Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
File:                     cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft (raw, json)
Hash identifier:          6xV7kxIG8c2m8k69U8Y/vXBMShtnc0qnDPj0OKGaw2c=
Subject key identifier:   6E:64:76:AD:4F:F3:29:4A:63:C3:DB:BE:12:83:C6:A0:31:48:3D:9C
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584B7444CEDB246625B2000B9D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
Manifest number:          010D0C9F4328584234FC80F1FA5751FA45558AA0
Signing time:             Wed 08 Oct 2025 14:00:03 +0000
Manifest this update:     Wed 08 Oct 2025 14:00:03 +0000
Manifest next update:     Sat 11 Oct 2025 14:00:00 +0000
Files and hashes:         1: 45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa (hash: C1ccot6opjYWFlKaYQ3MgBHErwl/oWwgJNLmcWzg+m4=)
                          2: 45b4cca8-304a-3829-8684-121363defde7.roa (hash: +BaOxAhyGu9KXYbf6AglBz+Jltqlec3d4KIpwwPZ1FM=)
                          3: 56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (hash: gk5iLIscUzw5KOljueEKHiH0O/7D4E5UFbKKDkbT8DY=)
                          4: 722de295-886e-3bd9-9689-25f93d52f388.roa (hash: lAqS7BwPNP31qlQla3xk/DV/KpwENOZVcVJp6VWW82A=)
                          5: 7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa (hash: 9G9u+he0ag29FBj4IKleRVoWRk2umZEkQt+yLfwF63o=)
                          6: 9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa (hash: /PMBlHKR8oqReMaIR//QHmJ4tHHi+d904wA34/P0b9k=)
                          7: b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (hash: WqnZjKfjqbDlXwxgzejlA2XjgHpT35U3X6RAHQzhb4g=)
                          8: c8028626-644a-36ff-94f2-e2b51d0032be.roa (hash: Im89FekRooFbDPlgScrKgppfmqLgwVnl4210sEgM/QU=)
                          9: cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl (hash: e+RUkf9jl6wGMMLyUtge1IdBhp8VeqDrHCAJ5lzIRjc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:44:ce:db:24:66:25:b2:00:0b:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Oct  8 14:00:03 2025 GMT
            Not After : Oct 11 14:00:00 2025 GMT
        Subject: CN=a2911e18-35ac-49e0-a166-03e6728f9619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:ab:37:07:5b:70:32:51:35:02:0f:34:79:
                    5b:27:50:0a:59:5e:3c:79:fe:1e:3a:31:13:79:8b:
                    c7:68:1d:49:39:03:aa:05:db:f0:eb:60:7d:32:c4:
                    ce:16:26:e5:64:cd:c9:97:03:2b:7e:25:7e:49:e9:
                    49:55:7f:34:53:d3:fd:e8:0e:21:7c:8c:ac:99:57:
                    7f:8d:c8:43:c6:6c:b8:df:a6:02:e4:66:f4:c2:16:
                    e8:37:11:c0:dc:b9:de:96:19:18:f9:fe:6d:44:c9:
                    21:b9:a0:71:7a:61:70:74:f0:1b:40:00:99:9e:fb:
                    5e:d2:cb:1f:36:5a:40:2b:d3:38:2d:c5:f3:fa:4e:
                    b4:2c:d6:f1:93:5f:6e:bd:d2:b9:c5:f4:76:1c:18:
                    8e:ec:dd:0c:72:7c:f6:11:ee:4b:a1:3b:12:a4:fb:
                    27:b8:9a:df:97:6f:74:fe:63:a9:77:83:f1:e1:d1:
