Manifest

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
File:                     5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json)
Hash identifier:          dstHln2Mmw8oD6SAhQ6BsPJZAPI4J1jWr0oy7MK+nNY=
Subject key identifier:   E8:60:F2:3E:60:98:B1:01:43:82:5B:19:E8:E8:A1:9D:2D:21:09:4C
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Certificate issuer:       /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial:       3A8B620DED05601F4CCE7978A1729D4822CF8AFC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
Manifest number:          0889
Signing time:             Fri 21 Aug 2026 12:32:35 +0000
Manifest this update:     Fri 21 Aug 2026 12:27:35 +0000
Manifest next update:     Sat 22 Aug 2026 16:15:35 +0000
Files and hashes:         1: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: njOGwandjc3Nu7uEFKZOGzd3PG31lbjBYErmQsz8swo=)
                          2: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: UA31leNR+0mj8/zdmcjnYvU1v4hTPJ5jiqPEKStBAY4=)
                          3: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: jbMUD8UxhBCZnxEMR5BRGXYMTKz3FSqJjbwVaWABIzA=)
                          4: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: FP2GcPl1oqzQ+eRkIyENNz9EPh4eTbzn4nru1plQMo8=)
                          5: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: 1pb6iRZh2u+VRf6t/MOcNiNfWkPg0JFXwGKHzeC9LoI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 16:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8b:62:0d:ed:05:60:1f:4c:ce:79:78:a1:72:9d:48:22:cf:8a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
        Validity
            Not Before: Aug 21 12:27:35 2026 GMT
            Not After : Aug 22 16:15:35 2026 GMT
        Subject: CN=E860F23E6098B10143825B19E8E8A19D2D21094C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:e1:fb:b0:b5:4a:87:4e:d3:74:3e:1c:64:
                    05:ab:2c:09:29:b9:89:04:23:02:9b:6d:6e:c0:15:
                    7d:e9:29:a9:6a:16:f6:1e:ec:a7:cf:77:8f:2a:29:
                    69:f7:de:2d:f9:f3:1c:62:cc:96:e9:49:74:5d:9b:
                    29:a3:95:11:5e:f3:9a:8b:0a:a7:f6:ff:e1:a9:e7:
                    be:de:aa:82:cd:04:b2:f0:95:40:71:6a:cc:3f:4f:
                    6c:56:d0:11:14:b5:d1:11:27:29:f8:e5:37:63:e5:
                    93:70:3b:3c:ce:4c:b8:93:d3:64:4f:98:87:64:d1:
                    4f:e0:58:d4:d3:52:89:24:fc:c2:d4:84:a1:68:70:
                    ff:67:33:dc:6e:5c:f7:be:ab:8c:35:47:73:4b:1d:
                    75:34:1c:c9:36:d7:13:cd:6c:70:36:28:b1:20:bb:
                    23:0c:a8:eb:28:1d:ac:b7:50:3a:e7:98:7a:05:f1:
                    cf:cb:f1:b3:1d:1b:cf:37:84:6b:7d:aa:0b:97:8b:
                    51:5d:1d:43:cc:d9:d6:b4:29:18:10:5f:b9:64:af:
                    4b:51:83:7e:82:66:3f:ac:9c:e2:29:0f:ac:b0:00:
                    cb:ab:aa:16:f0:32:61:c5:3c:de:3c:e8:00:be:18:
                    2e:9c:b5:3c:bf:3f:7c:82:bc:dc:84:ff:bb:67:0e:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:60:F2:3E:60:98:B1:01:43:82:5B:19:E8:E8:A1:9D:2D:21:09:4C
            X509v3 Authority Key Identifier:
                keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:fd:5d:1f:62:38:b1:6f:3a:61:58:bc:b8:c0:ea:d4:1b:
         95:07:3a:15:e6:82:0c:3b:68:94:73:d9:b6:37:af:f7:03:66:
         c8:d3:32:35:56:aa:03:72:a4:07:60:27:36:96:00:6b:c0:e3:
         ea:0b:2b:e6:ca:88:02:26:a6:cf:12:b9:47:8d:28:c1:cc:07:
         e2:10:5a:12:83:79:f7:d6:e4:c1:5a:e7:b4:51:8d:9d:b3:92:
         93:3a:01:55:29:e0:24:b2:32:65:5f:35:0c:81:41:8c:9a:67:
         2f:5f:42:64:ba:ca:1e:fb:33:b9:fe:74:4e:f8:67:7c:4e:be:
         70:bd:58:db:c8:db:b1:1a:d4:6a:c7:e9:eb:cd:22:d4:2c:5e:
         1b:4d:23:fe:92:65:1d:58:5c:cc:c7:dc:ac:24:71:9a:25:ae:
         61:e0:47:8a:1e:f6:27:ab:bf:b4:ae:4e:46:28:b8:69:62:0d:
         b4:4d:ec:42:e1:a5:2c:ac:09:6b:37:31:84:09:c2:7e:4d:c7:
         73:0e:10:50:50:d6:f8:70:b5:04:55:0f:44:7b:07:a0:0c:6e:
         61:27:95:bc:a9:12:0b:4b:a7:1b:98:22:3a:75:92:fa:25:57:
         75:85:6a:18:4b:5d:9e:e6:88:b5:c4:d0:13:19:89:3b:49:a6:
         c0:c9:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----