Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
File:                     5e4a23ea-e80a-403e-b08c-2171da2157d3.mft (raw, json)
Hash identifier:          tOYmldnALRygioBjABWKHBXKZQ5u1yLMCkJAg55aktA=
Subject key identifier:   41:73:6C:40:CE:12:05:56:91:F2:DC:E2:5A:7E:7F:6B:B4:13:76:6A
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F4328584F0AC016F8DF54AD2FCC5F7180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
Manifest number:          010D0C9F4328584073A8586AA2459A7B99D90260
Signing time:             Wed 02 Sep 2026 14:00:23 +0000
Manifest this update:     Wed 02 Sep 2026 14:00:23 +0000
Manifest next update:     Fri 04 Sep 2026 14:00:00 +0000
Files and hashes:         1: 0357272c-a79a-45bf-9586-92dd49ef3223.cer (hash: ibGs6vZnLIoDiRiHRvE7jbHh0G223jzIqwRe6tAO4uk=)
                          2: 2a246947-2d62-4a6c-ba05-87187f0099b2.cer (hash: TI/vJUCR1j6r+uOmUedZzmq3SMLE7F14Bq8CHPxKHg0=)
                          3: 35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer (hash: 1qcPlcoRv3lSWW7FkfFryHP3PxYrZlvpM27SIjn/C2I=)
                          4: 4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer (hash: QWKw43VVb50t3UF2lRkb3wDKQbQ0G5wxG6ql66c2i9w=)
                          5: 521eb33f-9672-4cd9-acce-137227e971ac.cer (hash: ePF6PhgLTvbNvtDQs6HJOb5Xsrc+dxlINgvc5d62tYk=)
                          6: 5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer (hash: pbC3Hulf3ttWF8qdIj3e7yYHXv/6ZmEmKmSaQ2ZVHHA=)
                          7: 5e4a23ea-e80a-403e-b08c-2171da2157d3.crl (hash: 9gXFDNByKjpnKUVX8bxhESPIobCfZZhbftPeUy7BL0E=)
                          8: 615fe1dd-d829-4c87-b2cc-5689381a3c42.cer (hash: WChbY9p1HicgPDV2WMefDjhP3JHWwX/cSlgUAkc5O4k=)
                          9: 69fd0156-bb1f-48b6-bf32-c9492286f195.cer (hash: waiatDNbIWogurz1UPNlQYvxKmPLPgn6OPTZSbkYUs4=)
                          10: 6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer (hash: QQiV+6WDrLDLXTYaIxx+YDio195QTpmFRwVkNt1+jg4=)
                          11: 746e0111-fafb-430f-b778-d204cfcd99a8.cer (hash: dwC2kIi8viUp//LaynKE8jHoUtzTMSeyq6ceS4BR4Xg=)
                          12: 76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer (hash: 3DjakwHdJGp2vuYXkzhzwpv6j1vPzMFRZKaqSZbxmEU=)
                          13: 85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer (hash: ifgrLauoepkJnXyY+k+UBtwlI2vGqG+No4o1ZcZ3IOc=)
                          14: 871da40f-793a-4a45-a0a9-978148321a07.cer (hash: bI+WCS5pcBG846VOkcLiqzmfsbrwsMMNy0/GxVXtcrw=)
                          15: a73420cb-b3cc-4b03-bda7-1be204933ae5.cer (hash: uYv0Ij2/Rr02uAuRKz+Yb5ox3MPURs4RniTXaKfAqWc=)
                          16: d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer (hash: NMg5G/VJAltRBLp0dcWc7MtKWyPIzzC1IJOO0SN9Bd4=)
                          17: d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer (hash: DcLFcJsHZEUpkHt4AR/Gnu9KAJcG5Iy3Clte2n5Gzv4=)
                          18: de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer (hash: LwBma1DubdQDGgsuje8h8yRUyrD/uv1WQC86VZJ+gts=)
                          19: f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer (hash: dF0Q4QmOgdtwkfIqQbJYI7ZujwbUEmoCzL3imGFgl6c=)
                          20: fde169ed-d0d2-4165-8308-df2597e343f8.cer (hash: ZoDKsQK7egeTo71djl78kEF8YONau+VCsB4TF2kUUxA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:c0:16:f8:df:54:ad:2f:cc:5f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Sep  2 14:00:23 2026 GMT
            Not After : Sep  4 14:00:00 2026 GMT
        Subject: CN=8ee38308-de3c-453d-a629-acd5cdbd1c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:b8:e5:19:1f:9f:41:26:cd:bf:da:4b:42:
