Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
File:                     28df346d-3f66-4555-b2ab-67f450efdcb3.mft (raw, json)
Hash identifier:          wfY6DvhrI5W2X+gYDVxh9GBQ5RqzQAzAQvgsqxjXdZA=
Subject key identifier:   92:BC:FD:A6:23:9B:C1:A1:20:07:E7:85:85:18:A5:97:3C:CB:2B:42
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584A9AFA918A34C9CB4E4BE17F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
Manifest number:          010D0C9F4328584073A82078D918FE8A6AD453F8
Signing time:             Tue 22 Jul 2025 18:00:03 +0000
Manifest this update:     Tue 22 Jul 2025 18:00:03 +0000
Manifest next update:     Thu 24 Jul 2025 18:00:00 +0000
Files and hashes:         1: 19707577-a550-35cc-9aa1-82013a93096f.roa (hash: DzNhYcmMC4kBycPVxCremsEJVAtxRHaHXvvBXhwC+bs=)
                          2: 28df346d-3f66-4555-b2ab-67f450efdcb3.crl (hash: Ilz33euH/GUcJAnyYX7oy7xL1HZGqAVWB+NiJjWOaKY=)
                          3: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (hash: SGh/KC1TqS0ggXN36hnqZOT/eI1uUQHjV5SwdOSxXG8=)
                          4: 4dd8305e-e04a-3ce1-a306-cad4284760dd.roa (hash: WHf+0cyExGhIfcANb8sOuOx6VwHsmJhGfqioEFcO8e8=)
                          5: b640e40a-1d4d-3423-99a0-815a476ab16e.roa (hash: tqMCRHDudybm5LF8wunbDhRg0CS0+CVCKBjM2KTt/sc=)
                          6: c1836498-6659-3b7d-bcab-d8155977037b.roa (hash: RUCQaXIAukfvv7mYyVeRcPXtxkkYsx8W4v2eiQFbp80=)
                          7: c54ce3c1-e074-3de5-90e7-41d6edeb36c2.roa (hash: tioEwgkjVkgY0wrbdjBGWv4hgHU+LPoYOUB3r5y3A6M=)
                          8: efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa (hash: oUz6RDod28ua08ovJZIpPEzt81NUVDRNMJLn/82dt1o=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:fa:91:8a:34:c9:cb:4e:4b:e1:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Jul 22 18:00:03 2025 GMT
            Not After : Jul 24 18:00:00 2025 GMT
        Subject: CN=b5ce0e43-e7f6-4719-b5b7-ecb3da7b2d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:40:23:d9:42:65:5f:f9:01:80:bb:1f:42:
                    58:db:c9:fa:d0:da:bf:88:09:dc:0d:8b:f2:37:06:
                    b9:d0:70:7c:b9:cc:d0:3c:a9:ef:b8:2b:ca:8e:75:
                    96:07:89:0f:dc:a4:43:48:a8:8e:f0:97:b5:77:81:
                    7b:d7:9b:a9:d5:2a:56:81:9a:ea:75:a9:5c:ac:78:
                    01:39:0f:39:e6:fd:f5:b4:cc:f2:f8:fc:2c:55:d5:
                    e8:9b:5e:12:d0:72:3c:ba:87:76:26:f6:2c:91:dc:
                    6a:1a:b0:f4:93:a5:95:ec:aa:ff:cf:4a:83:fa:41:
                    67:39:1c:ed:95:c8:4b:f4:05:26:d6:24:5f:da:76:
                    fa:42:0e:bf:12:12:a0:bb:87:41:c8:c9:3c:89:0c:
                    6e:8f:d9:c2:8d:6c:5c:3d:74:85:e1:74:b4:99:fb:
                    05:01:7b:62:d0:8f:38:cb:fe:6c:a3:2f:66:95:8a:
                    b5:62:6a:07:45:c7:62:19:cf:a0:f1:49:86:31:76:
                    52:ca:8f:0c:62:cf:48:a2:6e:16:a1:c2:89:de:92:
                    d8:bc:0a:42:fa:04:41:2e:ef:d7:11:32:38:09:e3:
                    15:87:9d:5a:a5:d7:63:17:2b:1b:1b:f4:a4:c8:a9:
                    f9:a2:b6:f8:52:de:1b:95:4f:24:bf:85:6d:20:b8:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BC:FD:A6:23:9B:C1:A1:20:07:E7:85:85:18:A5:97:3C:CB:2B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:39:c8:e9:32:cd:e9:36:68:9f:6d:13:67:9d:3f:8b:6f:b7:
         2e:c2:1a:40:e6:65:70:e2:ef:9d:a3:7e:c2:7b:8e:25:61:cc:
         a6:7e:86:74:b8:a4:e0:ab:ff:0e:52:8d:e9:bd:ed:3a:b2:0e:
         d2:df:f4:a3:ad:9d:20:4d:6d:17:6d:fb:56:b4:72:77:0e:d9:
         3f:de:ad:33:95:59:13:4c:ec:e0:2a:f2:bb:28:04:23:9f:c0:
         6e:48:b3:87:d3:bf:65:51:ea:d6:9a:24:38:2e:c4:1e:df:7a:
         26:af:b5:30:95:db:2e:03:1f:83:a8:c7:5b:d7:7b:cb:b8:e9:
         f1:9c:c9:51:58:9c:18:68:5c:43:27:fa:a6:fa:ea:25:dd:e2:
         4d:c2:02:1c:a1:4e:09:df:d6:54:f1:d2:83:8c:a4:d2:9e:9a:
         37:22:67:8f:cd:f0:6f:c6:83:86:8e:59:9f:6b:a1:e0:4b:2e:
         ca:2b:d4:82:b3:8a:9f:32:7b:38:86:8b:bb:1d:7b:09:aa:39:
         a8:1b:b6:ff:68:f0:7b:62:27:a5:78:fe:bf:af:a9:9a:ee:e2:
         7f:e1:e5:ea:55:f0:d3:2b:e0:1a:13:d1:50:5a:3e:b1:9a:74:
         05:b4:87:70:1f:bc:28:f8:1f:db:ff:a1:c4:43:43:02:dd:1e:
         82:d5:da:ec
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqa+pGKNMnLTkvhf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk
Y2IzMB4XDTI1MDcyMjE4MDAwM1oXDTI1MDcyNDE4MDAwMFowLzEtMCsGA1UEAxMk
YjVjZTBlNDMtZTdmNi00NzE5LWI1YjctZWNiM2RhN2IyZDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ItAI9lCZV/5AYC7H0JY28n60Nq/iAncDYvy
Nwa50HB8uczQPKnvuCvKjnWWB4kP3KRDSKiO8Je1d4F715up1SpWgZrqdalcrHgB
OQ855v31tMzy+PwsVdXom14S0HI8uod2JvYskdxqGrD0k6WV7Kr/z0qD+kFnORzt
lchL9AUm1iRf2nb6Qg6/EhKgu4dByMk8iQxuj9nCjWxcPXSF4XS0mfsFAXti0I84
y/5soy9mlYq1YmoHRcdiGc+g8UmGMXZSyo8MYs9Iom4WocKJ3pLYvApC+gRBLu/X
ETI4CeMVh51apddjFysbG/SkyKn5orb4Ut4blU8kv4VtILgtawIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJK8/aYjm8GhIAfnhYUYpZc8yytCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm
MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvMjhkZjM0NmQtM2Y2Ni00
NTU1LWIyYWItNjdmNDUwZWZkY2IzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy
YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm
ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0
NTBlZmRjYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATOcjpMs3pNmifbRNnnT+L
b7cuwhpA5mVw4u+do37Ce44lYcymfoZ0uKTgq/8OUo3pve06sg7S3/SjrZ0gTW0X
bftWtHJ3Dtk/3q0zlVkTTOzgKvK7KAQjn8BuSLOH079lUerWmiQ4LsQe33omr7Uw
ldsuAx+DqMdb13vLuOnxnMlRWJwYaFxDJ/qm+uol3eJNwgIcoU4J39ZU8dKDjKTS
npo3ImePzfBvxoOGjlmfa6HgSy7KK9SCs4qfMns4hou7HXsJqjmoG7b/aPB7Yiel
eP6/r6ma7uJ/4eXqVfDTK+AaE9FQWj6xmnQFtIdwH7wo+B/b/6HEQ0MC3R6C1drs
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:10:53 2025 by rpki-client