Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
File:                     8a57b69a-d683-4350-83d4-e449c0242b7d.mft (raw, json)
Hash identifier:          2TN5s3grQfZrUxsH7Gms6smbL32Xzw9/iyI40f4Z0q8=
Subject key identifier:   D0:87:1E:A3:03:D3:06:05:0F:AC:9D:3B:1D:6E:59:07:F8:63:2F:60
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Certificate issuer:       /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial:       010D0C9F4328584B93AD0526A310F7F00A808580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
Manifest number:          010D0C9F43285846F40ADE3C011D281CFA9669B8
Signing time:             Sun 19 Oct 2025 20:00:03 +0000
Manifest this update:     Sun 19 Oct 2025 20:00:03 +0000
Manifest next update:     Wed 22 Oct 2025 20:00:00 +0000
Files and hashes:         1: 456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (hash: Nnp3C5WdWE8duluTRqsxbEbo0HWxjPldjooToeLUjeM=)
                          2: 80ca88fd-748b-398c-994d-51d5dfc053ba.roa (hash: 3qoIgTFiytxYNehtHKOMHKPts5MvCPrXVW/lKkmZmtc=)
                          3: 8a57b69a-d683-4350-83d4-e449c0242b7d.crl (hash: zQXPlSqebL+CZvq2oKQC0aoW6Y5sSthaLLpG9mWJ0Ls=)
                          4: ec69835c-0929-34da-8360-1c7309443e7a.roa (hash: BpOheb/iqMBH/CmiSy7wdYT/9b0K2T5T3II03omIzcw=)
                          5: fb852d4e-c641-3f9b-9b30-7dd2284f817c.roa (hash: n1mOYSEi6zNr+E57vKn3cEkBcObJHzKMzzNffgatKYI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:93:ad:05:26:a3:10:f7:f0:0a:80:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
        Validity
            Not Before: Oct 19 20:00:03 2025 GMT
            Not After : Oct 22 20:00:00 2025 GMT
        Subject: CN=304a6a2e-7253-40c6-a445-146f3dcefd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:f1:80:ae:75:79:50:28:fd:e4:cc:22:70:
                    e8:46:97:db:48:b9:b9:0a:31:34:e2:77:ad:de:1c:
                    88:1c:61:eb:78:60:f1:ec:57:ba:c2:a6:54:13:55:
                    02:e2:8a:ce:55:68:eb:be:5c:47:ce:66:22:41:31:
                    31:71:a6:b0:16:fa:29:ef:a0:6d:1e:3e:7d:c4:c2:
                    52:28:6d:c6:23:08:da:5d:fa:96:70:ee:f2:89:cf:
                    54:e2:25:be:fd:19:3f:9b:01:8c:5f:98:20:b5:62:
                    c8:8f:36:51:18:d1:53:88:90:4b:ec:d4:85:ba:91:
                    a6:58:c9:ca:af:4e:26:75:b9:7c:29:4a:3a:98:dd:
                    77:a8:d0:ec:02:b3:9a:af:39:50:1a:de:34:db:2a:
                    ea:d1:27:ce:48:b8:3f:40:b6:b4:c2:c6:fa:0a:3b:
                    d8:64:c5:07:3e:bf:4d:fa:53:a0:c8:1b:8e:05:ba:
                    33:9c:f1:cb:e0:e5:ef:7b:31:fd:45:db:30:96:0e:
                    eb:e5:3b:6f:55:a1:64:e7:bd:02:92:18:2e:9e:82:
                    0a:78:d0:bc:2d:8b:8b:e3:ce:47:2a:2e:b9:ea:8f:
                    9d:a3:8a:cc:9e:be:76:d5:87:4c:9f:de:4b:63:0d:
                    8a:66:17:74:fb:36:b3:56:47:1f:87:d8:45:04:68:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:87:1E:A3:03:D3:06:05:0F:AC:9D:3B:1D:6E:59:07:F8:63:2F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:8a:27:db:72:61:09:ad:37:ae:cc:9b:46:83:19:26:b6:
         4e:01:a5:e4:9a:23:78:9b:84:ee:79:68:65:1e:b8:d5:b6:ad:
         46:d0:0e:e3:3f:1b:72:a3:39:ed:9d:3a:ce:6c:46:58:6b:40:
         fa:c3:4d:81:61:5c:49:80:b9:e6:79:fd:a5:1c:15:36:39:a8:
         be:c1:07:31:25:f2:a3:cf:8e:fa:dc:81:27:4d:19:63:71:7b:
         35:b3:2b:f1:8a:ce:bf:db:18:5d:8f:42:f1:28:47:48:dd:3d:
         ae:ce:5a:23:09:f8:45:05:9d:e7:9e:8e:9b:da:24:18:45:8e:
         56:ac:7d:df:9b:e1:3b:06:34:3f:f8:bc:e1:1e:c4:ad:38:5d:
         ae:08:6c:91:1d:7c:d5:da:17:fc:fc:d4:3d:ed:05:4e:0a:ab:
         fc:2d:e5:4f:76:3d:cf:9a:1a:6e:b4:55:9b:ac:ee:32:d4:3a:
         b0:89:5d:57:a7:23:ea:0e:38:5e:22:f8:22:05:3a:ed:b3:be:
         95:e6:6b:e9:7f:64:6a:37:ae:c0:b2:a0:dc:1b:54:d3:3e:46:
         1a:86:ce:88:76:d9:82:b1:e1:c2:6b:2f:be:4a:18:a3:0f:83:
         f3:e6:21:ce:31:4d:83:13:76:c4:83:5e:af:ee:0a:ad:d4:c7:
         0f:ee:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:33 2025 by rpki-client