Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
File:                     ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft (raw, json)
Hash identifier:          BN10iNsj+2NMlpqsibdNk7rk2UzBTEIIBRJYAnF+VAA=
Subject key identifier:   A1:AD:C2:73:3A:C0:7B:00:44:EE:7B:C3:61:6D:57:FC:69:34:AE:08
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584AFA987CFC6D0DB4FC0BCF0400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
Manifest number:          010D0C9F43285845574BC840591CF57F59E277C2
Signing time:             Tue 26 Aug 2025 00:00:03 +0000
Manifest this update:     Tue 26 Aug 2025 00:00:03 +0000
Manifest next update:     Thu 28 Aug 2025 00:00:00 +0000
Files and hashes:         1: 1aa50007-0212-31f3-a767-d0b9800bf8fb.roa (hash: R2yMJDT/BT2supLgIeaQ5+6cGrBcOQ91iLPXhP6HN4U=)
                          2: 2ae8c72b-d5e7-3405-bc70-83de00dbcc38.roa (hash: l5FFIQTaQpByv/+jRej9UV3rukaeaZdhTs5Bnk9LCaA=)
                          3: 3873425f-0330-3da6-b372-5e44dd7a2deb.roa (hash: DT8pbLjiQCGwPFkjXH5pg5jmWhK4sH67DmV2GttUxoY=)
                          4: 4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa (hash: 0vGW+FtQq9Kt3Bey8UsW1/H343Jyy7dMHJFIhLGpeRg=)
                          5: 548211a7-ec86-3843-8027-0b84f68da757.roa (hash: C6PtpDwmu0NRwiJqhkanpqk0DEPw9qr7cwi+YKsBE3I=)
                          6: 6cba5dfe-e4b8-3c70-b8b5-4eff97fdef57.roa (hash: tqDLscpJR+B4sjgEhPVGw69tplb3NxErRyDss3UhQyQ=)
                          7: 7e320789-f385-3727-9e84-7ca91a7f9608.roa (hash: tjDXerEML0wpZ/c3ZMsals70lcVypE+l2PbjwWz/rRw=)
                          8: 8d16e8b6-023d-31c2-b651-81c42ca8072b.roa (hash: EztWnIvAJV3XrUNrnVvRRx5ybz0nHUZDbQFsocpn3rI=)
                          9: c13dba69-5578-3a01-b3d5-6497abf84b01.roa (hash: lJARPcX858k4gfpv9sEpj+wVOTKPLGk1uPPFogaEAWo=)
                          10: ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl (hash: 4Q+VwMEu+96pdeujZVztrkY0iKU6maKfsxEFc7z9oMY=)
                          11: fa2b50ed-edd4-32f1-ab35-33ca0df9bca7.roa (hash: QvPIdtF+pSScaRjhEX32Ah+xFzZYnrHNUbRS45T6LLE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:98:7c:fc:6d:0d:b4:fc:0b:cf:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Aug 26 00:00:03 2025 GMT
            Not After : Aug 28 00:00:00 2025 GMT
        Subject: CN=5f942e03-942e-4d36-a429-fbccb203d818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:26:a1:13:af:e1:f9:2b:0d:95:bc:67:de:
                    f8:b5:85:40:13:ea:ab:42:88:ae:c6:e4:95:61:51:
                    4d:e8:7d:1a:25:17:57:45:fe:a3:df:e4:dd:bf:d2:
                    4f:00:8f:53:d1:04:38:df:a4:1f:4c:e2:80:a4:9c:
                    64:77:7e:95:52:fc:07:cd:62:05:59:bf:e6:f7:bb:
                    9c:8b:d3:82:ad:79:66:36:30:56:34:f4:0a:2a:97:
                    db:df:d3:0a:e6:d6:fd:54:e5:6b:8c:ee:bc:13:92:
                    53:8c:6d:83:97:7d:db:d8:8a:00:c7:79:cf:94:db:
                    ac:ba:70:5a:6c:bb:c2:c7:85:ce:09:9d:1d:ec:0f:
                    b0:4d:d1:8e:1c:a4:4a:d5:9e:0c:fc:37:6e:df:6f:
                    ca:f7:16:79:a1:7f:d2:9f:af:76:d6:7c:15:69:af:
                    81:b0:7b:0a:2c:a1:a9:39:06:c2:dc:da:52:e2:3f:
                    79:91:d0:00:9b:b1:0b:41:60:49:8b:84:6a:22:4e:
                    7d:62:fa:d4:c6:95:d3:ed:3f:bf:74:91:c6:0c:be:
                    de:f4:db:35:e5:eb:3f:74:93:cb:b8:1a:40:6e:35:
                    33:b1:7f:11:7d:ff:cf:6d:f4:b5:23:45:fe:2b:df:
                    b9:48:6c:65:1c:9e:1e:72:12:70:20:84:4b:1f:bf:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:C2:73:3A:C0:7B:00:44:EE:7B:C3:61:6D:57:FC:69:34:AE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6d:18:e9:7e:96:24:b5:de:f6:8e:38:e3:22:48:cc:80:73:
         1c:36:4d:37:fe:4d:5b:fa:b8:c6:46:9f:e6:23:1e:1e:b1:a8:
         ec:a1:84:a7:5d:7f:48:8f:cf:b3:8d:78:87:92:06:1c:65:32:
         dd:7d:95:45:9b:bd:03:88:97:fd:5f:9b:1b:9a:3d:7c:19:0f:
         b9:ec:80:73:b2:87:06:f2:5e:cc:cf:4d:92:bc:64:d0:1b:20:
         73:7f:bf:9b:51:9b:fc:a3:fc:96:d1:02:72:68:96:d6:f8:1d:
         2f:50:d8:26:82:4c:e3:fe:04:f0:97:26:05:59:83:6b:24:92:
         7b:b8:ba:82:fa:1f:85:35:bd:78:bf:e2:13:e0:fc:30:d9:91:
         06:33:30:ab:9b:66:57:e8:fd:9d:7c:fa:8d:ff:65:2f:f8:67:
         49:c9:79:1f:04:40:08:29:61:96:c7:c3:57:3e:8b:02:38:7b:
         f6:5f:36:8f:00:3d:53:74:87:3c:a8:e6:91:4e:6a:5d:04:2a:
         fc:e1:36:cb:2d:61:72:e8:dc:12:3e:86:a2:bf:70:4f:51:a8:
         08:53:38:a6:c2:64:fe:62:c7:dc:0d:22:99:1f:5c:fb:3a:7c:
         52:30:f4:4d:0a:f2:68:c1:8e:c7:38:57:95:f8:23:2f:66:1f:
         9a:97:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 15:19:01 2025 by rpki-client