Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
File:                     A28D273309C9FC76554249545D29D3880680EA7F.mft (raw, json)
Hash identifier:          Asu3TDdH4c6bQCNojV9KrB3S6TOpmQ0GcDXtUx7VCgo=
Subject key identifier:   3D:BE:38:4D:97:B0:12:E6:50:F2:B2:26:93:2B:6C:E1:1D:5D:62:C3
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Certificate issuer:       /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial:       05249F32CAB32EFCD3EDD6715E75F7C1F2927BF3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
Manifest number:          05E9
Signing time:             Tue 21 Apr 2026 21:19:52 +0000
Manifest this update:     Tue 21 Apr 2026 21:14:52 +0000
Manifest next update:     Wed 22 Apr 2026 21:57:52 +0000
Files and hashes:         1: A28D273309C9FC76554249545D29D3880680EA7F.crl (hash: loA8Cr/4LLtjC3vIG7PqoB5UDexr7yxivRl4JR3ROv0=)
                          2: 3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa (hash: iZHkY5jxw45iaqeZfLgcBYrAeF1BwgF4jZCglcnryLg=)
                          3: 3230342e36392e3231372e302f32342d3234203d3e20323132323338.roa (hash: OlakEeZuk99l1TtQj81PRJbqXn8zbs/vlyq2mNIwnck=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:9f:32:ca:b3:2e:fc:d3:ed:d6:71:5e:75:f7:c1:f2:92:7b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
        Validity
            Not Before: Apr 21 21:14:52 2026 GMT
            Not After : Apr 22 21:57:52 2026 GMT
        Subject: CN=3DBE384D97B012E650F2B226932B6CE11D5D62C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:ae:91:31:b6:84:74:01:15:22:20:ef:19:
                    b1:03:ee:65:ca:04:ee:e5:dd:03:0b:73:b5:db:12:
                    63:42:e0:21:e4:c1:e3:07:17:c0:16:35:0f:5e:c8:
                    e5:3d:49:6e:78:6d:57:c5:3c:c8:08:2a:d4:ad:cc:
                    97:86:49:64:d7:6a:a7:78:93:84:e7:ce:5c:65:8e:
                    97:f5:b1:69:30:9a:22:cf:3e:a2:2d:1a:d0:ff:f5:
                    6d:9e:9c:d4:62:28:16:7a:19:e9:d6:f4:69:7a:d7:
                    59:82:d8:af:e0:69:2c:a9:c3:5b:f9:67:87:4b:8e:
                    ef:6a:65:fb:9e:9d:c9:26:9c:d1:6f:02:dd:16:90:
                    f9:de:3c:f5:d5:88:dc:62:af:f6:ae:12:85:d1:3a:
                    a7:33:e3:91:7c:90:87:1f:6c:c6:1e:7c:6c:44:56:
                    db:ce:07:4a:f0:b8:28:a7:35:1a:cd:e0:05:b3:3e:
                    26:11:74:b4:ae:7a:ea:a8:da:f0:b8:f2:ae:46:a8:
                    bb:6f:5f:73:8d:7e:df:b1:b5:b9:73:1b:87:e4:76:
                    2e:91:3a:ef:59:6a:3d:77:94:69:10:ba:26:d7:04:
                    8b:92:bd:2c:19:fc:87:7d:11:c8:47:b6:0e:1c:58:
                    8e:45:d7:b9:97:5a:b4:bf:12:61:29:88:4e:fb:2a:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BE:38:4D:97:B0:12:E6:50:F2:B2:26:93:2B:6C:E1:1D:5D:62:C3
            X509v3 Authority Key Identifier:
                keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c2:03:6c:98:19:41:d7:27:0a:09:f1:18:ed:08:41:d4:83:
         11:1c:4c:6d:43:c6:15:14:68:13:8c:2d:83:25:ed:44:02:63:
         79:d2:6a:6e:3a:0c:69:5b:fd:1c:d2:af:57:40:36:b8:3c:2a:
         64:3d:f7:da:b4:eb:e5:8a:2a:ed:1b:6f:c1:08:9f:e4:f6:4c:
         c3:e3:ea:8b:52:b7:b3:57:9c:37:10:f6:bf:07:6d:44:2f:ce:
         34:2d:9b:96:04:53:65:4e:73:69:b7:4a:ef:9f:4d:ed:c5:58:
         2c:aa:e1:b3:74:08:67:11:c9:ce:16:53:f7:c6:40:5a:13:b2:
         1c:71:66:ba:3b:ec:4d:21:8b:33:0d:cd:24:dc:7e:fd:46:a2:
         91:bb:39:d4:03:50:e4:38:75:42:6c:21:6d:08:5a:ba:a7:67:
         5b:15:27:7a:8a:75:96:52:94:3f:87:5e:04:3c:b4:09:e9:df:
         e5:dc:e2:3a:37:f9:c3:1d:9c:00:fe:e6:49:f6:f3:f2:3e:6a:
         94:13:08:b2:e9:44:f8:4f:38:0a:23:bd:01:2f:a3:c9:9b:40:
         a0:66:6e:c1:3c:67:d7:55:6d:9b:e7:32:a5:82:95:b5:0a:9c:
         96:62:6f:89:2c:51:29:56:5d:14:cb:bd:8f:bb:16:2c:21:87:
         87:a3:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:38:56 2026 by rpki-client