Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
File:                     b9ea3438-4142-4de2-a912-7b081a51b42d.mft (raw, json)
Hash identifier:          Kis3ZSfN42rP5CM95l8+5c7YzNH3ZjdL8LWK+tV+Tuo=
Subject key identifier:   53:83:9C:9A:07:22:B9:CF:0F:3A:D8:12:44:70:61:AD:70:5E:F6:D7
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584AF3BB995EFCE28C8EE6D23EB0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
Manifest number:          010D0C9F4328584073A854B5F80ED5C22F915FF7
Signing time:             Sat 23 Aug 2025 13:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 13:00:08 +0000
Manifest next update:     Tue 26 Aug 2025 13:00:00 +0000
Files and hashes:         1: 408f67a4-965c-3201-9f19-0975f3af94df.roa (hash: 9an8zD8BPzcSxN1QZspJZ7uorp67inGItt1x5R9VZcY=)
                          2: 99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (hash: BW/X7mOcQ776vjaw8U+FcJgnmN+U9Pc6hVXfTN52+BQ=)
                          3: b9ea3438-4142-4de2-a912-7b081a51b42d.crl (hash: XDTvKBZZOjY6B+RZYR7reBfchXfbNBQDoPUtDq/O8Ak=)
                          4: e1a7be4a-5c75-3cfe-a4f3-ae01e91101d1.roa (hash: DfwpJzTIcgNBdbF277RBARz8+6FY+EVZNMJbrk6gwkY=)
                          5: f539d4bb-d0ed-3751-86e7-b24c008e572c.roa (hash: y4u08YRtakGBFUpdpycgaWg1lNcQNSBShPGBMKl+yyQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:99:5e:fc:e2:8c:8e:e6:d2:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Aug 23 13:00:08 2025 GMT
            Not After : Aug 26 13:00:00 2025 GMT
        Subject: CN=a9a6d191-4ae4-41bf-bf62-8ac310bce553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:30:36:88:5d:28:33:2d:78:20:bd:c9:7d:
                    15:a0:25:24:88:37:c3:1d:85:04:e8:c7:a3:03:ab:
                    6a:1f:63:5f:da:ba:ce:d2:d7:14:cd:63:62:02:8d:
                    1d:49:76:cc:db:b6:50:16:4f:a7:37:35:61:62:97:
                    17:bc:a0:50:d6:cd:4b:d3:e1:ad:9f:47:c6:38:74:
                    9f:f3:5f:d6:ca:80:7e:63:97:a5:90:18:6f:c6:2a:
                    a3:46:f5:0e:29:3d:9a:bb:fd:75:47:80:1e:2f:c8:
                    da:33:ea:12:fe:04:54:ed:9d:97:39:89:08:86:a1:
                    df:90:76:6b:6d:8f:7a:62:a8:df:da:d8:b8:b4:10:
                    76:b9:04:09:4f:14:68:08:a7:a5:48:d4:01:19:b6:
                    f3:2b:8b:98:1f:d9:c2:fc:7f:f7:86:66:e8:64:00:
                    40:e6:46:88:fb:61:f2:bc:68:77:ba:9a:fa:fc:8f:
                    75:1a:c6:de:f0:8b:ef:3c:b8:a4:03:31:b2:eb:05:
                    35:a9:f5:e6:dc:1e:2a:05:29:b4:5f:ae:29:9f:f1:
                    5d:9a:85:b5:2a:3d:e6:ce:b3:f5:ba:f7:0d:62:ed:
                    97:bd:af:a4:ed:87:85:e7:57:52:52:9e:54:74:e7:
