Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft
File:                     cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft (raw, json)
Hash identifier:          5nyU7MpTWI5mhxki8LKX1Fm2euJRLxFcyMTVv66PCbg=
Subject key identifier:   00:FA:21:A4:80:98:40:88:0D:98:70:51:EF:D4:1B:18:A1:E3:C4:A4
Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30
Certificate issuer:       /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
Certificate serial:       010D0C9F4328584F53916A31C91BA4966BC6C040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft
Manifest number:          010D0C9F43285848BA9D4A601B163560813C5A74
Signing time:             Mon 28 Sep 2026 16:00:25 +0000
Manifest this update:     Mon 28 Sep 2026 16:00:25 +0000
Manifest next update:     Wed 30 Sep 2026 16:00:00 +0000
Files and hashes:         1: 232bd181-e2ca-3b10-b390-d882a9d6cd18.roa (hash: pQnhSB1RisXolFEwqG123bVonRnXTPC6Ttc9DUUcctc=)
                          2: 71d6f9d1-e76d-3468-8445-02e48e603140.roa (hash: HoxC+jJ9kOFo3Q29oko2WRUELdrhxoe8lJDRst5GUb8=)
                          3: 89497639-b474-3049-bf36-ec4bc0d6f185.roa (hash: H7zazRkurHShJNKJrYVcqGaJyeDbcBDtFaDVfjdglTs=)
                          4: 8eb3c343-41f9-3606-b3f6-c7cc032b7e6d.roa (hash: P51Cl0QwE70PVozLbk8zbkfZc1TlJsOXuIbwukvO7tw=)
                          5: cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl (hash: gQUv5QXr3fqCZEG8dASlMJ+0UzSchHl/goTe+0cxdhw=)
                          6: d54235af-aa37-3c21-bbb6-6ba016f827d4.roa (hash: LgXzT1HvdvP9OOU1ryw1UNM84CMsiASX9Wr5R+ley5o=)
                          7: e0a0d271-b27d-32b7-b503-6c51a1bb3eb0.roa (hash: uIRrtgAAiFHwYc4M5Tn/K16x8m0ki/6k3PbHt6ttmss=)
                          8: ec5e1d7e-537f-3f7b-b967-50e7a71f7127.roa (hash: dtdNnx9vLcH1TwLoLoeVHLs7j7dQEOX1xFjQwh9huas=)
                          9: f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa (hash: ZChzfTQCNKpJ3Df5rdlswE1q/9cZFfpkLOZeGUox2Xo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:91:6a:31:c9:1b:a4:96:6b:c6:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
        Validity
            Not Before: Sep 28 16:00:25 2026 GMT
            Not After : Sep 30 16:00:00 2026 GMT
        Subject: CN=51b65f44-c9e9-4ee9-b455-5a90cd868f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:06:6c:75:7f:3b:d4:4b:12:3e:e5:d3:9c:
                    ca:19:1a:73:69:76:75:d8:d6:65:17:52:e8:c6:35:
                    08:01:09:67:02:d0:af:bc:8b:92:a2:b4:7c:0d:a5:
                    25:ea:cb:62:c3:80:7c:43:9d:ab:7e:3e:d3:b0:62:
                    88:b5:0d:43:8a:6a:5d:20:7f:56:52:a1:32:57:09:
                    ec:2b:0e:af:af:12:55:4f:c1:b0:e8:24:9a:8d:9b:
                    21:32:06:e8:99:67:11:ae:87:7e:6c:3a:fa:3e:59:
                    31:30:35:c8:4b:33:0c:2f:d0:b6:c3:fb:0f:03:b9:
                    58:40:19:61:40:48:a1:c2:c6:e2:dd:9c:f7:68:81:
                    45:16:fe:cd:4f:b4:2b:fb:1b:10:33:dd:de:1f:b3:
                    17:27:b7:3a:67:f2:8d:93:ef:99:31:60:ac:0e:45:
                    d3:55:52:67:bf:7e:71:2d:a5:60:01:97:0c:a1:66:
                    e5:4b:93:94:1a:f7:7f:d8:59:99:83:5b:e4:e3:d3:
                    06:24:09:0e:f2:87:18:33:d8:fb:53:8e:8a:1e:28:
                    07:78:ac:e4:fe:77:d4:af:83:ad:58:1e:6b:f4:5d:
                    12:82:ab:e7:f9:76:5e:b5:d6:26:c2:23:41:8f:a5:
                    9f:39:7b:ea:89:b7:c4:ae:88:f8:d6:d2:04:c0:88:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FA:21:A4:80:98:40:88:0D:98:70:51:EF:D4:1B:18:A1:E3:C4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl

            X509v3 Authority Key Identifier:
                keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:a9:e4:eb:be:f7:69:18:27:0f:cc:bb:20:06:f4:77:a8:
         26:aa:09:ca:63:b6:a1:75:34:6c:f8:d7:9d:16:9e:4e:b4:f7:
         ca:3a:bf:e1:08:d7:85:d7:f6:38:13:5a:06:4b:ba:4e:44:f3:
         46:98:f3:01:57:72:66:ef:71:1b:60:33:7a:ba:20:8c:ab:ff:
         30:20:7c:f5:ec:f0:d8:f7:38:61:10:ce:40:07:1b:75:bc:fc:
         21:dd:fb:8d:04:de:cd:0d:2f:38:47:8a:df:8e:35:0b:60:52:
         ee:ba:83:b5:55:0d:3c:e2:8d:37:b6:e3:38:68:8a:01:f4:78:
         9f:9c:e4:a2:eb:c0:42:96:14:6c:eb:5e:b4:8f:f5:a7:af:b8:
         3b:e4:57:8a:0c:66:e8:e6:5a:e8:48:95:ad:d3:d9:f7:b6:cb:
         49:79:e5:df:85:5c:e0:11:fd:61:23:29:dc:0e:81:08:7b:aa:
         72:8f:ab:c2:7a:68:1b:0e:72:7d:34:4b:78:a3:93:bc:29:e1:
         59:49:d0:82:a8:dd:c5:b7:d5:2c:53:ce:a5:a7:26:61:79:1b:
         9c:af:af:35:68:61:1a:56:43:0e:de:8c:6a:5d:45:a4:83:68:
         2f:89:27:ff:f4:4e:66:4c:d8:ad:3c:eb:02:72:8d:72:77:0b:
         c8:17:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:45 2026 by rpki-client