Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
File:                     b2456e11-ca83-4345-8884-0becc0831fb7.mft (raw, json)
Hash identifier:          u2uZuDMkSsSCkoyiOn/CvwcpPHE8bE/4obn9nS/YDLQ=
Subject key identifier:   BC:AF:05:66:BC:51:04:1D:0A:74:E4:76:4F:EA:BD:29:48:41:69:8D
Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15
Certificate issuer:       /CN=b2456e11-ca83-4345-8884-0becc0831fb7
Certificate serial:       010D0C9F4328584AF34470C00B7469FB71756880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
Manifest number:          010D0C9F4328584073A84ABECBFF88BF31560166
Signing time:             Sat 23 Aug 2025 09:00:03 +0000
Manifest this update:     Sat 23 Aug 2025 09:00:03 +0000
Manifest next update:     Tue 26 Aug 2025 09:00:00 +0000
Files and hashes:         1: 0ea31230-a310-3723-8781-993a54e89d70.roa (hash: 7AvywHq27ZX784QGnLIUmLYwinDkQKSK+b306/9dvgI=)
                          2: 34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (hash: kPpLAsriiPmK2TZBl7D3HGnhBcKa+PL6d1ZV2cSQjpg=)
                          3: 875a6dd8-0332-3d39-b999-634a325db39c.roa (hash: xQ+KtOIuWdB4GhoNll76KH4z0BBc+XJVB/6ao/xdlS0=)
                          4: b2456e11-ca83-4345-8884-0becc0831fb7.crl (hash: gGojvC9bJZTCfWhg457uIApeKlvfhGRh0q0xMJvvAXo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:44:70:c0:0b:74:69:fb:71:75:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7
        Validity
            Not Before: Aug 23 09:00:03 2025 GMT
            Not After : Aug 26 09:00:00 2025 GMT
        Subject: CN=d147b671-7015-4399-90a7-e7ad80b34fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:9c:b2:ec:af:24:ac:4b:68:82:fa:7d:23:
                    15:91:b8:f4:c0:63:f2:ae:20:94:a2:e2:89:37:27:
                    b9:82:4a:22:7b:34:8c:87:14:93:ea:a9:e8:d4:42:
                    43:68:1f:66:6e:17:10:e3:b2:71:75:68:d4:27:99:
                    96:3d:fb:83:8d:75:22:cf:bb:2a:22:14:62:97:c7:
                    16:11:27:e2:83:c9:0e:d5:f3:57:fa:f1:12:6d:af:
                    fa:0c:2b:87:78:12:ba:a7:34:63:a9:cd:31:80:b5:
                    38:66:93:0e:0b:d7:11:66:59:1f:26:b0:25:eb:c4:
                    ca:4c:de:f7:32:4c:0a:12:6f:64:2a:46:9c:3a:0c:
                    17:d7:c7:81:4e:19:ae:f0:f3:72:f7:d9:35:b1:21:
                    7b:0c:ff:5e:db:e7:41:e3:cf:e7:9e:be:d3:01:e3:
                    11:fd:d3:fe:8c:3f:0d:e6:b4:fd:9f:93:fd:2f:b5:
                    c1:82:7b:ef:55:c9:30:38:e5:97:60:31:cb:59:cc:
                    38:ca:32:d5:f5:44:37:ef:d5:e2:df:71:d5:97:a9:
                    90:2f:ca:da:b4:fe:83:5b:5b:6e:a5:2d:bf:55:f3:
                    b6:2a:b1:99:d8:da:33:fa:9b:c3:29:85:9c:46:26:
