Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
File:                     84facd9b-9eda-4887-bc69-899a3c3aec64.mft (raw, json)
Hash identifier:          3VGIG/o52y/ie8k6mzb14tVy0qsVALaSMTomQFs5R64=
Subject key identifier:   A9:C3:9F:BC:7A:AA:F3:4D:1F:54:C2:52:A1:2B:35:B9:2E:14:F5:94
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584AE9D8624C0002BB02FE21FD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
Manifest number:          010D0C9F4328584748339D1352F9C7B4E85E767A
Signing time:             Wed 20 Aug 2025 00:00:03 +0000
Manifest this update:     Wed 20 Aug 2025 00:00:03 +0000
Manifest next update:     Fri 22 Aug 2025 00:00:00 +0000
Files and hashes:         1: 0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa (hash: AN2Hi5uE9enjSHALK+7NAzSLY4ldzn9WGxdw8agJPbQ=)
                          2: 6e2cff62-3dde-34af-9486-a0a158543d60.roa (hash: DMOL/haDPdwKG4LRWiqV8HZGWyNioflR5cZuLYwPKu0=)
                          3: 84facd9b-9eda-4887-bc69-899a3c3aec64.crl (hash: A2vP5WuOfZkyvQxlcxPwwVbgsbXWYBljXBnw98nLi14=)
                          4: abaa2cf6-7248-39b5-9ad2-739267ed6cd6.roa (hash: EU17M2JlwkZPrNDdn74hyMENlOMoJAIpHXB5TJNhEvo=)
                          5: c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa (hash: FzQWn5+rTibeor/eDwfNhIjmNpCrmq7/zk85UpK+Pbk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:d8:62:4c:00:02:bb:02:fe:21:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Aug 20 00:00:03 2025 GMT
            Not After : Aug 22 00:00:00 2025 GMT
        Subject: CN=c976fd5a-09c1-43d4-98ff-65893b4a4670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:1a:23:2d:79:45:a8:ff:fd:1e:10:4e:e5:
                    6a:83:a0:e6:63:07:90:b4:d0:23:6e:20:ee:af:46:
                    5f:da:0c:6a:1b:12:7d:77:18:4f:91:36:0e:b1:15:
                    b4:f7:97:82:9e:c8:ea:e0:76:58:16:55:d8:3f:bf:
                    cd:3c:ac:50:28:d7:d4:78:fe:83:f2:52:14:d6:3e:
                    5f:95:4c:c5:84:e3:27:5e:3b:aa:f7:51:2f:d9:69:
                    80:2e:9a:cb:61:16:f9:be:9b:73:2d:20:96:5e:1b:
                    6f:03:25:af:fe:eb:10:da:84:4e:51:b8:13:dc:b4:
                    59:5f:c5:50:e6:05:08:ca:d6:c5:e4:cf:35:90:fe:
                    06:2e:30:ce:23:a3:c3:11:02:57:58:00:d4:51:0e:
                    e5:6b:14:9d:b0:c9:f4:ff:ee:7e:63:b3:70:4f:4b:
                    41:0b:f5:36:66:11:aa:cf:33:22:42:ee:0c:18:5e:
                    86:fe:d8:10:c0:1b:81:56:68:83:de:9d:78:70:cd:
                    b9:8f:5e:a8:7c:4f:d9:ac:64:99:90:bd:96:07:f9:
                    59:9a:93:c9:ec:4e:73:df:6f:da:cb:1f:06:2d:29:
                    24:3e:49:e8:9b:50:ae:d9:e1:08:27:8a:fc:ac:0a:
                    4b:ff:9e:36:67:97:3d:5f:1d:04:e4:77:ef:19:4b:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C3:9F:BC:7A:AA:F3:4D:1F:54:C2:52:A1:2B:35:B9:2E:14:F5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:7c:c4:42:73:86:b4:d8:71:a1:c5:d6:c9:70:fb:10:98:
         10:88:cc:c6:4d:cb:e7:c9:80:9b:a1:ff:cd:4a:b1:d1:2c:ef:
         98:1e:47:3e:10:21:9a:2e:e0:f0:3d:e1:67:11:77:78:25:f1:
         3c:a5:78:46:00:9d:b4:9b:0e:97:fb:cb:6b:14:09:a3:ca:96:
         b6:17:62:88:31:0b:01:31:e7:28:0b:aa:ed:e7:dd:7b:11:f3:
         9e:ea:29:60:3b:c5:84:e5:c5:b1:16:ab:96:b5:84:54:e1:4b:
         2d:04:3b:f3:f2:81:9d:c0:6c:24:29:bc:88:29:01:2f:83:56:
         c6:24:b7:2e:de:01:65:eb:a9:44:62:76:51:4a:f5:f6:01:81:
         0b:28:50:a5:4e:93:dc:69:e4:64:90:da:df:d1:85:57:7d:02:
         b9:fc:5c:e6:59:cf:4d:92:3a:06:ff:5d:83:61:d0:37:db:ce:
         26:1f:3d:e5:db:e8:98:20:43:90:9e:06:14:7a:9e:ab:14:3d:
         24:12:92:05:3d:b7:91:de:e8:fa:b3:52:0b:ec:97:2a:51:bf:
         b2:1b:8e:ae:e5:c6:fd:54:22:bb:38:d3:95:31:c7:33:1c:60:
         f8:63:ba:4a:55:cf:47:1b:8a:02:83:42:01:7d:d0:f7:8e:e1:
         fd:f1:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:37:24 2025 by rpki-client