Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
File:                     cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft (raw, json)
Hash identifier:          NJAOvX7t66PaR5cU5wCaC2R1Mip2aoggmL8qG2UJwmc=
Subject key identifier:   C8:F5:3D:43:B6:6B:C2:C2:BB:D3:18:F6:5D:CF:74:0F:A0:2A:45:45
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584B92FA55C40316B651E7C73B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
Manifest number:          010D0C9F4328584234FC80F1FA5751FA45558AAD
Signing time:             Sun 19 Oct 2025 14:00:03 +0000
Manifest this update:     Sun 19 Oct 2025 14:00:03 +0000
Manifest next update:     Tue 21 Oct 2025 14:00:00 +0000
Files and hashes:         1: 45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa (hash: C1ccot6opjYWFlKaYQ3MgBHErwl/oWwgJNLmcWzg+m4=)
                          2: 45b4cca8-304a-3829-8684-121363defde7.roa (hash: +BaOxAhyGu9KXYbf6AglBz+Jltqlec3d4KIpwwPZ1FM=)
                          3: 56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (hash: gk5iLIscUzw5KOljueEKHiH0O/7D4E5UFbKKDkbT8DY=)
                          4: 722de295-886e-3bd9-9689-25f93d52f388.roa (hash: lAqS7BwPNP31qlQla3xk/DV/KpwENOZVcVJp6VWW82A=)
                          5: 7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa (hash: 9G9u+he0ag29FBj4IKleRVoWRk2umZEkQt+yLfwF63o=)
                          6: 9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa (hash: /PMBlHKR8oqReMaIR//QHmJ4tHHi+d904wA34/P0b9k=)
                          7: b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (hash: WqnZjKfjqbDlXwxgzejlA2XjgHpT35U3X6RAHQzhb4g=)
                          8: c8028626-644a-36ff-94f2-e2b51d0032be.roa (hash: Im89FekRooFbDPlgScrKgppfmqLgwVnl4210sEgM/QU=)
                          9: cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl (hash: GBEHlVvQkLrVfUip57IiZwTmRivYs4E4Ylh1Fipnvgs=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:fa:55:c4:03:16:b6:51:e7:c7:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Oct 19 14:00:03 2025 GMT
            Not After : Oct 21 14:00:00 2025 GMT
        Subject: CN=0076dbf5-0398-4719-8759-207aeb443f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:fe:4f:22:fd:27:51:50:0f:bf:96:b7:04:
                    ba:c1:1e:ab:7b:be:78:22:d0:fa:26:b9:8b:fc:4c:
                    8c:b4:44:3a:22:92:46:15:7e:1d:70:b4:0e:c0:3b:
                    71:ee:c3:61:ae:1a:d3:73:4d:84:04:3d:1d:6e:62:
                    8d:75:11:4f:8c:7d:cf:24:f5:24:3e:51:d7:3b:10:
                    41:cb:00:8a:6a:68:6e:c2:5a:ba:03:c2:46:01:4e:
                    8a:8a:c2:65:ee:d5:e3:78:bd:21:0c:a9:f7:2c:87:
                    ab:68:ba:c3:38:97:a9:02:95:be:8b:d0:73:fc:cb:
                    dc:c8:f9:69:40:90:38:ae:bb:c4:59:02:e3:5e:20:
                    62:3a:64:ba:0f:28:c3:03:30:3f:1d:0f:26:79:1a:
                    7e:a5:4b:08:3a:16:b0:d2:25:10:71:60:51:9b:a7:
                    91:d7:1c:4d:a8:40:b9:e4:a6:93:ee:e9:f4:ac:57:
                    d7:04:45:76:9d:b4:50:65:6d:2f:11:c7:a4:eb:d9:
                    b5:99:a4:68:3b:9a:99:44:39:5d:d9:f0:cf:65:c0:
                    3c:22:58:fd:3c:be:80:3b:5f:1d:2c:25:16:2a:d9:
                    d9:45:2e:f3:1f:c6:d5:88:74:d4:71:ed:16:1e:4e:
                    2e:f7:07:04:5f:9c:78:43:d4:e6:c8:15:f9:c1:92:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:3D:43:B6:6B:C2:C2:BB:D3:18:F6:5D:CF:74:0F:A0:2A:45:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:b2:df:af:e8:a1:a7:0f:95:62:82:a4:3b:2e:d8:9f:64:
         53:b5:74:88:ec:07:b0:8e:26:f3:14:f0:99:a4:95:90:c2:9d:
         ef:92:e3:bf:e9:7b:0f:4c:b3:f1:33:04:44:f1:da:3e:1b:55:
         74:f5:d0:b3:24:ed:a4:4a:89:d3:41:cd:b7:47:fd:2b:83:6d:
         1c:8c:f3:12:1c:e7:8c:c0:90:e5:5c:3a:e8:89:f4:eb:ca:a6:
         1d:63:99:09:d7:4b:59:64:f9:32:36:20:c2:b9:e9:98:66:31:
         b5:8d:75:a2:de:16:49:d9:ff:a3:8a:fb:fb:37:07:ae:10:0a:
         93:5a:d9:cc:28:b9:8f:e3:a4:0f:32:03:b0:f8:ee:9c:38:b1:
         89:b9:97:2a:c3:a4:2f:bd:0a:db:12:ca:e3:cd:1a:95:d2:bd:
         f1:1d:65:50:91:db:62:10:79:a5:8c:f4:ae:e6:cb:34:56:87:
         44:b9:c8:ca:27:af:6b:26:99:1f:ab:ff:ea:47:2e:2b:4b:a8:
         eb:e5:cb:95:23:94:c9:28:08:ac:0d:c7:a4:41:4d:52:a2:7c:
         05:4a:85:b4:bb:94:a2:3c:63:66:e2:5d:4b:76:20:b8:15:d5:
         26:e0:3e:b6:53:db:52:f7:d9:34:4a:c3:a5:95:89:aa:1b:c3:
         60:b5:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:53 2025 by rpki-client