Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft
File:                     d5df2e7f-8e83-432a-8c27-5546944dda4b.mft (raw, json)
Hash identifier:          hNYB2an3izHIqtXxBFtcH6uRPPqb1xjiuDGmVRj3fk8=
Subject key identifier:   7A:7D:C6:D3:F2:37:A6:F3:09:71:40:B3:EA:42:86:CF:86:77:77:8A
Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C
Certificate issuer:       /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
Certificate serial:       010D0C9F4328584AF308E5A61B8E8D324EBAD800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft
Manifest number:          010D0C9F4328584073A845C567032135470525EB
Signing time:             Sat 23 Aug 2025 07:00:03 +0000
Manifest this update:     Sat 23 Aug 2025 07:00:03 +0000
Manifest next update:     Tue 26 Aug 2025 07:00:00 +0000
Files and hashes:         1: 2acf3f1b-eacb-3746-939b-0407dc034a39.roa (hash: 1r8XAEtKgmgKpDO8cOXIF4Lqn19AIGCA+7he0TVv7Qw=)
                          2: 38cff7ac-79e5-37d1-8a91-3327b27ea983.roa (hash: VVyLMwRqXzCLqsxTcQ/4mapL9YfCbR0BCKz/GWHjedY=)
                          3: 3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa (hash: rbgDiozHij5u2twZXMHMm4rhRN0P+Ie88lMaEFAiTAI=)
                          4: 46619392-b89b-30ad-aaa8-1b908d91e183.roa (hash: 03L21GYXsJz0kF3a0cPCgVNZsObTZrHwGIuCHKbck84=)
                          5: 7356e457-670a-3033-a781-b9366fd8a801.roa (hash: UgLtX/HV4mtm9rAxMxXHI8bCIs1pin0uP4dmrm+OSzU=)
                          6: c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa (hash: 0KXM+w+nqdu/usGF/VFLksaO4ci/T4MTF6tlREKvbiQ=)
                          7: d5df2e7f-8e83-432a-8c27-5546944dda4b.crl (hash: qBEXHY2MO56Js0ppRxxonJL63NPgghzmGO5V3q3eZ0Y=)
                          8: e239f5a3-1376-3dea-9101-a7a67a437145.roa (hash: JkH6hbAwRMGoZ1Llps/Y/0En99475X5xyQGdzdyknS4=)
                          9: fc862717-a664-3367-88cf-5e0ecaaad117.roa (hash: bdEWfnA14RQQRlCcmv985r81nrSP9TyFI1iYlvTj52s=)
                          10: febf101c-3f09-3c92-9b49-efea54bc2cfe.roa (hash: i/MZcsupuj49OQt9QRQKe4/q1usC836mCQZzX8E0qhE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:08:e5:a6:1b:8e:8d:32:4e:ba:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
        Validity
            Not Before: Aug 23 07:00:03 2025 GMT
            Not After : Aug 26 07:00:00 2025 GMT
        Subject: CN=f83f53af-970e-45cd-9dfc-0756656ff075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:0f:90:25:df:ec:2f:3b:d7:e1:f1:e3:ac:
                    12:dc:73:6b:45:fa:3b:54:38:15:bf:5e:ed:ed:e7:
                    ef:97:e2:2b:4d:cf:b6:be:9f:9a:d1:d1:fa:6d:52:
                    a3:36:e6:7e:f7:e5:f2:46:ac:33:36:04:4f:57:82:
                    d4:01:d6:fc:98:77:81:17:2b:bc:33:e0:31:ec:68:
                    d3:56:aa:2a:b3:d7:43:60:bd:98:a2:86:bb:8b:dd:
                    ed:74:01:ec:c8:be:a7:22:89:94:cf:0c:70:76:e8:
                    d4:a7:a6:ee:97:70:9a:22:75:91:bc:12:e1:93:11:
                    3d:9f:07:4d:9d:5b:48:dd:b3:6e:26:58:6c:f7:73:
                    73:73:b4:98:1f:aa:e5:90:93:ec:24:ca:bd:00:44:
                    92:eb:0d:85:3d:68:69:e5:68:19:d8:86:b1:a2:43:
                    27:72:5b:d6:0b:6b:5b:6c:63:ed:93:15:b8:58:f0:
                    d8:bf:a5:42:39:dc:0a:75:6e:bf:ea:4d:dc:fb:09:
                    fd:ef:f8:93:ca:4b:28:03:2d:a4:82:7b:b1:61:55:
                    d5:42:11:58:c1:2f:d1:29:6f:60:b3:ff:c1:81:cd:
                    cd:44:45:e3:23:94:87:fe:51:f1:9f:32:d7:25:9b:
                    34:63:de:e7:3b:53:2c:a0:d5:73:c3:60:b9:5e:09:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:C6:D3:F2:37:A6:F3:09:71:40:B3:EA:42:86:CF:86:77:77:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl

            X509v3 Authority Key Identifier:
                keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:76:bb:df:c4:db:5b:1d:d1:08:33:86:be:08:d3:96:b0:39:
         b0:e9:bb:60:3e:92:2c:aa:cf:45:98:bb:ee:3c:75:4a:26:ef:
         11:d1:c3:bc:d8:01:00:41:47:d9:49:2e:82:f6:94:18:40:03:
         5d:17:d1:3d:80:30:0c:c3:02:e5:f2:0c:dc:60:48:ba:8b:dc:
         20:d9:c4:55:49:31:fa:ea:05:2c:5a:d5:a9:2d:c0:d2:66:a8:
         f7:59:e5:c2:8d:49:0d:43:23:00:4a:dc:80:b1:89:7a:b1:30:
         66:bf:d3:48:35:49:59:d8:3b:ec:20:ec:85:49:7c:c0:9d:ed:
         d5:20:02:ed:f6:85:93:61:c8:01:af:99:44:f1:94:f3:1e:f5:
         cf:64:79:c7:8f:6e:8e:89:1f:fc:82:78:a1:a6:17:af:ea:5e:
         53:38:c3:1f:e8:60:71:49:3c:02:b5:c7:5a:17:31:d3:84:94:
         62:b8:c9:d6:1d:19:12:9c:21:c6:9a:fc:c3:87:fe:13:70:5d:
         5b:b3:82:c7:6f:b9:30:02:8c:4c:e8:b7:54:0e:27:07:4d:d2:
         18:97:98:95:7a:c4:a5:45:2e:f9:19:00:a5:ec:2b:d5:f7:be:
         10:2b:c8:aa:ec:5b:15:33:e0:c7:4d:8e:0b:64:cb:e2:f1:86:
         a5:26:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:01 2025 by rpki-client