Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
File:                     DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft (raw, json)
Hash identifier:          0G6gkUG/M3LkvoJvGtiWQxjA1jQ9GAAV3hmEaA2GtJs=
Subject key identifier:   5D:AD:F4:38:CA:C3:DC:1D:31:8F:25:9D:5D:4A:24:13:00:BC:3D:AF
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       5A2B146319117EE5DF6646D2032C8417548DC982
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
Manifest number:          0248
Signing time:             Sun 01 Nov 2026 17:58:13 +0000
Manifest this update:     Sun 01 Nov 2026 17:53:13 +0000
Manifest next update:     Mon 02 Nov 2026 19:17:13 +0000
Files and hashes:         1: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (hash: tEvWwOLW/xIMVWUZLbw1EkqAqKGWjuJd7ysb+4PNQ/I=)
                          2: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl (hash: ZiBkbwg2Eg7f0IPwP2acAaaeB5t2jk5Ux+/cRZKbvQE=)
                          3: 3136352e3134302e32352e302f32342d3234203d3e2036303739.roa (hash: 1xwUbX6vsIqWCN2+cEYDhgZLIRwOro7g3fzJdK8K3Xo=)
                          4: 3136352e3134302e32362e302f32342d3234203d3e203231373433.roa (hash: g9/b5dDRA0b9ag/fFEOU/I0RgQhx6ZVjJSFP9Jxzxqk=)
                          5: 3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (hash: nbRrPJ2RnV0VXIp6/TpKXkI2RYXGsFFYIwlzDz5fg9I=)
                          6: 3136352e3134302e32372e302f32342d3234203d3e20333937363330.roa (hash: 8Y5YaE15v1RYZl+9JziTsQUhHQyIXMCeP8MLnS3/bGM=)
                          7: 3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (hash: mBpMZRqA+M1/2QICKQg1IZo1Jr3sbm99OsHu/PLGEos=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 19:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2b:14:63:19:11:7e:e5:df:66:46:d2:03:2c:84:17:54:8d:c9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Nov  1 17:53:13 2026 GMT
            Not After : Nov  2 19:17:13 2026 GMT
        Subject: CN=5DADF438CAC3DC1D318F259D5D4A241300BC3DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:25:ff:6e:38:09:c0:ba:b9:81:3c:7a:1d:
                    c7:ea:bf:91:5e:3c:3d:dd:27:46:e0:91:57:78:76:
                    15:ea:dd:34:67:d4:1c:fb:6f:86:58:55:7c:d8:c4:
                    ee:21:56:77:e5:f4:2f:42:cf:3c:01:84:b3:b1:75:
                    39:5b:36:f7:5e:ab:21:58:96:9c:48:c5:b4:71:fb:
                    58:bc:26:ae:a5:f7:b1:8c:20:cc:3d:35:54:fd:2e:
                    93:c8:aa:e7:11:21:0f:39:7f:c6:a7:69:49:2d:b0:
                    7d:e7:95:78:c7:61:c4:f4:fd:4a:f9:d2:c2:ac:04:
                    fd:30:85:68:27:a7:66:56:e3:a8:ca:6f:7f:5c:45:
                    87:ca:f8:26:96:45:0b:36:a3:c4:0f:a3:f1:f8:16:
                    1f:fa:05:38:8c:a8:82:bf:57:3d:8c:d2:5e:5a:0f:
                    83:31:a0:fa:2c:0c:d4:4b:ae:36:ea:6a:c3:84:f2:
                    11:73:61:7c:6f:50:ce:48:a5:26:53:7e:56:6d:ba:
                    72:d9:42:ed:3f:4d:0a:96:55:73:47:71:87:61:88:
                    78:f1:d6:d4:d8:41:e0:18:6a:7c:56:ed:e5:a8:b8:
                    61:88:cf:24:c4:73:f0:2e:b3:1f:ee:44:c7:ff:ec:
                    00:2a:89:7d:bb:83:3f:b9:c1:b7:35:a8:d0:46:a4:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:F4:38:CA:C3:DC:1D:31:8F:25:9D:5D:4A:24:13:00:BC:3D:AF
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:08:b1:97:d8:d3:70:bc:d6:57:f1:0c:20:58:ed:c0:82:
         ba:72:9d:e2:32:ff:09:03:32:60:a4:e3:57:50:ca:d8:e5:97:
         9a:33:98:d1:3b:2f:be:4b:68:e3:01:be:46:e3:40:97:c2:69:
         a0:eb:5f:5c:73:f4:be:fb:66:17:bd:4f:85:d5:a8:23:69:35:
         c9:fb:ae:a3:c8:14:f9:45:5d:f9:b6:02:a8:0f:bf:67:da:bc:
         a2:58:ce:51:a0:b6:98:11:76:19:6b:ce:33:21:b5:08:00:29:
         e2:ad:83:b6:6e:11:fb:90:cb:90:82:e0:22:06:c0:65:e3:22:
         a2:e5:4f:33:a9:14:50:1c:d5:f4:e1:df:99:05:95:4f:1a:d5:
         d6:b3:25:d2:b0:48:ea:42:1b:14:b2:ac:ee:ce:29:13:42:e6:
         c3:8e:9d:b4:55:e2:ef:b8:ce:6f:33:80:76:5a:e3:52:c2:d7:
         5d:a5:29:be:be:84:e0:e6:f8:58:6c:f3:90:1f:e9:fb:4b:3d:
         07:b5:c2:a4:b7:6c:ed:a0:30:8e:02:e2:e4:7b:e1:6d:89:34:
         0f:92:94:a3:59:7b:11:19:71:8f:89:7c:1c:54:07:07:22:13:
         b6:75:c2:f3:66:84:9f:b0:8a:eb:a3:9a:26:61:00:06:d9:10:
         27:e7:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:26 2026 by rpki-client