                    98:36:9c:46:ff:04:33:65:7e:e9:9a:ec:b5:4b:b6:
                    0c:aa:ee:a5:8d:c5:16:cb:b6:d5:85:de:4d:4c:00:
                    ca:36:fb:27:d0:72:84:43:93:15:9d:f1:de:e3:35:
                    1f:4c:19:97:42:5e:da:7b:2f:83:ba:2e:bf:2c:5f:
                    48:c6:ac:85:94:03:fc:2f:88:f4:97:62:cf:58:f7:
                    5c:3f:d4:0b:fc:a6:f4:cb:f8:1f:f6:04:32:e1:fd:
                    dc:bd:e4:e6:63:11:88:7a:f6:ca:2c:f1:67:b5:4b:
                    f6:c1:cc:56:b8:c8:36:2c:17:69:14:ec:94:fd:2e:
                    bc:82:0d:36:8f:48:cd:41:86:cc:21:24:47:a1:20:
                    99:76:ea:1d:33:64:28:4d:e4:ef:7b:13:44:d8:e8:
                    32:3b:1c:96:12:ec:a0:02:9a:0e:7d:ef:ec:e1:b9:
                    88:62:83:18:96:80:43:06:e8:11:49:b2:0d:5d:d0:
                    89:38:ba:ea:01:45:9c:5b:91:22:05:52:1a:83:84:
                    1a:ab:ad:37:fc:e4:d3:e6:ba:ae:e6:09:94:5a:e2:
                    cb:30:ab:71:d6:02:0e:9b:59:08:2c:29:a4:38:8b:
                    88:e5:38:d8:31:24:99:48:89:7a:b3:61:5b:e7:8f:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:73:6C:40:CE:12:05:56:91:F2:DC:E2:5A:7E:7F:6B:B4:13:76:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:f9:fb:f9:37:6e:d0:cc:6f:27:66:57:a9:52:e6:67:85:
         bd:da:d5:8e:ae:85:4a:19:6f:c3:65:3d:c6:1b:db:4a:f0:09:
         de:85:57:e7:2b:ed:47:96:de:b2:f7:19:ec:23:6e:79:66:0e:
         25:95:c3:35:26:61:6e:ea:73:ca:16:a0:de:cd:20:d1:2d:1c:
         13:16:0e:8c:65:8c:a5:56:31:6a:d1:1f:b4:9e:db:a4:57:cc:
         9b:01:27:01:25:6e:fa:c8:11:06:56:d3:13:70:36:5c:e4:cb:
         c4:ed:e9:15:85:e5:f3:99:3c:68:6c:38:20:43:f2:14:56:b9:
         55:dc:60:1d:03:ac:8c:dc:a8:f7:f5:62:31:b9:e6:2d:52:2c:
         89:92:ea:00:10:a8:73:51:27:2b:85:d3:28:64:80:55:f9:2e:
         18:4d:9e:20:02:ac:ef:1f:ff:57:92:ff:7c:77:90:cd:88:a7:
         7f:90:d3:2e:29:cd:1e:1a:4e:52:73:12:61:7d:21:8b:c7:c7:
         d9:91:5a:1c:1a:a1:0e:d5:3c:c3:b0:8d:dd:32:33:dc:27:22:
         0e:57:43:d3:8c:5a:25:29:17:00:a3:85:49:61:2b:69:a1:95:
         a9:3b:1a:5e:0c:9a:c5:d9:9c:1b:29:c8:18:43:4b:55:ff:0b:
         1c:f7:4d:80
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUAQ0Mn0MoWE8KwBb431StL8xfcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzMB4XDTI2MDkwMjE0MDAyM1oXDTI2MDkwNDE0MDAwMFowLzEtMCsGA1UEAxMk
OGVlMzgzMDgtZGUzYy00NTNkLWE2MjktYWNkNWNkYmQxYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUu45Rkfn0Emzb/aS0KYNpxG/wQzZX7pmuy1
S7YMqu6ljcUWy7bVhd5NTADKNvsn0HKEQ5MVnfHe4zUfTBmXQl7aey+Dui6/LF9I
xqyFlAP8L4j0l2LPWPdcP9QL/Kb0y/gf9gQy4f3cveTmYxGIevbKLPFntUv2wcxW
uMg2LBdpFOyU/S68gg02j0jNQYbMISRHoSCZduodM2QoTeTvexNE2OgyOxyWEuyg
ApoOfe/s4bmIYoMYloBDBugRSbINXdCJOLrqAUWcW5EiBVIag4Qaq603/OTT5rqu
5gmUWuLLMKtx1gIOm1kILCmkOIuI5TjYMSSZSIl6s2Fb54+dOQIDAQABo4IChzCC
AoMwHQYDVR0OBBYEFEFzbEDOEgVWkfLc4lp+f2u0E3ZqMIGaBggrBgEFBQcBCwSB
jTCBijCBhwYIKwYBBQUHMAuGe3JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0
b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEy
MTU3ZDMvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLm1mdDCB
jwYDVR0fBIGHMIGEMIGBoH+gfYZ7cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMuY3Js
MB8GA1UdIwQYMBaAFGJHfh/Z5SXQ16K7Y9kU4U7kVKNkMA4GA1UdDwEB/wQEAwIH
gDByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfDfn7+Tdu
0MxvJ2ZXqVLmZ4W92tWOroVKGW/DZT3GG9tK8AnehVfnK+1Hlt6y9xnsI255Zg4l
lcM1JmFu6nPKFqDezSDRLRwTFg6MZYylVjFq0R+0ntukV8ybAScBJW76yBEGVtMT
cDZc5MvE7ekVheXzmTxobDggQ/IUVrlV3GAdA6yM3Kj39WIxueYtUiyJkuoAEKhz
UScrhdMoZIBV+S4YTZ4gAqzvH/9Xkv98d5DNiKd/kNMuKc0eGk5ScxJhfSGLx8fZ
kVocGqEO1TzDsI3dMjPcJyIOV0PTjFolKRcAo4VJYStpoZWpOxpeDJrF2ZwbKcgY
Q0tV/wsc902A
-----END CERTIFICATE-----
Generated at Wed Sep 2 16:03:49 2026 by rpki-client