Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
File:                     3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft (raw, json)
Hash identifier:          40WSa6NUtwjFhHtUgxNVzxm9bIjwzSgSBbQfToPzvqA=
Subject key identifier:   64:87:D2:3B:7A:09:00:94:2B:40:A8:FD:E0:57:8E:F3:EF:26:C3:2B
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F4328584AEAA8D502AF6185C13112BAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
Manifest number:          010D0C9F4328584073A845ECF7A33162CC78BFBD
Signing time:             Wed 20 Aug 2025 07:00:03 +0000
Manifest this update:     Wed 20 Aug 2025 07:00:03 +0000
Manifest next update:     Fri 22 Aug 2025 07:00:00 +0000
Files and hashes:         1: 2b564fbb-5489-3a5e-a3a8-b51618764307.roa (hash: OceKcJ4FGPy+WKk4SyJTS13/zjZKSwdwRtHAhIqPy8Q=)
                          2: 3d204eac-8de5-3fca-995d-20b34553b459.roa (hash: Kh0zbSsOZB2nUtNWiZrWmtS+QQeQi25LAaw5zh3/eak=)
                          3: 3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl (hash: wiqd/bzTvdC1bCXXqgjLS19I3uHGTVTB9imtv34vYvg=)
                          4: 3fa3109f-9542-3991-a9da-fea12f42beb3.roa (hash: RgY7u0nLG+LT4+bXObgfWsMvHX1DUWKf3VFjtCYqmJE=)
                          5: 5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa (hash: fxO2IyH+MHUlAcoCQmVlGB4dT3flV/L40nBGBu4NTfA=)
                          6: 74168fc4-19c5-3549-abc7-a40124cbc34c.roa (hash: 939xLRZ7MpRPYCQvd68PG6SHS0IzDmCuYMAkZdRRWmo=)
                          7: 80ad4e79-4976-3549-912a-b86c6056835c.roa (hash: UuQwK1f9daBYgMzNbMC1wU7RGr1Yj7NB+uJl65j/NP4=)
                          8: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (hash: z3fAm+y5C3GJ4HMYlTLk2LmizFlqjRLRT1IozxvOeTQ=)
                          9: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (hash: wPMA74nOhNj5TGFyRaAjnUxfIOcvW08TqJ3FOTeRmNk=)
                          10: e0accc93-63d1-3c21-b64c-4277eccbb948.roa (hash: LhavBmSSMIaYUL5ti8Ix2735dieqzWiRSoR9PA55ajQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ea:a8:d5:02:af:61:85:c1:31:12:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Aug 20 07:00:03 2025 GMT
            Not After : Aug 22 07:00:00 2025 GMT
        Subject: CN=5998072e-aa36-4388-9b7f-85fa68aef8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:fb:8f:e6:52:c6:f3:d3:87:02:e8:08:6f:
                    ac:8b:9c:fb:b9:8c:10:52:4d:b4:72:34:4d:5a:4b:
                    b3:53:b6:72:4e:77:cb:c7:e2:2b:98:d0:86:82:da:
                    a0:b0:6b:67:78:92:b2:67:3d:4b:f2:05:0e:69:c9:
                    86:07:98:c0:b1:a9:07:ff:6f:e2:a3:1c:32:f5:53:
                    c1:89:c6:87:0d:07:54:4e:d5:5a:92:63:2f:e6:fa:
                    f6:fd:c9:e1:ff:23:33:93:6a:90:8a:d5:55:b5:e3:
                    21:b6:54:e3:86:2b:58:66:a5:e2:45:24:1c:c8:9d:
                    eb:d3:49:3f:14:bd:10:89:57:1a:9b:fa:16:b1:80:
                    ea:56:17:46:10:70:f6:2b:bb:6c:ad:2d:c8:79:29:
                    f6:42:16:64:67:3c:78:2c:44:65:aa:e8:68:4c:6c:
                    4b:50:73:2f:10:72:9a:f6:e1:11:89:b7:68:1b:a3:
                    86:47:89:ba:d6:d0:e6:e8:bb:c0:d2:b1:20:b9:49:
                    82:4a:b3:1c:f9:46:45:37:22:f4:60:5f:e7:bc:63:
                    a9:c6:1e:74:95:4e:f7:67:dc:70:78:8d:3f:9b:db:
                    d1:7a:cc:4e:12:f6:cc:54:71:2f:5e:e1:cb:68:b9:
                    9b:f1:5e:79:9e:a3:54:d0:4b:f4:8f:c5:61:6a:34:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:D2:3B:7A:09:00:94:2B:40:A8:FD:E0:57:8E:F3:EF:26:C3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8a:d9:50:96:0d:25:49:f7:a6:40:c8:d6:89:9b:06:b3:43:
         e8:c4:52:a4:22:f0:5f:10:90:e5:6f:ef:6c:52:8e:79:63:05:
         12:12:31:d1:cb:83:13:bb:1a:1b:02:ed:9f:1e:f2:a2:d1:08:
         5f:9e:7e:36:0d:20:96:d7:9c:76:6b:21:15:b8:51:e2:61:29:
         5d:ce:76:b9:e6:05:8b:32:96:19:4f:45:3b:04:04:c4:44:23:
         2d:95:bb:0c:45:6d:50:35:2a:00:c5:ef:64:d2:6d:a5:a9:c7:
         2d:8d:57:e4:28:23:e0:a8:5a:69:b4:36:43:b7:7b:c1:3a:22:
         b4:eb:56:22:0d:f0:58:17:95:dd:50:45:31:61:60:8e:1f:52:
         60:76:d4:ff:ee:b6:87:79:4b:1c:a1:e7:8b:83:b3:88:23:7b:
         36:d1:7c:bc:28:67:e1:d9:6a:c9:b3:80:40:ba:67:25:8b:00:
         14:e2:3d:f0:be:21:4d:71:eb:0d:44:f3:2b:11:1f:62:b5:50:
         8d:71:3d:d8:06:6b:5b:9f:c3:72:26:47:b4:5b:cc:16:9f:3c:
         69:43:7f:09:54:9c:99:31:6d:1f:90:ba:cd:7e:c6:55:fd:0d:
         f7:bf:f7:ee:17:00:2c:e2:53:3e:fc:73:a5:b1:84:75:ff:bf:
         ae:c2:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:30:44 2025 by rpki-client