Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft
File:                     aafd6acf-1b90-42db-93ca-6a5c04007025.mft (raw, json)
Hash identifier:          18Sq1VssS9Ddw4/9RqtnDK09tUnYENc8x3rloC43t1g=
Subject key identifier:   F4:13:A2:67:8C:B5:02:FF:B8:CE:FA:5C:1A:5F:62:75:E4:56:23:C2
Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4
Certificate issuer:       /CN=aafd6acf-1b90-42db-93ca-6a5c04007025
Certificate serial:       010D0C9F4328584D7B6B41CD9673F8C6D2E91B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft
Manifest number:          010D0C9F4328584BA0D0F9814325B16E19C8B33D
Signing time:             Sun 12 Apr 2026 13:02:03 +0000
Manifest this update:     Sun 12 Apr 2026 13:02:03 +0000
Manifest next update:     Wed 15 Apr 2026 12:00:00 +0000
Files and hashes:         1: 0cd78578-12cc-3407-963c-6ed1de118dbb.roa (hash: KRaJrwyEgvoxPMXiYh7kpH1j7XSoCLDH2dFz8B+wSuQ=)
                          2: 2721406e-41a4-3e0f-8b73-e2bf43fe4ea6.roa (hash: 2wEAHkCGb0dtTaYIjKkJXbXZYtN46GuQUPFRgWOXJz0=)
                          3: 2759983b-c5cb-36ad-9f56-ad52378b4ee8.roa (hash: /Djy4qsHzdGG+PI3xmtPATIXw26jQ9kzXTUWT3dXBxo=)
                          4: 39ddc6b9-a433-360e-8672-ec63693e7e71.roa (hash: OyVjc5eybVxiMMtSIGzWJSrqAtItvFrHu/0NSC6pm/U=)
                          5: 5a81a879-7a98-330f-b70f-4e80d2348605.roa (hash: F+DBu7hhREwXwrzcldgseDtXy9gE6WpHOs9A/oj2lds=)
                          6: 6cc6d88a-50ab-312b-bf73-d3a269f62bb5.roa (hash: kT6jXTTiqtopazjFIxv70W7Ivs52h3+gfz1l5rkrTkg=)
                          7: 940cb506-c287-3123-b5cd-8640efc7de0a.roa (hash: YJ7yQMEbYPkXPhtkgToD/mos1pXfBXvnZW5zoexiJnA=)
                          8: aafd6acf-1b90-42db-93ca-6a5c04007025.crl (hash: QCKx+m3S2NMJiSO9c9+Psjs9Gp2IIX0iHsICWjklS+4=)
                          9: cd379a94-35e5-3856-9143-57c48867d48d.roa (hash: XpoDu5mAVS56jasYLYAfZdXgM60S8dkJ3+Evu+rKnps=)
                          10: fe90d0e4-03c3-38d1-8c44-56a301595b47.roa (hash: Btpy8O9V7OpZxwSfW7HwH7DBxl5EqicN9m455aw/84M=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6b:41:cd:96:73:f8:c6:d2:e9:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025
        Validity
            Not Before: Apr 12 13:02:03 2026 GMT
            Not After : Apr 15 12:00:00 2026 GMT
        Subject: CN=ffa28f6f-fa36-4eac-92ef-e274b32013fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:a9:bf:20:ed:af:60:65:d0:9d:3a:76:02:
                    f5:90:8a:23:93:15:be:e0:c8:86:68:e8:56:72:d2:
                    80:92:2b:0e:a5:3b:6a:ee:15:53:61:84:d1:ba:89:
                    a1:3c:97:55:89:bd:38:56:7d:42:e3:0f:51:98:41:
                    7f:5a:b5:30:93:b4:b4:66:0c:d7:bb:79:a9:73:65:
                    21:4a:73:1d:f8:d4:74:88:d0:39:fe:04:00:56:3f:
                    94:b5:6c:97:24:c2:14:d1:51:63:5c:a3:38:96:56:
                    5c:9b:bc:c1:45:78:e8:78:22:06:89:f3:12:31:9d:
                    a0:c5:5d:47:34:1e:ab:f8:55:b1:e3:c5:b1:bc:8f:
                    a4:6f:d0:b3:d0:82:44:4a:ef:a4:01:9c:ae:d0:1c:
                    b9:e0:22:32:39:3f:fe:ab:ec:ba:b0:51:0b:57:f8:
                    51:63:33:49:37:f9:bc:d0:31:06:93:e0:43:b3:8f:
                    45:aa:d9:a1:e4:f9:08:9b:b2:16:e9:02:08:b2:45:
                    94:6e:7a:3b:5f:33:37:00:80:56:76:d1:85:13:4b:
                    25:c0:8b:cc:a4:44:dd:99:cf:a8:4a:91:1e:fa:81:
                    94:d6:d7:5a:25:d2:ae:14:83:32:26:9e:df:ae:ab:
                    9b:96:22:97:79:b1:7e:17:93:b6:1f:74:31:17:e5:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:A2:67:8C:B5:02:FF:B8:CE:FA:5C:1A:5F:62:75:E4:56:23:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl

            X509v3 Authority Key Identifier:
                keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:9d:7d:c0:de:03:b6:fa:65:93:74:e6:62:b5:4c:d8:b3:
         41:5a:35:c8:3a:46:f9:fa:18:90:43:ff:1c:d0:e3:eb:84:a3:
         bc:25:97:61:89:90:d1:b2:08:35:a4:ea:e0:67:1c:7a:73:52:
         1d:45:2e:af:4d:a8:d6:bb:06:15:a7:cf:39:86:e4:10:1a:4a:
         6d:81:1b:27:a1:0d:88:2d:9d:3b:a4:9a:31:10:87:49:69:48:
         5c:96:62:df:a5:dd:5f:47:3d:4f:65:06:6d:c7:b1:17:b5:cd:
         a8:92:2b:3a:03:0d:99:e7:6f:b3:63:d3:64:4e:d9:0c:44:a0:
         d4:18:93:d4:59:e3:51:2a:f1:a0:0d:ac:83:97:86:91:f8:ee:
         d2:d9:6d:7f:29:e4:74:f3:77:59:80:67:9f:42:82:17:7c:d1:
         fd:d1:b5:87:70:21:01:b0:66:d6:b4:64:aa:30:df:06:f8:a5:
         fb:41:a5:b2:a6:a4:12:da:0b:06:93:6c:b4:80:ad:ea:1f:21:
         1b:76:7d:a2:ea:b8:ed:18:97:c3:c7:be:91:21:d9:81:8e:87:
         c1:2f:6d:8a:ff:a3:e4:99:25:cb:d1:e8:f9:89:32:53:fb:5e:
         2f:ad:93:60:04:fa:74:f6:63:25:de:cb:fa:1e:48:d6:15:42:
         59:30:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 10:40:35 2026 by rpki-client