Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
File:                     6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft (raw, json)
Hash identifier:          S6hQLz9bcDYHom6x5BK4GIT9Att+TtQKcVfhKzBFz/o=
Subject key identifier:   62:23:EA:73:41:16:06:6C:75:E3:C5:41:95:79:CE:1B:6E:63:CC:71
Authority key identifier: 6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B
Certificate issuer:       /CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
Certificate serial:       7EDF66B70D461BFDC20BA7A3BE3320351F161376
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
Manifest number:          A5
Signing time:             Thu 05 Jun 2025 04:02:31 +0000
Manifest this update:     Thu 05 Jun 2025 03:57:31 +0000
Manifest next update:     Fri 06 Jun 2025 04:24:31 +0000
Files and hashes:         1: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (hash: gmd4m0SeuJjWvfJO+FAdmNrRqnHVsJB1sR4hYLzeA2Q=)
                          2: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (hash: PAUZsioMtEm7PxJwzY2q0rE7BZSWPV/A+DJkY9MRxFw=)
                          3: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (hash: yyyoxGppzrPBpHyS7wtUfV1AEfqPV4X0yk1eLPwNlw4=)
                          4: 6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl (hash: etR2zS/sUqn2j6jB67urmLw3EdGlMG5wqwXH72unXTs=)
                          5: 326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa (hash: cWy6hH8z0Stz3hvANwE/cHPzw2sGZwonnP+PwrD+Iqk=)
                          6: 326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa (hash: ooX9djOw3RoLG7T1ZD2r7tMD8gSskVj80tCsBLS2uWY=)
                          7: 326130613a363034343a613866623a3a2f34382d3438203d3e20323134343935.roa (hash: Wmhlsy1MexasaVhl7oJHuMuquK34muLDpuJR88SeZfE=)
                          8: 326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (hash: BY6+GEhFD/PUqx1YR9dxLwyybbZCnXdYBuNKFYmfqPw=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:df:66:b7:0d:46:1b:fd:c2:0b:a7:a3:be:33:20:35:1f:16:13:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7D66C23141E779B5F49BDB30D99A15FC43891B
        Validity
            Not Before: Jun  5 03:57:31 2025 GMT
            Not After : Jun  6 04:24:31 2025 GMT
        Subject: CN=6223EA734116066C75E3C5419579CE1B6E63CC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:b6:81:46:0c:7e:cf:d4:20:52:de:52:e2:
                    21:9f:e8:98:7b:6d:54:c6:0b:4e:46:9b:4a:7f:56:
                    87:8a:67:d3:37:a2:4d:a5:6f:f8:57:8d:d3:ec:c6:
                    de:42:0b:23:84:ae:70:f4:f9:96:81:a5:45:98:ca:
                    aa:ee:7d:cb:c4:98:7a:b8:ca:e9:af:d6:31:91:10:
                    f7:32:7f:5a:50:8e:05:e0:e7:81:f1:5d:19:d3:d7:
                    9a:59:d4:10:8c:d5:d6:e3:2e:52:24:21:7c:1a:41:
                    a4:78:89:dc:c4:05:51:73:1d:bd:87:ce:c9:c9:1d:
                    f4:cc:ce:8f:52:ea:57:f0:3d:64:8b:d8:66:da:cf:
                    48:64:64:b0:69:51:f0:d0:d0:b9:8b:1b:04:d5:5e:
                    ba:2c:2d:5c:9e:e2:9d:7f:0a:a3:26:63:ce:fa:76:
                    e4:98:a0:32:4f:6d:bc:30:b7:83:ce:4a:51:b9:fc:
                    5d:b0:31:46:e3:76:75:f8:92:5c:1f:55:4a:97:8f:
