Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.mft
File:                     a7c20d98-d772-40a7-b671-02859bf02e23.mft (raw, json)
Hash identifier:          STn9diWBsVlbLoSg63NFcGGNXzlZbxVmFeDmS8lYJSY=
Subject key identifier:   1A:61:AD:67:40:88:CB:68:86:C2:14:AC:C9:7E:15:76:57:3A:71:99
Authority key identifier: 7E:83:65:54:DC:C0:CA:CE:FE:AB:92:8D:F1:C2:7C:18:ED:45:E2:9E
Certificate issuer:       /CN=a7c20d98-d772-40a7-b671-02859bf02e23
Certificate serial:       010D0C9F4328584FD1323DCD7CDE273858B2DD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.mft
Manifest number:          010D0C9F4328584CD72212F836A291422988767E
Signing time:             Thu 12 Nov 2026 16:00:24 +0000
Manifest this update:     Thu 12 Nov 2026 16:00:24 +0000
Manifest next update:     Sat 14 Nov 2026 16:00:00 +0000
Files and hashes:         1: 2c0b8073-2352-3375-b9ce-f17098880d67.roa (hash: SeGaSl04KPePukcebeb5UR1K42C5LXPb2N4rmYmD+Og=)
                          2: 7dd289db-ca9c-38e2-a109-e2c9432f752e.roa (hash: Y18WQvC+XjpZc6n+zvNdq2v2vRkWDYs+3Gx5xMKq1Pk=)
                          3: a7c20d98-d772-40a7-b671-02859bf02e23.crl (hash: gqMoYS5yRoKZ2b/KV1OHJHGNXye+cKo/hyKW2/cMu1o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d1:32:3d:cd:7c:de:27:38:58:b2:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c20d98-d772-40a7-b671-02859bf02e23
        Validity
            Not Before: Nov 12 16:00:24 2026 GMT
            Not After : Nov 14 16:00:00 2026 GMT
        Subject: CN=1ae042a3-54af-49fe-910c-d0c1d39ae0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:de:33:e9:c1:2c:66:4c:38:2f:a6:e6:93:
                    66:87:3e:74:a0:9b:af:b8:5f:74:a9:fb:4d:12:9c:
                    2d:eb:09:cb:24:f8:18:95:d4:68:a2:33:08:ad:d4:
                    8e:20:b8:86:72:6f:d2:b2:31:f0:5d:8f:ea:2e:9f:
                    af:b9:94:1c:75:36:ff:d6:b7:e2:2c:d5:48:4d:40:
                    e7:9d:8c:cd:7d:f6:de:89:39:97:4c:37:31:62:61:
                    01:6d:ad:b1:cc:eb:e8:d1:06:22:25:f2:e5:7e:cf:
                    a1:84:6f:92:49:29:5a:26:7e:cd:ae:4b:2f:fc:61:
                    4e:f2:13:f2:6a:27:7e:75:ab:9e:27:ad:91:3b:04:
                    48:96:8c:20:25:d2:32:2e:55:44:f2:01:a9:9e:7d:
                    73:5e:ad:1e:88:ea:7a:b5:4b:0e:4b:70:94:f4:18:
                    83:57:9f:18:4a:bb:91:f5:79:be:db:9a:bb:05:16:
                    dd:e5:a7:b7:4e:d6:a0:8c:6e:47:a5:ea:36:d2:83:
                    87:a2:a6:0e:11:03:50:ad:02:ad:b4:4b:14:ce:b3:
                    3c:8a:a7:65:55:3b:6d:35:b2:4a:cd:b0:2b:48:c1:
                    a2:58:58:be:37:49:18:d0:8b:ae:dc:be:09:1b:06:
                    b3:23:c9:48:f6:be:e1:2b:d3:fe:68:0c:ae:63:65:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:AD:67:40:88:CB:68:86:C2:14:AC:C9:7E:15:76:57:3A:71:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.crl

            X509v3 Authority Key Identifier:
                keyid:7E:83:65:54:DC:C0:CA:CE:FE:AB:92:8D:F1:C2:7C:18:ED:45:E2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:4d:c9:03:0c:ad:fa:88:f1:97:73:da:a2:d9:cb:be:c3:
         ef:9f:08:6f:17:81:91:8d:7f:fc:6d:16:a7:09:68:cd:66:d4:
         a0:a9:85:29:cb:f1:c1:0c:3a:f3:8a:1d:58:91:2c:6a:b5:55:
         db:b6:8a:66:6e:e0:13:6b:7e:5d:7f:f4:4f:7c:70:7d:a4:ea:
         2f:fd:6f:98:4b:1c:72:70:5d:c9:29:63:56:cc:a1:fa:83:63:
         5c:2b:a5:5b:5f:71:1f:99:c0:ee:1d:6e:a5:53:93:c7:6e:f9:
         76:ab:31:e3:da:cf:16:f6:0c:6e:fb:09:35:83:aa:93:8e:2c:
         28:89:23:0a:d9:85:0a:b1:98:6e:28:44:96:fe:fa:ea:60:bd:
         6c:b9:5e:48:a0:8b:71:cf:fe:03:d7:33:b1:83:53:2d:0e:0f:
         0f:ec:bc:94:34:0e:dc:b5:7c:b2:cc:fe:11:a1:28:b0:98:cb:
         61:12:d2:fa:6f:6b:e1:13:fa:fb:47:2c:4a:7e:f7:3c:4b:d4:
         54:79:17:7e:76:76:db:9a:33:a5:d0:98:a0:33:52:05:94:7b:
         c1:bf:2a:a0:26:1e:ce:15:b9:2f:82:9f:73:2d:30:5c:9c:66:
         9c:f4:91:45:72:59:9c:51:6c:85:ef:dd:4b:98:96:7e:40:00:
         ad:b9:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:45 2026 by rpki-client