Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
File:                     bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft (raw, json)
Hash identifier:          OQIXw4GBTtCJxPW7AVenNp7FsiUhd0p5+odoXCAEGzk=
Subject key identifier:   EB:D7:0D:C8:2B:8E:DC:E3:82:03:59:7E:7E:CE:46:FE:DC:1F:8F:15
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328584B26AE8DADCD4ED8370E6EFE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
Manifest number:          010D0C9F4328584073A825841FF7E7BE1D656529
Signing time:             Wed 10 Sep 2025 19:00:03 +0000
Manifest this update:     Wed 10 Sep 2025 19:00:03 +0000
Manifest next update:     Fri 12 Sep 2025 19:00:00 +0000
Files and hashes:         1: 0a94db39-75bb-34c1-a9fe-623ddffd8e0f.roa (hash: d0Nw916kGQ8i54YzoFYurXgcFS2X7XSV9ViFJlN48P8=)
                          2: 4e83104b-2658-3ceb-ad95-3c8d86f167df.roa (hash: T8d7skkwvd9C/eWUH5RqcZhfB2ukgDBLdzdZqnKMG/s=)
                          3: 69811a7d-82d5-3fd5-bd79-2fe1964ad712.roa (hash: jxf+JTmZ1mBgdxazoMMG03xMFjGN4nYxmZjLi6cE4S4=)
                          4: 92aee7d1-3371-3968-b369-67a5425209e6.roa (hash: /5vJh+ndEuUAEbgNChJfUGgTgZW2QJKSmLCNlBF67d4=)
                          5: bac42415-fae2-3af2-804e-7915f8309a0d.roa (hash: QjBpNylluLapw1Qc4s61ohp+V+DoAQQ/1J3mK4+KORA=)
                          6: bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl (hash: VMGjSGzt03mSAvhPMyz/+gCRhncltzIf1DNRI79FvUU=)
                          7: c83d963c-2ced-33fe-8730-392675d7ca11.roa (hash: NJEy3la32Om0pw1xnmdd7y+RE+auybi8eH4/8ZCdirY=)
                          8: e4abcc4e-2f85-3c38-a31f-7fc2ad4bde86.roa (hash: M2geUw2/dHb6oKxaOVuUc1TAtOjm07YuHaC4TaTHbqU=)
                          9: e955d497-3567-35ca-af2a-62ffdc30b1c1.roa (hash: VzxHV42fji1fvDgraLDqdVW9VqBKFl10RDtHcq3i+J4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:ae:8d:ad:cd:4e:d8:37:0e:6e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Sep 10 19:00:03 2025 GMT
            Not After : Sep 12 19:00:00 2025 GMT
        Subject: CN=48b1cfbb-9449-4d87-b959-10b1eaf11159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:6b:6a:8e:41:6e:aa:69:9d:61:57:46:fd:
                    7e:71:ed:0f:db:d2:4c:66:52:e4:73:22:6c:97:20:
                    cc:e5:63:d6:64:3e:f5:2d:de:89:50:49:3e:9e:e7:
                    df:b6:a6:9b:5d:81:f4:90:3c:07:ff:fe:c9:9c:98:
                    f0:98:2c:88:9e:4c:5f:4e:52:c4:fd:9f:f4:2e:51:
                    88:90:f7:de:48:2d:8d:6d:fe:5d:42:b1:3c:6e:44:
                    d5:70:fb:de:b8:e9:66:7d:93:02:81:91:5e:99:50:
                    4e:9e:f5:b7:53:88:b9:a1:10:6e:c0:f7:a5:58:93:
                    9a:3f:c6:f1:0e:53:52:65:0f:ea:60:fe:bd:07:38:
                    f4:23:33:a3:c4:a5:ca:bc:85:22:7a:47:3e:48:34:
                    68:9e:fe:1a:87:92:69:90:a1:92:b5:4e:22:16:c2:
                    81:a2:59:ee:c6:66:43:48:7a:27:d7:30:dd:31:ea:
                    8d:d2:df:b4:6d:13:cf:67:86:f9:ce:32:21:fc:2f:
                    d7:3a:42:a1:50:f7:b1:4b:c7:19:aa:59:9c:bc:cd:
                    ab:23:f1:e1:72:83:13:d8:11:57:16:22:ac:67:4a:
                    fa:4a:a0:36:b6:d1:0d:56:d4:eb:7e:28:0b:0f:08:
                    e3:68:e3:2a:b7:50:00:03:12:a7:14:ef:3a:93:2e:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:0D:C8:2B:8E:DC:E3:82:03:59:7E:7E:CE:46:FE:DC:1F:8F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:0b:56:f0:81:0e:5c:f5:62:7d:1d:e8:a9:87:50:2a:52:
         8b:cb:52:49:3b:91:46:c0:cf:31:aa:ac:37:43:a1:b1:50:9b:
         2d:a1:a4:d5:01:37:19:6d:b0:98:0f:cd:70:f7:87:fe:e0:47:
         b9:b1:ee:6c:e1:9d:14:5c:bf:46:e5:de:13:4f:f8:73:0c:73:
         7a:fd:27:2f:04:e1:e1:8a:7b:8f:a2:7b:5e:f6:da:71:0c:95:
         34:78:6c:8d:44:04:be:7e:2b:8a:60:75:3e:e9:a6:4e:96:b4:
         d7:91:cd:a5:64:f0:b8:33:f0:b9:9e:5a:ff:ff:6f:c7:08:1d:
         ba:34:4b:48:5e:77:b8:e8:d0:a6:c3:1a:5d:40:92:36:3f:2f:
         ef:17:00:cc:8b:f9:f0:f8:51:a3:7e:54:cf:3b:8c:2e:cd:a6:
         7c:4b:94:f2:91:78:63:0b:0e:ea:b1:f8:b1:86:d9:f5:03:d2:
         8f:43:0b:62:6e:16:b6:21:8d:45:49:e1:80:7e:9d:42:5f:b6:
         1b:d8:37:46:97:0b:8f:14:d0:95:62:b1:23:39:3a:d2:ba:f0:
         ae:25:bc:96:ee:cf:27:43:c8:bc:0b:ef:ea:de:87:93:99:19:
         46:15:a6:51:0d:89:9b:2b:56:a6:be:d5:49:ae:c2:50:92:ed:
         91:e8:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:34 2025 by rpki-client