Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
File:                     2aa438c9-0cbb-4364-946d-9714249a8222.mft (raw, json)
Hash identifier:          GrS5ndp2YBFwqe2Jps+3pnJ83uflxz7ZPpeynaFrzAg=
Subject key identifier:   5C:A0:97:4A:56:E3:4B:57:33:9D:24:0A:CF:5B:F6:F6:74:08:1A:F1
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584A5C2A35D08069F031491C4200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
Manifest number:          010D0C9F4328584073A8414D08717372FF9C5BB6
Signing time:             Mon 30 Jun 2025 06:00:08 +0000
Manifest this update:     Mon 30 Jun 2025 06:00:08 +0000
Manifest next update:     Thu 03 Jul 2025 06:00:00 +0000
Files and hashes:         1: 0752d384-9147-3c2d-9b3e-23a76dab9594.roa (hash: HlK1jsG5/qtKVDUAuXLR+zOMSaTFNSYlz90n8shlnqA=)
                          2: 0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa (hash: ZwS+1us633Cep6u7ZZdM1g4XHdPoFrNnPkfH8iFcNu4=)
                          3: 131c2c20-6fc7-3ee4-acbf-db942fd1d953.roa (hash: +UH3q6kWbs5u7S93m9DgQ4r43oGqqvdvDdFyL74rwRI=)
                          4: 132e7b72-2d06-316b-afaa-74c07ae106c5.roa (hash: BNU3HuT2Hi7Gcs3ZKWGvf5lkmFzQbBLMNqDF2GTbca0=)
                          5: 161e6543-bf38-3c32-ad77-69abe4fd5d39.roa (hash: mvXot1dozHM0v1AoVsGjJsV4y5D2+CC2k1kYU2xb6W0=)
                          6: 1f202cfc-b516-3550-a3cc-5f6cbe1d2dd9.roa (hash: SOb6ItjYmvaR8FAnh1AlRFO89yFzTyMpFJTYZ3LclvM=)
                          7: 2aa438c9-0cbb-4364-946d-9714249a8222.crl (hash: iIB7bMqCpt9dwug7UgBJW6yoL3DSY8be+1wHxJRbXwI=)
                          8: 2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa (hash: 97ziKHUZRIyF/dXY6NhZOlz45ef0mF/lz/TRTyHGl3w=)
                          9: 2ef77872-7d74-3cc0-ad82-83a97b8beb59.roa (hash: /kCqDMcT1BUrYVNehgNm86GXVFc0RQALkIi0ZHQI980=)
                          10: 494e73dd-7440-3e35-96e4-fe4c12732c15.roa (hash: MtrWx40YUJduCV+Lluf+gp05evW0+BPfi3Um5fxWMC4=)
                          11: 6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa (hash: 2EsrLLNaTy3WVs5GL1pQn1V3FdwEZhuHmzWDsVE1CDY=)
                          12: 6f18fed9-7206-3b98-a215-4a6fd4fc83e1.roa (hash: c9nnqAOHb4Yk6u3io87VJuhV7zL/HU3C5PPSD5aNwpc=)
                          13: 718f2464-23e7-383c-b84a-3d8810e8e6f4.roa (hash: HVGF4/kl1kFI5gjMuL6q4mzs/XDCOgxMyy6n+KrBrDQ=)
                          14: 72c3722c-57ef-39ea-9d4d-df56729ff278.roa (hash: xE4Yf0Pcse+Z31qP2EW6V6V+PQuxRsTs2bQZgZ2lvzs=)
                          15: 74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa (hash: uH40yWMI3F9vZ+cw85/Y/nUM5YZRgJONLvxtC2+E/dU=)
                          16: 7561f783-99b2-39b4-98a2-673b561e784d.roa (hash: rMKuC6lFlnArMdooxdnw+cpzUPybalsgthXJduiVjQE=)
                          17: 93405565-7458-3107-a127-035a4de55c06.roa (hash: Kx95vpwBPcbLUbvN/6kT3WM+L3z2kQLumtzd8FOt9OY=)
                          18: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (hash: SWoiYf2Ncp5zOtQ9xxY6LOyY/P8Zpb6Ac3JGYulKTzs=)
                          19: cb6f706c-eeb1-3e7a-8d91-fa880dd2300a.roa (hash: mU11w7ZIpRWTmy5q+eq9CxM0OAwg/Tw6A8S+jOmcKGc=)