                    04:df:f8:16:8b:8d:39:82:66:88:2f:33:cd:77:5b:
                    fb:52:24:71:a9:b5:ed:ff:3e:12:f5:52:4c:1f:93:
                    9e:ed:25:30:d1:a8:0b:08:cb:3d:9f:42:b1:a9:9b:
                    ba:12:0d:b4:33:e5:63:ca:a9:1f:87:61:a7:59:7e:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:EA:73:41:16:06:6C:75:E3:C5:41:95:79:CE:1B:6E:63:CC:71
            X509v3 Authority Key Identifier:
                keyid:6B:7D:66:C2:31:41:E7:79:B5:F4:9B:DB:30:D9:9A:15:FC:43:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/3/6B7D66C23141E779B5F49BDB30D99A15FC43891B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:94:6c:e3:3b:54:90:21:32:02:6d:10:74:a1:2c:a8:9b:fb:
         4b:2b:85:8c:d2:70:75:40:b1:56:d4:26:b5:f4:f2:1e:d8:74:
         ef:4b:a5:77:37:4c:2d:9b:b4:f9:fe:a6:42:d8:36:39:d5:c7:
         79:da:83:46:f4:5b:18:b0:52:89:36:8d:cf:ff:b4:37:dc:dd:
         8b:b1:d4:15:a2:f9:56:eb:88:d5:da:0e:ae:72:3d:77:18:90:
         c8:51:a6:12:fc:8c:96:8e:05:c8:a5:79:16:e5:fb:ad:39:81:
         6c:e4:37:ad:85:8b:80:f1:0d:66:88:a7:db:ff:95:fa:6e:8f:
         7e:b4:70:ba:d7:35:71:94:0f:a6:5f:1c:71:fe:c1:79:23:3f:
         0d:c1:05:4c:af:98:2b:f2:97:c2:f4:bc:98:c1:86:fb:ef:f8:
         4c:e7:23:6f:97:11:0f:67:0f:96:b8:86:9f:6e:4b:4a:4e:2d:
         31:f6:d7:16:e7:36:70:4c:26:2a:24:4d:74:2c:5e:68:d3:f1:
         af:72:bc:8a:0d:23:ae:cd:74:74:3f:df:bc:e8:7c:58:cd:c8:
         fc:93:75:20:c5:e9:f9:5b:d0:95:27:01:4a:fe:d2:b1:31:73:
         0d:94:fd:4b:01:0d:ac:28:66:fc:27:7d:37:c4:d4:9d:2d:ce:
         25:22:6c:f6
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUft9mtw1GG/3CC6ejvjMgNR8WE3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI3RDY2QzIzMTQxRTc3OUI1RjQ5QkRCMzBEOTlBMTVG
QzQzODkxQjAeFw0yNTA2MDUwMzU3MzFaFw0yNTA2MDYwNDI0MzFaMDMxMTAvBgNV
BAMTKDYyMjNFQTczNDExNjA2NkM3NUUzQzU0MTk1NzlDRTFCNkU2M0NDNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MbaBRgx+z9QgUt5S4iGf6Jh7
bVTGC05Gm0p/VoeKZ9M3ok2lb/hXjdPsxt5CCyOErnD0+ZaBpUWYyqrufcvEmHq4
yumv1jGREPcyf1pQjgXg54HxXRnT15pZ1BCM1dbjLlIkIXwaQaR4idzEBVFzHb2H
zsnJHfTMzo9S6lfwPWSL2Gbaz0hkZLBpUfDQ0LmLGwTVXrosLVye4p1/CqMmY876
duSYoDJPbbwwt4POSlG5/F2wMUbjdnX4klwfVUqXjwTf+BaLjTmCZogvM813W/tS
JHGpte3/PhL1Ukwfk57tJTDRqAsIyz2fQrGpm7oSDbQz5WPKqR+HYadZfspjAgMB
AAGjggJnMIICYzAdBgNVHQ4EFgQUYiPqc0EWBmx148VBlXnOG25jzHEwHwYDVR0j
BBgwFoAUa31mwjFB53m19JvbMNmaFfxDiRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvMy82QjdENjZDMjMx
NDFFNzc5QjVGNDlCREIzMEQ5OUExNUZDNDM4OTFCLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0Mzg5MUIu
Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNk
NTgzNmZmMWIyOS8zLzZCN0Q2NkMyMzE0MUU3NzlCNUY0OUJEQjMwRDk5QTE1RkM0
Mzg5MUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQARlGzjO1SQITICbRB0oSyom/tLK4WM0nB1QLFW1Ca1
9PIe2HTvS6V3N0wtm7T5/qZC2DY51cd52oNG9FsYsFKJNo3P/7Q33N2LsdQVovlW
64jV2g6ucj13GJDIUaYS/IyWjgXIpXkW5futOYFs5DethYuA8Q1miKfb/5X6bo9+
tHC61zVxlA+mXxxx/sF5Iz8NwQVMr5gr8pfC9LyYwYb77/hM5yNvlxEPZw+WuIaf
bktKTi0x9tcW5zZwTCYqJE10LF5o0/GvcryKDSOuzXR0P9+86HxYzcj8k3Ugxen5
W9CVJwFK/tKxMXMNlP1LAQ2sKGb8J303xNSdLc4lImz2
-----END CERTIFICATE-----
Generated at Thu Jun 5 06:52:27 2025 by rpki-client