Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
File:                     bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft (raw, json)
Hash identifier:          ZAx7BvgwpTvk9na2uRNWkSKG6YLWCHUcRouj+G6PV7A=
Subject key identifier:   51:15:E9:CC:7F:CF:A9:92:D0:F1:8A:57:9B:66:12:72:01:E3:03:2B
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Certificate issuer:       /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial:       010D0C9F4328584B10B270FBF034A765A5E21C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
Manifest number:          010D0C9F43285843E952A6AD8BEC7CE19FDBF135
Signing time:             Tue 02 Sep 2025 22:00:08 +0000
Manifest this update:     Tue 02 Sep 2025 22:00:08 +0000
Manifest next update:     Fri 05 Sep 2025 22:00:00 +0000
Files and hashes:         1: 60e73e07-f4ae-3c71-9e25-99a3e612e843.roa (hash: jwpVrLXDF6DqCTdLrOHYusOjEoxkSnhQr7Qrfq7Mvug=)
                          2: 61bec44b-5ffa-3389-be66-f3467d23df43.roa (hash: D8tlRREQaq2TcFZ2zbopyvuP2906e/760gvSssK3+fg=)
                          3: 7b652754-9f57-3773-9a15-03fc0f21b9a4.roa (hash: /VQ+O2X26LM5ZNYAxxA92CR01GP2/0FjpzgKSmt6u58=)
                          4: bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl (hash: MEXEHJc+45420nFiE02PhDtHZPdMg9R+M6GGfKbqyUw=)
                          5: dbe5733e-36c8-378c-88f2-39ec41abc78c.roa (hash: fYVT+fM/IIUaAVNcyqi+axRTOyFEuP2Z9hAW/98vO/g=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:b2:70:fb:f0:34:a7:65:a5:e2:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
        Validity
            Not Before: Sep  2 22:00:08 2025 GMT
            Not After : Sep  5 22:00:00 2025 GMT
        Subject: CN=5a865bb8-133c-4f3f-bb33-0d18f9aa4b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:61:2e:ba:03:0a:8a:53:d7:8f:ee:73:07:
                    e7:9e:10:c1:65:67:8a:97:b0:d1:8d:16:08:98:78:
                    6e:8f:9a:4e:7b:5e:3d:95:33:07:0c:61:29:e4:b3:
                    d5:27:18:96:91:60:8d:eb:34:6c:9b:7a:ae:d6:fe:
                    a8:8c:1e:c9:1c:e7:b6:08:58:d9:ec:aa:11:d6:5b:
                    eb:63:eb:4b:d3:3e:93:51:b9:91:4f:d4:54:0d:67:
                    e4:90:dc:06:c2:64:65:90:7e:37:fc:8b:af:e2:9d:
                    f9:70:0d:23:73:3a:25:62:c3:5c:78:ab:2b:28:55:
                    19:48:7d:c5:c4:61:91:6c:b0:c8:a7:12:a6:d7:6e:
                    6a:f1:01:94:f0:1a:be:2c:16:fa:5c:39:75:2d:b4:
                    56:ff:c6:62:26:1b:c5:ff:52:2f:0a:d4:0e:b2:da:
                    43:c3:64:17:38:a6:33:5e:e9:8f:12:7d:ee:26:c8:
                    17:57:ce:e0:f7:45:a3:27:56:72:61:9e:e0:18:a2:
                    96:c2:2d:4a:6e:30:85:06:b4:79:eb:61:59:5f:df:
                    a2:4c:eb:d8:04:67:69:85:73:93:73:9d:1e:65:4b:
                    ac:3c:ea:6f:48:5b:f8:eb:5b:34:cc:00:42:c4:73:
                    50:41:03:70:1b:f1:54:cc:86:4d:8b:73:41:79:51:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:E9:CC:7F:CF:A9:92:D0:F1:8A:57:9B:66:12:72:01:E3:03:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl

            X509v3 Authority Key Identifier:
                keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4d:53:50:07:c9:fb:1d:d1:25:e5:12:0f:39:47:59:d3:e7:
         fd:97:d7:85:5a:a7:ca:dc:6a:55:17:66:49:b2:4e:10:b7:ee:
         66:c2:c5:23:7a:03:e7:fb:97:3f:2b:7b:6b:66:2e:b5:4a:6f:
         57:34:ae:42:09:22:2f:f6:55:46:b0:22:9f:3e:0a:63:ff:85:
         9b:4f:8c:38:ec:74:9c:54:cc:12:2a:97:cd:d3:0d:a5:2c:fd:
         4f:68:95:ea:84:43:5a:b5:08:3b:4e:5e:b0:df:b4:cf:71:44:
         c2:21:32:1e:75:5f:d5:ad:9f:ca:8f:5c:ba:72:86:20:25:41:
         d6:10:a3:8a:63:20:80:1d:f0:db:0a:15:09:60:63:10:16:31:
         a8:0f:31:73:49:14:28:74:24:05:a2:90:d2:ad:7d:c7:e0:e6:
         45:d1:df:1f:dd:1f:8e:51:63:b1:4a:65:49:30:cc:09:24:12:
         04:b0:5c:e7:af:0b:51:ab:7d:42:1f:c3:3c:28:81:ab:71:1b:
         9d:82:4b:82:4b:a6:44:7f:69:eb:3a:7f:b4:4e:3c:b8:20:af:
         e6:dc:54:87:f2:2e:c5:e3:f8:d4:b5:ab:7a:10:bd:73:b9:64:
         2a:fe:4e:7d:f6:e5:25:e1:c4:fa:56:41:8f:5f:02:44:7f:ff:
         b0:7b:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 15:25:38 2025 by rpki-client