                    23:26:20:e0:19:f4:cd:39:bd:87:86:d0:c4:fa:43:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:05:66:BC:51:04:1D:0A:74:E4:76:4F:EA:BD:29:48:41:69:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:51:a4:b0:46:27:de:94:03:3d:bd:7a:e5:07:a8:43:6a:
         f5:8c:79:7b:07:ba:0c:7a:de:91:37:a1:ca:05:0b:94:dc:94:
         9a:99:1c:eb:76:11:7e:63:0e:8d:f4:3a:cb:aa:47:86:23:7c:
         e2:76:7f:b7:e6:78:d9:ca:8b:34:e8:9e:ee:c9:ea:5e:df:7d:
         a1:f7:19:a9:f9:f7:d4:c1:8d:26:34:2c:bf:7a:a3:23:55:05:
         41:53:f3:75:4a:8c:ae:97:94:69:0e:55:c9:7a:21:7d:aa:fe:
         42:fb:95:3d:98:d4:11:fa:56:80:b0:7c:e0:95:de:ab:42:6d:
         ae:40:77:80:c7:cb:10:72:f6:65:78:9b:ea:46:97:5c:4f:fe:
         22:c0:b6:28:fb:f9:83:78:ea:e5:c6:ce:5d:f0:02:ec:90:92:
         84:8c:a1:b8:d5:81:ce:ee:73:3d:e4:82:cf:cd:ec:21:51:32:
         68:b2:5d:a3:d2:cd:ac:4c:fa:c8:7e:31:ea:46:92:8e:43:5c:
         1a:25:0a:3f:a7:85:7e:b9:c5:dc:bf:26:63:82:06:ac:4c:6b:
         92:c2:df:1a:f3:0d:03:ad:82:17:a4:3f:ae:0a:d8:65:93:a8:
         a2:35:55:0b:46:99:4e:01:ab:71:44:71:1a:4a:f8:f9:96:94:
         75:e0:54:30
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzRHDAC3Rp+3F1aIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx
ZmI3MB4XDTI1MDgyMzA5MDAwM1oXDTI1MDgyNjA5MDAwMFowLzEtMCsGA1UEAxMk
ZDE0N2I2NzEtNzAxNS00Mzk5LTkwYTctZTdhZDgwYjM0ZmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGcsuyvJKxLaIL6fSMVkbj0wGPyriCUouKJ
Nye5gkoiezSMhxST6qno1EJDaB9mbhcQ47JxdWjUJ5mWPfuDjXUiz7sqIhRil8cW
ESfig8kO1fNX+vESba/6DCuHeBK6pzRjqc0xgLU4ZpMOC9cRZlkfJrAl68TKTN73
MkwKEm9kKkacOgwX18eBThmu8PNy99k1sSF7DP9e2+dB48/nnr7TAeMR/dP+jD8N
5rT9n5P9L7XBgnvvVckwOOWXYDHLWcw4yjLV9UQ379Xi33HVl6mQL8ratP6DW1tu
pS2/VfO2KrGZ2Noz+pvDKYWcRiYjJiDgGfTNOb2HhtDE+kN3BwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFLyvBWa8UQQdCnTkdk/qvSlIQWmNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1
NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvYjI0NTZlMTEtY2E4My00
MzQ1LTg4ODQtMGJlY2MwODMxZmI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4
ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz
MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj
YzA4MzFmYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQPlGksEYn3pQDPb165Qeo
Q2r1jHl7B7oMet6RN6HKBQuU3JSamRzrdhF+Yw6N9DrLqkeGI3zidn+35njZyos0
6J7uyepe332h9xmp+ffUwY0mNCy/eqMjVQVBU/N1Soyul5RpDlXJeiF9qv5C+5U9
mNQR+laAsHzgld6rQm2uQHeAx8sQcvZleJvqRpdcT/4iwLYo+/mDeOrlxs5d8ALs
kJKEjKG41YHO7nM95ILPzewhUTJosl2j0s2sTPrIfjHqRpKOQ1waJQo/p4V+ucXc
vyZjggasTGuSwt8a8w0DrYIXpD+uCthlk6iiNVULRplOAatxRHEaSvj5lpR14FQw
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:27:11 2025 by rpki-client