                    52:7d:26:1d:a6:ba:01:1d:6e:58:68:a7:52:48:a7:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:83:9C:9A:07:22:B9:CF:0F:3A:D8:12:44:70:61:AD:70:5E:F6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:88:05:9b:1e:3e:4b:9e:cc:84:ca:b9:10:8d:f9:76:6c:
         5f:ce:64:c9:9a:f3:de:f4:19:a0:e8:d7:44:7c:f8:68:fb:ba:
         34:ac:a0:0d:f3:ae:b0:9b:b5:39:68:e5:8d:ef:63:a4:ef:d9:
         42:4f:d0:92:4c:15:8e:10:01:12:49:4c:09:89:7d:7f:5f:80:
         f1:14:3d:db:9c:fd:6d:1f:c0:5d:97:ca:2c:6d:da:5d:d0:be:
         c4:5b:f6:b4:56:a1:e2:83:aa:0a:f4:e4:76:4f:f2:98:ef:52:
         6f:2e:8e:78:e3:fa:83:75:d0:5b:ee:b8:b8:38:5f:19:57:ed:
         68:75:63:b4:81:8a:c9:78:90:6c:df:32:e9:f7:57:c6:ab:24:
         e5:d1:c8:95:2c:a4:0f:10:66:bb:82:af:78:46:ed:3a:2f:57:
         82:82:62:33:54:09:20:17:3e:20:33:11:18:7e:b8:59:9f:40:
         89:2d:6f:a6:20:42:25:12:46:4c:9c:06:c2:1e:ff:46:56:2e:
         31:ec:22:e5:bc:99:82:04:74:ee:aa:1e:ee:8c:c7:fd:77:e0:
         6a:66:00:29:55:f5:4c:bd:5f:32:3d:46:e9:2c:3e:cc:dc:ea:
         a9:45:da:7a:3d:ab:20:d9:26:7a:74:73:40:df:4f:30:09:45:
         40:c0:40:ed
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzu5le/OKMjubSPrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi
NDJkMB4XDTI1MDgyMzEzMDAwOFoXDTI1MDgyNjEzMDAwMFowLzEtMCsGA1UEAxMk
YTlhNmQxOTEtNGFlNC00MWJmLWJmNjItOGFjMzEwYmNlNTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikMwNohdKDMteCC9yX0VoCUkiDfDHYUE6Mej
A6tqH2Nf2rrO0tcUzWNiAo0dSXbM27ZQFk+nNzVhYpcXvKBQ1s1L0+Gtn0fGOHSf
81/WyoB+Y5elkBhvxiqjRvUOKT2au/11R4AeL8jaM+oS/gRU7Z2XOYkIhqHfkHZr
bY96Yqjf2ti4tBB2uQQJTxRoCKelSNQBGbbzK4uYH9nC/H/3hmboZABA5kaI+2Hy
vGh3upr6/I91Gsbe8IvvPLikAzGy6wU1qfXm3B4qBSm0X64pn/FdmoW1Kj3mzrP1
uvcNYu2Xva+k7YeF51dSUp5UdOdSfSYdproBHW5YaKdSSKdpBwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFFODnJoHIrnPDzrYEkRwYa1wXvbXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh
MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvYjllYTM0MzgtNDE0Mi00
ZGUyLWE5MTItN2IwODFhNTFiNDJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5
MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx
YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4
MWE1MWI0MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6i4gFmx4+S57MhMq5EI35
dmxfzmTJmvPe9Bmg6NdEfPho+7o0rKAN866wm7U5aOWN72Ok79lCT9CSTBWOEAES
SUwJiX1/X4DxFD3bnP1tH8Bdl8osbdpd0L7EW/a0VqHig6oK9OR2T/KY71JvLo54
4/qDddBb7ri4OF8ZV+1odWO0gYrJeJBs3zLp91fGqyTl0ciVLKQPEGa7gq94Ru06
L1eCgmIzVAkgFz4gMxEYfrhZn0CJLW+mIEIlEkZMnAbCHv9GVi4x7CLlvJmCBHTu
qh7ujMf9d+BqZgApVfVMvV8yPUbpLD7M3OqpRdp6Pasg2SZ6dHNA308wCUVAwEDt
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:07 2025 by rpki-client