                    2c:c6:f8:4e:82:4b:34:51:c9:99:e5:95:8d:66:31:
                    6e:b5:68:c7:aa:58:42:a6:ce:76:42:da:5f:ea:9a:
                    d5:6c:e7:e7:a9:87:32:70:74:65:02:1b:9c:79:a1:
                    1f:5e:e8:96:9c:b8:d2:dd:d2:59:5a:15:8a:23:c3:
                    c1:94:8c:5f:3d:21:d3:00:69:4c:64:50:89:23:0f:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:64:76:AD:4F:F3:29:4A:63:C3:DB:BE:12:83:C6:A0:31:48:3D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:9c:14:04:38:55:b0:a9:89:ff:74:47:d7:f1:c6:06:41:
         29:19:83:5a:14:78:29:24:7b:57:cb:0d:40:41:57:35:7b:da:
         be:a7:46:58:11:ac:23:65:9b:cd:07:bb:ae:1a:4b:c3:5f:ce:
         df:32:52:6e:89:d7:57:ee:b6:ee:d0:62:8c:0a:c3:ae:2e:f2:
         75:26:69:e0:a4:37:ba:23:c5:ad:a3:06:6e:4a:aa:a1:63:6d:
         58:49:d0:7d:84:4f:e2:c7:bd:c2:19:96:31:d2:35:82:35:3b:
         e6:63:fe:e3:11:bd:05:48:58:08:92:0d:23:8f:3d:4c:5d:77:
         6f:7f:f2:9d:c1:39:f9:c4:27:c6:39:a1:43:3c:e5:00:ec:9c:
         bb:f2:63:3a:3c:ce:18:c9:3d:32:f6:d3:fe:15:e7:58:eb:55:
         c4:50:3e:b9:28:77:83:8c:b3:92:42:2b:70:9e:55:0e:35:ce:
         15:29:a2:cf:92:e3:31:5c:2f:c7:8e:29:54:60:e6:c6:85:09:
         4f:3b:3a:bf:c1:1f:64:8b:c9:4f:33:d4:84:d9:ca:05:44:c4:
         93:80:6e:4f:75:7f:98:ae:c5:a4:c7:7b:4e:8d:d0:e7:45:c4:
         f4:d0:01:ba:55:d7:79:cd:16:76:5e:f5:08:53:74:55:78:44:
         ed:fd:72:be
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0RM7bJGYlsgALnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx
MmJkMB4XDTI1MTAwODE0MDAwM1oXDTI1MTAxMTE0MDAwMFowLzEtMCsGA1UEAxMk
YTI5MTFlMTgtMzVhYy00OWUwLWExNjYtMDNlNjcyOGY5NjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+rNwdbcDJRNQIPNHlbJ1AKWV48ef4eOjET
eYvHaB1JOQOqBdvw62B9MsTOFiblZM3JlwMrfiV+SelJVX80U9P96A4hfIysmVd/
jchDxmy436YC5Gb0whboNxHA3LnelhkY+f5tRMkhuaBxemFwdPAbQACZnvte0ssf
NlpAK9M4LcXz+k60LNbxk19uvdK5xfR2HBiO7N0Mcnz2Ee5LoTsSpPsnuJrfl290
/mOpd4Px4dEsxvhOgks0UcmZ5ZWNZjFutWjHqlhCps52Qtpf6prVbOfnqYcycHRl
AhuceaEfXuiWnLjS3dJZWhWKI8PBlIxfPSHTAGlMZFCJIw+JowIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFG5kdq1P8ylKY8PbvhKDxqAxSD2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0
MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvY2RiNDJmN2QtYTJhNS00
YmEzLTljNTctZDVjM2VlMjUxMmJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj
NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1
MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz
ZWUyNTEyYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfepwUBDhVsKmJ/3RH1/HG
BkEpGYNaFHgpJHtXyw1AQVc1e9q+p0ZYEawjZZvNB7uuGkvDX87fMlJuiddX7rbu
0GKMCsOuLvJ1JmngpDe6I8WtowZuSqqhY21YSdB9hE/ix73CGZYx0jWCNTvmY/7j
Eb0FSFgIkg0jjz1MXXdvf/KdwTn5xCfGOaFDPOUA7Jy78mM6PM4YyT0y9tP+FedY
61XEUD65KHeDjLOSQitwnlUONc4VKaLPkuMxXC/HjilUYObGhQlPOzq/wR9ki8lP
M9SE2coFRMSTgG5PdX+YrsWkx3tOjdDnRcT00AG6Vdd5zRZ2XvUIU3RVeETt/XK+
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:12:32 2025 by rpki-client