0c:90:cf:b5:57:f4:26:d8:87:8d:14:ba:8a:80:61:
                    8b:1a:4c:eb:56:f4:b0:25:5d:55:7a:e1:a7:69:78:
                    33:70:12:8f:b0:88:e0:58:43:4a:19:96:16:f0:ec:
                    f9:26:9a:03:14:3a:f1:79:a5:45:33:7a:8a:f5:1f:
                    3c:2d:78:45:7f:e7:80:78:c8:98:41:e4:74:97:90:
                    df:26:c2:a8:4f:17:15:cd:23:ed:21:22:e5:8a:e5:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BC:F8:4A:20:D5:24:64:8B:5A:EF:11:A6:2D:E6:F1:52:9D:DE:2C
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:4c:b3:d1:04:88:b9:c3:17:bb:54:62:19:52:26:30:bd:
         2f:0b:39:3a:7a:25:17:62:1a:eb:f5:18:48:f3:e3:dc:e8:d3:
         91:30:83:08:1e:72:c8:fb:9b:84:e4:9a:a3:ae:6e:bd:90:e5:
         f0:4c:9c:0b:04:15:3c:c7:52:16:0a:09:df:87:14:a0:75:cc:
         1d:03:da:6c:ad:f5:dc:99:be:11:ed:53:3b:26:b4:ae:1a:a3:
         e0:6e:93:5f:30:44:5b:d6:ef:95:02:5f:bf:7d:15:a1:8a:69:
         4f:ae:2b:d6:d2:43:bc:cf:75:69:fe:52:2a:06:23:8d:cb:1c:
         02:6c:1c:c2:ea:6b:02:6c:f0:6d:d2:39:d4:d4:d4:bd:0b:a5:
         bd:45:b3:cd:0f:7a:5b:2f:34:99:16:b7:74:90:b8:da:d8:1c:
         b3:04:98:32:67:e5:7c:78:d0:44:57:e6:5b:d3:9e:f4:c0:50:
         29:a9:1e:65:c2:5a:a6:2c:aa:4c:9d:09:ca:6f:a1:33:fa:3c:
         3c:04:10:3e:86:45:37:3e:58:d4:2c:59:12:f8:eb:b4:fd:be:
         5b:79:f6:75:01:27:48:1e:df:cf:e4:05:3e:1d:46:22:08:41:
         aa:8d:df:98:af:af:06:81:8d:e9:56:5d:9e:79:93:c3:86:30:
         49:84:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:03:45 2026 by rpki-client