Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft
File:                     1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft (raw, json)
Hash identifier:          /84cYd7TM6gie71IpUyEuchctlr5kgIqwzHHujA92/M=
Subject key identifier:   C2:50:DF:EC:94:8F:85:7E:31:56:1C:F2:B1:1B:54:3B:37:B4:51:1A
Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7
Certificate issuer:       /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
Certificate serial:       010D0C9F4328584D7BE160BB292F04A1092FA800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft
Manifest number:          010D0C9F4328584C677CB8B6D081BE6CCD3D12EA
Signing time:             Sun 12 Apr 2026 17:00:03 +0000
Manifest this update:     Sun 12 Apr 2026 17:00:03 +0000
Manifest next update:     Tue 14 Apr 2026 17:00:00 +0000
Files and hashes:         1: 0b6b2417-de41-3a69-95ce-f319cfe357d8.roa (hash: f3AYkXt/VfNq977sEOHqxTIyHB8OHTX++a2yUoU3qqg=)
                          2: 0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa (hash: yCX5TWJG89AaOBcyd/p7qqRikq7+iTnf5BVjXcEpBjQ=)
                          3: 1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl (hash: 1WDaWxJxNXOqirTeZKWptFPiJp5JI0WTaXBisqzEXvo=)
                          4: bf6962bd-45db-33f1-9637-5ec4531b2b48.roa (hash: G46GRpNv3gps/+9bayIGMjzVCV/wq35cCglCfgmbMp8=)
                          5: d901d450-859c-353e-9847-847173ae25f4.roa (hash: r5padr5R8/qsAx8DjdoWBLrvS9Nh+zu8emJkMXhoMMk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:e1:60:bb:29:2f:04:a1:09:2f:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
        Validity
            Not Before: Apr 12 17:00:03 2026 GMT
            Not After : Apr 14 17:00:00 2026 GMT
        Subject: CN=2853162d-ccc2-4510-9cc6-740538825dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:ea:f4:b5:ef:7e:22:d9:00:6b:bc:2d:2b:
                    f8:c3:ba:53:7a:16:7e:8e:b4:b2:11:ae:f4:c0:7b:
                    07:a8:30:64:fb:00:7e:20:9f:b8:50:fe:be:37:0e:
                    c7:1d:ed:27:af:1a:b1:84:5e:fd:7f:1b:bc:f6:cb:
                    7f:51:5d:4d:ff:fd:cb:23:a6:be:e3:4c:43:f8:0c:
                    1e:bc:a5:de:51:ec:af:a9:64:cc:8a:7c:2a:e3:9e:
                    90:4c:9e:fd:b9:9f:c6:6b:67:49:4e:b6:5d:d3:73:
                    02:c5:8b:2a:83:42:98:05:85:2f:6a:07:51:e1:1a:
                    59:df:4e:78:0e:e2:02:a9:13:52:71:ee:99:9b:23:
                    db:5e:08:3c:ff:a6:9a:f9:81:65:a9:71:cc:7c:51:
                    f4:69:d8:72:7d:20:04:0c:b0:6e:38:23:e6:47:1b:
                    9a:18:78:9d:9b:28:06:73:0e:b5:4b:16:66:9f:24:
                    c1:11:0b:90:0e:0b:c3:5f:00:1f:2f:a4:84:7d:f4:
                    67:27:2b:4d:24:16:c2:02:4f:c7:90:92:69:cf:48:
                    d3:e3:74:0a:9e:75:11:06:fa:e3:d1:fd:4b:a1:32:
                    28:46:9d:cb:bc:34:cb:1c:df:ec:c4:1d:be:1d:fe:
                    90:b0:d3:eb:31:86:be:88:02:47:06:33:d8:f4:e5:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:DF:EC:94:8F:85:7E:31:56:1C:F2:B1:1B:54:3B:37:B4:51:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl

            X509v3 Authority Key Identifier:
                keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:47:a5:3a:cb:c3:a6:86:08:21:ad:cd:ad:2c:4e:f8:f3:9d:
         ad:59:78:81:ca:ff:90:bb:be:6d:d4:a4:47:50:e5:b0:f7:46:
         73:ae:b3:4f:d0:2f:42:1f:9f:f1:8d:00:9e:3f:78:b7:44:43:
         2d:4c:66:07:a6:8a:fc:2b:f3:1f:81:1e:32:6d:44:ce:2a:c9:
         3f:37:c5:fa:2e:ce:77:3b:3a:64:98:83:1e:6c:f5:0b:4d:64:
         3f:e1:ec:d8:cd:5d:bb:47:4d:7d:f3:d0:ce:ec:c9:6f:03:3f:
         b2:da:2b:7b:35:8e:b7:e3:55:5e:a5:73:e4:f5:96:f2:d0:5c:
         5e:2c:e3:1a:ca:75:8b:5f:15:f1:88:c5:d3:95:31:59:ab:2b:
         a8:f4:25:21:4b:b0:a2:45:16:38:a6:19:81:78:1c:f2:06:2b:
         61:97:ac:99:b2:a1:04:ba:c3:76:cd:75:c3:5c:aa:c0:76:92:
         5e:fd:e4:1d:c6:24:bb:ad:fb:f3:84:8e:f2:f5:89:06:18:45:
         e1:ca:07:25:b2:3c:ab:37:4b:02:d6:86:a0:59:97:f1:24:fa:
         a3:a7:7c:81:b4:dc:f9:e8:89:ac:0c:a4:2c:6f:9b:8c:13:b7:
         e6:f2:f6:bc:46:ca:5b:6d:1c:43:a1:c8:cc:8f:20:5b:fd:65:
         3d:9b:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 10:40:38 2026 by rpki-client