                          20: cb90c805-a9ab-3bdd-afdc-0a026851da93.roa (hash: HLMsectDwNqVwc/G3CbJ9U8tWUnrU2pWfHpw5EfNK+I=)
                          21: d183da02-01fd-3ce0-b7e9-14abdd41a450.roa (hash: fvfj4n/iQdKWGM6VYEPZbPYwMmzjctaQ5kCEZ1qREro=)
                          22: e3d82341-289c-3a6e-b275-a759634f1b4a.roa (hash: EwTuiNQNi8DVwnnfOJOGKTnlZk8ezQ5QgQATaTLC1Ng=)
                          23: f323cd83-3916-3544-8481-841cd81601cf.roa (hash: MTe9fM5zcGCyJYypjpm/I4++xRUGgwcKk2aGo2+HXec=)
                          24: feb1d56a-e512-3d2d-add6-ec252e4f36af.roa (hash: wD+aroTD+xsjPnGtyfn+GtvljOPtlHz+yZ5kHrQV5Sk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:2a:35:d0:80:69:f0:31:49:1c:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jun 30 06:00:08 2025 GMT
            Not After : Jul  3 06:00:00 2025 GMT
        Subject: CN=3308f469-4bb8-4522-bb61-a669ce8e725f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:a6:f2:de:72:ca:d7:db:b1:5c:d9:54:14:
                    11:a5:db:ca:5a:5b:81:68:7c:16:c9:53:01:b7:30:
                    1c:91:4f:4b:e6:b1:5a:15:ec:22:f7:33:b7:3b:d6:
                    11:b2:9d:17:b5:cf:91:68:35:a1:44:f9:f0:bc:bc:
                    48:dc:cf:72:6b:b5:6e:7e:dd:2a:b3:a9:86:f8:62:
                    e8:60:99:2f:87:01:ee:7b:96:29:f0:49:4b:c3:be:
                    39:13:cb:52:95:a9:74:71:82:88:c8:50:3b:b7:24:
                    21:31:b0:5f:24:81:4f:b7:9a:2c:94:54:13:eb:3d:
                    0e:42:18:b5:fc:29:9b:ae:e0:cf:75:53:1c:10:10:
                    d9:db:a4:23:63:92:ad:96:df:83:06:72:11:17:fc:
                    2c:01:41:37:bc:9a:ec:5d:03:c9:c0:bd:da:16:df:
                    ff:e9:48:79:f9:6f:1b:87:a5:97:34:ce:07:4d:78:
                    af:e9:0e:bf:2b:8e:3c:34:bd:cc:4e:cf:58:1d:37:
                    c5:5b:cd:09:93:b5:c6:27:ff:5d:b9:3f:e6:68:6b:
                    06:bd:ca:02:6f:91:d9:40:5f:dc:d7:a4:28:45:79:
                    b1:4e:5f:74:cd:ff:97:07:84:f3:c1:7e:5a:83:01:
                    7e:01:58:05:3b:fa:2d:fd:ba:5a:22:55:77:1f:51:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:97:4A:56:E3:4B:57:33:9D:24:0A:CF:5B:F6:F6:74:08:1A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:28:f9:ed:58:7f:32:67:bc:45:c8:a8:33:ef:94:31:9b:
         38:4c:fc:8a:af:5b:de:80:9a:1b:a7:a9:1c:cb:ce:e6:d2:2f:
         e3:bb:f0:95:3a:68:d5:83:45:0c:53:ac:7d:d7:c1:a7:27:35:
         87:fa:6a:75:7b:53:72:4e:44:d7:ce:03:96:f0:59:f1:9d:ab:
         84:90:db:be:04:72:e7:fb:74:ea:e9:5a:57:65:57:0d:bc:3b:
         dd:7b:c3:85:4d:da:ef:12:07:af:56:e4:69:b2:2c:1c:f6:55:
         17:0b:ad:78:c4:e7:57:a2:71:6b:5f:10:83:b5:16:cc:c7:1b:
         93:e2:a0:1b:df:44:1a:e1:5e:8d:fd:da:de:cb:16:a4:2d:41:
         fd:64:90:db:2c:9e:67:a5:85:8a:69:da:26:bf:89:dd:a0:c2:
         1b:1d:74:94:1c:ed:bd:d5:dc:49:f6:49:d3:ff:7e:ae:93:56:
         cf:2c:01:d0:3f:ab:8a:cc:08:3c:b4:ad:9d:b5:10:3a:bc:79:
         6d:71:9b:08:b1:c4:0d:1d:bc:25:b1:b3:bf:e6:70:d1:46:87:
         df:52:37:a4:df:fa:3a:3c:a6:54:1c:fa:94:ae:d2:bd:32:66:
         47:e3:08:89:33:86:e8:ef:e3:f4:1c:ad:32:16:fd:9e:44:fb:
         03:9c:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:48 2025 by rpki-client