Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
File:                     cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json)
Hash identifier:          KHr3L74R0iCriBERu9acY5eh4e2Cv50TyH1sYBP554c=
Subject key identifier:   4E:2A:CA:2B:21:08:65:E8:98:5A:1C:B6:4C:3A:7F:41:31:B0:A5:A6
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F4328584B9194FBC62A47B6F8510CA030
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
Manifest number:          010D0C9F4328584073A83840A2BEE7D9A33379B3
Signing time:             Sun 19 Oct 2025 02:00:03 +0000
Manifest this update:     Sun 19 Oct 2025 02:00:03 +0000
Manifest next update:     Tue 21 Oct 2025 02:00:00 +0000
Files and hashes:         1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: 5h2JQ3osMDqp08gwB0t19xHntz2QV7dtCIUNRKsdgwI=)
                          2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: EbGDv5XZJq9f+HBjitkEAKvWZxsrnrPVNqRwsarN9K8=)
                          3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: RobWT/E+3jDNgg66Xg54tAJ40wn9e11fr/ikAiT8ijU=)
                          4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: mofxLVQFy2vLC7kdaSMr4SPcNcebZ51q1UibEMhsgIQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:94:fb:c6:2a:47:b6:f8:51:0c:a0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: Oct 19 02:00:03 2025 GMT
            Not After : Oct 21 02:00:00 2025 GMT
        Subject: CN=ed3f035e-0faf-4013-aa46-fd1847163c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:65:5c:6b:08:2c:79:36:61:32:49:6f:5b:
                    d9:44:aa:86:cd:ea:b4:84:54:0d:51:ca:3a:73:87:
                    78:d7:33:5f:e7:71:df:c4:b2:d7:35:98:4d:52:bd:
                    be:33:50:d1:08:99:78:1b:53:2c:49:4b:45:cf:e9:
                    6f:86:80:48:d8:7f:26:cd:5b:ac:5b:45:0d:23:3a:
                    8f:06:c1:95:df:3c:74:3f:6d:aa:72:16:ff:12:0c:
                    3f:67:5c:c4:9d:af:d2:a9:be:35:a9:60:9a:9f:c6:
                    ef:5c:9d:6e:1b:7d:eb:53:24:e6:88:e0:56:20:2b:
                    2a:0d:42:8c:06:37:99:71:97:0b:ec:31:4f:43:cd:
                    48:11:31:de:6d:60:e6:7d:34:48:37:a1:bd:49:4d:
                    09:2c:c1:6e:f9:08:6d:57:4c:0e:9f:76:33:55:96:
                    b9:31:9b:49:5e:16:7a:9b:34:5a:c8:b3:3a:89:0a:
                    75:8a:f8:f8:97:19:83:47:4c:10:03:5c:f0:c3:78:
                    ae:42:43:c7:75:d3:9a:fa:bf:e7:9e:82:8e:6d:f5:
                    ad:93:93:5e:72:04:2f:b2:23:60:61:56:60:9a:17:
                    34:46:01:fd:7f:a6:35:df:3b:48:fc:0f:fb:09:3f:
                    6e:47:aa:91:45:94:2a:e9:34:b9:bc:72:35:f9:21:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:CA:2B:21:08:65:E8:98:5A:1C:B6:4C:3A:7F:41:31:B0:A5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:96:7f:8e:0b:6b:c8:34:4f:7c:ec:48:62:9c:0c:a3:1e:
         96:9e:04:02:1b:d6:28:8d:9b:03:0e:49:b8:87:36:43:fc:4d:
         19:99:c4:bd:2c:19:3e:53:1d:8e:f2:44:fd:c4:86:99:35:1a:
         0d:0d:70:6f:52:6e:41:c3:10:f0:3e:6a:ce:75:29:d8:cc:a2:
         6e:02:d7:38:4c:98:ac:e7:e7:f0:d1:78:dd:3a:c0:41:23:54:
         3a:d5:fc:9c:bf:57:d5:33:83:16:d3:45:d5:ba:15:99:42:5c:
         e6:0a:4d:b5:7e:dd:a5:42:59:73:28:7a:c8:1d:a4:0d:cf:ea:
         ad:e7:6a:91:63:d8:4f:45:08:94:47:58:91:56:11:87:f9:2f:
         25:e0:cd:18:bc:08:3b:49:dd:09:41:d7:c1:33:3e:3c:46:ae:
         eb:23:cf:04:e0:24:6d:b1:ff:d8:a6:03:5b:e5:d2:3d:75:61:
         25:e9:84:4f:d3:39:3e:73:40:43:06:af:6f:14:74:f3:35:55:
         44:94:fb:76:b4:f3:49:99:44:ec:08:33:e5:91:f0:93:c5:9c:
         3a:a0:27:89:31:5d:a0:d7:a1:bd:53:c9:b2:c6:e3:df:61:25:
         f1:ec:8c:81:d0:d9:97:fa:4a:fc:0f:43:38:0c:61:09:3c:ee:
         6f:f1:92:12
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRlPvGKke2+FEMoDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl
MDIwMB4XDTI1MTAxOTAyMDAwM1oXDTI1MTAyMTAyMDAwMFowLzEtMCsGA1UEAxMk
ZWQzZjAzNWUtMGZhZi00MDEzLWFhNDYtZmQxODQ3MTYzYzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/xlXGsILHk2YTJJb1vZRKqGzeq0hFQNUco6
c4d41zNf53HfxLLXNZhNUr2+M1DRCJl4G1MsSUtFz+lvhoBI2H8mzVusW0UNIzqP
BsGV3zx0P22qchb/Egw/Z1zEna/Sqb41qWCan8bvXJ1uG33rUyTmiOBWICsqDUKM
BjeZcZcL7DFPQ81IETHebWDmfTRIN6G9SU0JLMFu+QhtV0wOn3YzVZa5MZtJXhZ6
mzRayLM6iQp1ivj4lxmDR0wQA1zww3iuQkPHddOa+r/nnoKObfWtk5NecgQvsiNg
YVZgmhc0RgH9f6Y13ztI/A/7CT9uR6qRRZQq6TS5vHI1+SHQ1QIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFE4qyishCGXomFoctkw6f0ExsKWmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl
ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00
NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy
NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2
ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz
MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh5JZ/jgtryDRPfOxIYpwM
ox6WngQCG9YojZsDDkm4hzZD/E0ZmcS9LBk+Ux2O8kT9xIaZNRoNDXBvUm5BwxDw
PmrOdSnYzKJuAtc4TJis5+fw0XjdOsBBI1Q61fycv1fVM4MW00XVuhWZQlzmCk21
ft2lQllzKHrIHaQNz+qt52qRY9hPRQiUR1iRVhGH+S8l4M0YvAg7Sd0JQdfBMz48
Rq7rI88E4CRtsf/YpgNb5dI9dWEl6YRP0zk+c0BDBq9vFHTzNVVElPt2tPNJmUTs
CDPlkfCTxZw6oCeJMV2g16G9U8myxuPfYSXx7IyB0NmX+kr8D0M4DGEJPO5v8ZIS
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:44 2025 by rpki-client