Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
File:                     8ce84fb2-c539-46e7-8212-12b9730afeba.mft (raw, json)
Hash identifier:          IWSK9EArgitiDo5ekFo1ScSYd3CuEkjOHSb8JQ5uEmU=
Subject key identifier:   92:E7:B7:69:BD:81:F3:93:E9:CF:46:B8:C9:4F:56:9F:78:A1:92:38
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F4328584A95A0CC90D8232AF6996B2140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
Manifest number:          010D0C9F4328584073A81E43F6C3346BB6CAD44D
Signing time:             Sun 20 Jul 2025 20:00:08 +0000
Manifest this update:     Sun 20 Jul 2025 20:00:08 +0000
Manifest next update:     Tue 22 Jul 2025 20:00:00 +0000
Files and hashes:         1: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (hash: GT3OUUm6zE7bCrtRnHHnMW5PrYTV7ZdWwxqHVnCHivE=)
                          2: 7750dbea-23be-30cb-a5c2-247a4b108e61.roa (hash: 1WVCQc1RpS3I3WZsvBvtmPHN++mGHQHCdSSezYz002Y=)
                          3: 8ce84fb2-c539-46e7-8212-12b9730afeba.crl (hash: Jqd3WsOPGnIB7MRRAfBD3sm76wDFSpvaoY36Nx5bUYE=)
                          4: e65cd8da-dfed-3bf8-831a-62b853f3c844.roa (hash: DBxmdAE+y2pweJF+ehxRvI3GXA1OCkYCmJAJsTGpocw=)
                          5: efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (hash: 8BkTOta6CWcYelmVWTRsnRYCmv9qyXSr3XzmPZlmCSI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:95:a0:cc:90:d8:23:2a:f6:99:6b:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Jul 20 20:00:08 2025 GMT
            Not After : Jul 22 20:00:00 2025 GMT
        Subject: CN=ff1343a0-25bb-49d3-9ae7-f242dcc7da13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:44:01:ce:89:a8:38:9a:52:42:18:11:1e:
                    95:d7:d4:3d:3c:5f:c4:06:01:ac:76:22:8e:43:10:
                    ef:95:4e:0e:0f:99:de:56:5f:24:0b:66:1c:5a:9a:
                    03:7e:d9:bc:2c:81:27:50:4d:1d:86:7f:84:8a:19:
                    aa:9a:94:2c:26:b0:4e:ce:7f:ef:ec:31:e5:3e:e0:
                    6b:21:0f:d9:4c:79:2e:36:49:ea:58:72:c8:b6:a1:
                    45:e1:31:fd:88:4f:8c:b8:b7:4c:42:07:18:4e:f7:
                    77:86:0c:a0:b7:03:d4:31:91:ec:e3:a0:53:8b:1b:
                    30:8f:ac:a3:ae:ce:a4:21:41:e5:ce:fe:c6:0a:35:
                    cf:bf:d8:c1:24:1f:77:69:8f:1e:8b:35:c3:a5:9f:
                    53:75:75:97:d7:6c:ea:21:42:47:58:2e:30:43:38:
                    4c:79:3d:31:f0:7d:54:4a:5c:48:e8:53:36:df:5e:
                    3e:49:41:2b:a2:ca:35:d3:6c:db:4f:83:4e:a9:0b:
                    f5:e4:74:d4:ba:62:20:13:13:56:c2:e8:f6:67:62:
                    4b:7c:b1:35:9a:0c:e7:b9:e0:d1:ca:96:19:65:d3:
                    f0:b5:93:0b:47:b1:2d:ac:9b:6c:b1:14:9b:5b:c7:
                    3d:64:97:3d:39:76:a7:d8:04:19:b9:20:45:ec:2a:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E7:B7:69:BD:81:F3:93:E9:CF:46:B8:C9:4F:56:9F:78:A1:92:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fc:16:d3:b6:58:91:fd:90:b8:34:ea:85:d9:5b:f9:29:63:
         61:06:15:10:a7:cc:ff:5b:52:e6:f0:dd:fb:05:fe:f9:ef:1f:
         13:de:41:b4:23:e4:22:1e:61:5a:63:aa:5f:3c:82:90:45:4d:
         c9:94:38:ca:e3:b5:19:94:39:ad:dd:93:ee:2f:5b:0b:b3:ef:
         61:be:72:43:d8:70:16:68:65:a4:4a:13:21:ca:20:72:f1:ef:
         02:c0:4c:7b:14:87:fa:9c:f5:a3:06:5b:62:64:ed:57:e0:9b:
         f9:f9:a0:ff:8d:34:57:b9:c8:f0:05:cb:ac:e6:75:12:7a:93:
         ba:d4:fd:e7:7c:6f:fe:cb:f9:b2:ff:f8:38:6e:6a:99:3b:78:
         5a:4c:96:e9:9a:f3:f6:2b:b7:2f:eb:7b:32:e1:03:a9:ca:76:
         ac:a7:ba:b4:55:e3:34:90:59:47:31:42:fb:c6:71:dc:b5:9b:
         25:c3:fd:5a:dc:8e:6b:89:7c:5d:fe:17:6d:f1:23:2f:a1:58:
         21:a8:13:a4:b0:75:cb:a3:c1:f3:e6:9c:01:e7:04:98:b7:da:
         4e:ca:71:77:8e:cf:42:3c:11:00:42:91:11:ad:06:98:c5:47:
         ec:1a:06:64:29:3e:7c:ee:d4:8c:3e:dc:7a:a6:44:e0:58:29:
         5a:75:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:34 2025 by rpki-client