Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
File:                     43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft (raw, json)
Hash identifier:          FkQGHz3gKbPXWQ1NCOZMUnwlM4xWgMPfgKjyMpD2mSg=
Subject key identifier:   82:58:03:57:03:4B:5C:41:7E:D8:FA:92:DA:BB:2F:4A:78:0E:35:7C
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       219955065CC7F225ADC9D6A123DB60EFCFD64640
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
Manifest number:          86
Signing time:             Wed 08 Oct 2025 08:56:46 +0000
Manifest this update:     Wed 08 Oct 2025 08:51:46 +0000
Manifest next update:     Thu 09 Oct 2025 10:08:46 +0000
Files and hashes:         1: 326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (hash: VpgS+RML1f6D9HT2iGquOB/7Rg+/aypKQBnS7XagYpo=)
                          2: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: TNhkpfquy4RSYkNr/6TI4JM4K1aI8WDh3EI9bDH5/tI=)
                          3: 326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (hash: 8iHgh4mRlo/rwO1Bw19ggiPQiQEw7HmgXiK7jodqthQ=)
                          4: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: DZRukcmd95/CGy0FlZlIkAqKif6bdCvjwCU/Yk6I/eE=)
                          5: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl (hash: taGOkn3hDqlrwrjLWtvWmfH+wRBWz5AObQl9jw53Ezg=)
                          6: 326130353a646663313a313030373a3a2f34382d3438203d3e203534323138.roa (hash: mW+xJRpA1JLCAhpFJnSztJR3X1zJVko4+BIjilS/nmA=)
                          7: 326130353a646663313a313030353a3a2f34382d3438203d3e203534323138.roa (hash: 2a8dpyz5EAHNvXCqv6ifQ4B0VTk/TpWgxKbk/+FwaDo=)
                          8: 326130353a646663313a313030343a3a2f34382d3438203d3e203136353039.roa (hash: ru4Yr5RUV+7D5LNisUxhVc3n5JvyKoCUlzd333tpYgc=)
                          9: 326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (hash: kOf0Y/COmTzTMU6cdvvc0ZRdNI7Zl9i67Ci7JrJ9pQ4=)
                          10: 326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (hash: KTyh2SEV5HU612WTdMvSAjCnScbC24rbm18nZVQRDCM=)
                          11: 326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (hash: Mm4b5uiTirSzAclhjwrvqH8mQa5vVh+TWe3AWlTU2YA=)
                          12: 326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (hash: EepqtJ/1AIBSbcvfmTBNRqAuwz/KXjpikda3abvNVMo=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 10:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:99:55:06:5c:c7:f2:25:ad:c9:d6:a1:23:db:60:ef:cf:d6:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Oct  8 08:51:46 2025 GMT
            Not After : Oct  9 10:08:46 2025 GMT
        Subject: CN=82580357034B5C417ED8FA92DABB2F4A780E357C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:6e:cd:38:54:27:b1:7c:88:02:27:aa:f1:
                    ac:93:ee:13:20:22:d8:34:60:d4:c5:2c:d9:40:8f:
                    c4:9b:ef:85:1e:25:2c:2b:b4:e8:ec:7a:63:01:d5:
                    65:9d:1f:cc:02:40:d1:dc:28:3e:ca:e0:13:49:6a:
                    a1:c8:3f:bd:2a:21:c8:29:1d:68:55:81:df:49:49:
                    54:d4:25:ca:d5:ed:ba:f3:95:4a:06:4f:f9:13:59:
                    91:e9:68:8a:dc:fa:1d:63:ea:2a:72:e3:32:5a:fc:
                    3a:29:10:7f:0f:9a:c7:00:f3:cf:db:41:d1:fa:f9:
                    ec:61:0f:d8:7c:96:1c:d0:0e:86:39:28:d9:1d:64:
                    13:bc:61:10:08:2f:54:45:2f:bc:35:28:92:42:d2:
                    57:5b:a5:f9:ff:93:40:67:69:48:58:24:7f:03:c3:
                    3b:ed:37:a7:c8:bb:9a:24:7e:82:88:da:0e:06:4a:
                    84:00:bc:5f:7d:2e:c0:9e:e7:99:11:04:4a:8d:57:
                    1b:cd:a7:78:42:b1:b9:e9:ba:24:3f:94:e8:15:7e:
                    dc:eb:61:8c:73:14:1a:e4:30:37:42:f5:b2:0e:fd:
                    72:00:23:00:83:9d:26:7b:8e:de:2a:be:a4:56:bb:
                    86:0d:27:71:1a:34:07:b5:90:b4:c7:52:85:fb:d4:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:58:03:57:03:4B:5C:41:7E:D8:FA:92:DA:BB:2F:4A:78:0E:35:7C
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:eb:f6:f5:ab:45:2f:f3:c4:ae:a2:e8:b2:d0:8b:a2:14:d4:
         c4:69:32:d2:55:6e:93:97:2d:96:08:fc:97:85:c9:31:1e:18:
         c9:99:e8:21:3c:a7:36:ca:07:96:1a:77:4a:27:57:f5:d4:b2:
         e4:5e:ee:22:fb:80:9c:cf:f3:4e:93:03:f1:ce:51:ab:ac:85:
         48:10:fc:74:77:6f:93:57:ed:6a:ac:8f:d5:94:de:01:be:23:
         6e:e3:27:6d:39:ca:80:95:07:a6:a8:85:13:a0:40:38:2a:66:
         08:43:71:b8:9d:b6:02:f4:fe:24:c9:de:32:f9:45:db:2b:e5:
         4b:3d:6b:c2:6c:53:aa:f2:16:d9:8d:a8:9a:67:ce:6d:a4:bd:
         83:6e:f8:db:1b:1a:77:ab:a7:2f:dd:7f:54:86:fe:d8:e6:e1:
         09:3d:92:a3:c3:98:6f:7b:49:bd:3c:2e:6b:26:df:82:45:ec:
         91:02:c0:26:1d:93:1c:5a:7d:d1:93:86:34:c8:f3:0a:90:f9:
         37:0e:d1:09:c8:a2:3a:a1:c7:bd:4a:d8:d9:24:81:69:b3:ef:
         67:6c:b1:8c:fc:a6:dd:40:4f:89:4c:7d:38:88:12:d0:72:af:
         ce:fd:a6:dc:18:82:cf:0b:88:61:be:3a:a6:26:2f:f4:0f:08:
         5e:eb:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:24:49 2025 by rpki-client