Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
File:                     8ce84fb2-c539-46e7-8212-12b9730afeba.mft (raw, json)
Hash identifier:          z5qeiJWFgrttrfw2hBQDki/tvYQQpRUTFDkfutCF9Y8=
Subject key identifier:   09:B8:6E:B6:39:6E:86:E7:60:F2:F1:BA:8E:BD:01:46:B0:12:C9:CA
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F4328584BB7F7EF1341B95C3C32333000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
Manifest number:          010D0C9F4328584073A81E43F6C3346BB6CAD4C0
Signing time:             Sat 01 Nov 2025 20:00:08 +0000
Manifest this update:     Sat 01 Nov 2025 20:00:08 +0000
Manifest next update:     Mon 03 Nov 2025 20:00:00 +0000
Files and hashes:         1: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (hash: Z4jlgRlvrCwh0RUkG77xMCTqZLrbpO2nElw83muiZik=)
                          2: 7750dbea-23be-30cb-a5c2-247a4b108e61.roa (hash: rYkAW/OeCs/hRT+F/E5VnYcOAuMRiIvqb36wHAweZVo=)
                          3: 8ce84fb2-c539-46e7-8212-12b9730afeba.crl (hash: In84D1ShXevV0+IaEgXN7VzZ+DjBFiIxoGhWVbBWLMY=)
                          4: e65cd8da-dfed-3bf8-831a-62b853f3c844.roa (hash: 6ITKXBcellPOT9XPmsi2TeBprRE3uZW0CZ2Fa4TV9Xs=)
                          5: efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (hash: wxgddHQfGgbO+gsjnk0/dFPrvFbLNBSIv1lJCClwRe8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:f7:ef:13:41:b9:5c:3c:32:33:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Nov  1 20:00:08 2025 GMT
            Not After : Nov  3 20:00:00 2025 GMT
        Subject: CN=c1a44389-3897-46c4-aee4-1061c2af0c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:38:9b:b9:a7:30:dc:1f:dc:cf:28:7a:ca:
                    f0:ed:ab:d9:b2:29:e2:b2:14:27:f4:0d:b5:9e:86:
                    cc:dd:db:4b:34:55:30:7a:e2:7b:c7:f9:8c:c4:49:
                    12:83:2b:0d:9d:75:7f:41:7e:eb:45:74:69:f7:82:
                    f9:23:36:60:61:4a:51:c9:04:3a:ee:ab:b0:0d:27:
                    73:79:50:a5:c4:d1:20:c8:09:80:1a:d3:57:08:5d:
                    a4:8a:47:1e:3e:cc:f9:ae:23:13:96:88:a5:29:12:
                    60:4e:5d:1b:c7:da:47:31:8d:17:b1:3a:17:c0:6f:
                    b6:06:54:5f:87:4d:85:54:f1:3e:34:3a:a8:ab:52:
                    64:64:31:7e:9a:db:8e:5e:aa:27:d4:3f:fc:f7:95:
                    9b:66:d1:44:e5:2b:e7:37:88:64:46:20:07:23:32:
                    be:28:d9:d3:33:4c:60:6e:f6:05:38:cf:3e:40:f1:
                    e1:f3:41:19:e1:ae:7e:fa:b8:50:ff:10:d3:37:1d:
                    61:03:16:28:f3:f4:08:2c:1b:e1:d5:20:e9:dd:2d:
                    1b:ae:13:cc:4b:9c:4d:10:97:61:00:d9:7d:d2:56:
                    84:92:29:cd:84:a5:c9:b6:f3:19:a5:af:64:13:6a:
                    3a:24:90:36:69:ad:9a:87:90:b2:8f:28:37:40:a4:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B8:6E:B6:39:6E:86:E7:60:F2:F1:BA:8E:BD:01:46:B0:12:C9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0c:bc:44:e5:e5:ee:39:33:3f:bf:93:bd:74:ab:d5:ec:e2:
         fe:a7:d6:c5:5c:3b:1f:37:79:60:0c:43:b7:ba:93:8f:21:2f:
         74:4e:7a:ef:69:92:f7:b3:33:f4:8d:14:9b:e1:17:b9:52:f4:
         ed:06:9b:11:ab:10:1a:22:78:97:f7:3d:77:b9:75:6a:df:1d:
         bf:9c:36:51:fa:0d:89:0a:df:bc:f5:06:da:b9:5e:67:74:b0:
         7d:cf:bc:8d:62:c8:33:c8:ab:83:8f:1e:df:be:ee:7b:35:50:
         5c:d6:8f:1d:fd:39:29:20:70:f0:40:0a:64:29:51:a0:d5:7d:
         d8:41:14:61:21:95:22:36:b1:d3:f3:ae:a6:09:df:97:a6:dd:
         4c:b0:4e:2e:fd:11:78:4d:cb:e9:f8:b3:6e:79:43:e4:c4:ca:
         57:d5:10:b1:96:7b:5d:d6:ef:31:d3:20:dc:8d:1c:bd:aa:f4:
         83:30:0a:3d:c8:9a:a7:e6:1f:51:39:e6:c3:1d:b0:aa:fa:98:
         17:f9:3f:4d:8b:90:5f:7b:72:27:bc:04:4c:d5:f7:d0:02:79:
         e6:03:87:de:31:3d:4c:fb:e5:92:1d:a7:90:e1:64:8c:4d:5c:
         f5:09:30:f4:bc:e9:e4:33:32:61:28:40:01:98:eb:c2:e9:9b:
         43:d7:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:35:43 2025 by rpki-client