Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
File:                     65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft (raw, json)
Hash identifier:          GNAG+CaP9xpAZXPcaXsvL/+CJcFESlKy9hFP48AKLaw=
Subject key identifier:   72:E9:55:63:3B:FE:FA:A8:26:4D:31:C5:EE:22:BC:DB:B6:F2:C9:8D
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584B970C946AE709106F204F2A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
Manifest number:          010D0C9F4328584073A834A689C48A220C71C3A4
Signing time:             Tue 21 Oct 2025 01:00:03 +0000
Manifest this update:     Tue 21 Oct 2025 01:00:03 +0000
Manifest next update:     Thu 23 Oct 2025 01:00:00 +0000
Files and hashes:         1: 12e25bfd-48ae-3584-b872-54c13376b8c0.roa (hash: q5BFnrgZm1oIWEOOs3YM9KDH4VF1HX9hgb+oEXGK9Ic=)
                          2: 15383f43-f5cd-3241-a265-e7db977d6344.roa (hash: K/mn0FSrMeJTafsoUxC44JzaQLFY7G7NXrhrTokGO2I=)
                          3: 1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa (hash: FxIuauOVUeWTDe7nPx6nroULAuWrao2mJ5LROaxulKk=)
                          4: 1db45472-9134-3bf8-aa89-4db40eab619e.roa (hash: 6d/cv803WqHxa+4507dllVILuZ9sUVB+D11lk/zwjpg=)
                          5: 239bd553-03a2-3225-90fa-315cf5127374.roa (hash: VHc4pjOKZ2l1233iITXJ7jtzmrvCA7jVBAOoTAfQajk=)
                          6: 24950ded-55a1-39d0-a8db-cbae4f113310.roa (hash: nEDspd1tq5CmIwJuwxA1nxLAUT8JzCurOhQvbzjA/8I=)
                          7: 26029641-282d-3aa4-bfc0-ad85767c94c5.roa (hash: ZaHSM2jb1KJIJG2g3c4BodRYAsvNvhVNE2ZExErk5Qg=)
                          8: 294e8dae-7077-3506-b268-d0c45106585b.roa (hash: HJOC6I6rmu/XAL3pTDk8+1hsWa8I8L3MqtXVhSmEShE=)
                          9: 34ff191a-57a4-361c-bcdf-9d2448d1e01b.roa (hash: hwX7zNWIXnjZsOOkmd6c1XGKsieKCs5DUy/xyV6yqEA=)
                          10: 35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa (hash: ktxEu/LYClIKflqjT6xUP+Lkm7xleG+lxPuoDXoX3ws=)
                          11: 3f5b4c33-2164-3b93-ac9c-8db15b1654a6.roa (hash: sysHvzhe8mxBnaqjjLKSle8BaO5RU//NMfMjwF+rWXE=)
                          12: 412889ef-4fb1-3cc7-a062-92546b1ab937.roa (hash: /3O6tZxuRRLR/CCdnFU4oWUWDt5SvXqRnKPSHSRlL5U=)
                          13: 4b2e88af-7f81-348d-bb58-5ae1a543b386.roa (hash: ia8KuhHD42ZMfnV76if7wdQ2VU4GzRVRhMhMUTPYRrw=)
                          14: 519d7374-012d-3f46-a81f-44fdab54e5b1.roa (hash: sg3Rv+H/C/OmlxS4mZKTvUm4nYRO8XJabMB+xr15Sxo=)
                          15: 53009550-1451-3677-ae05-9e5e5e0b9c09.roa (hash: Jy6J4EKdBWDMd6o7lCxmILvEhJzVx9aBfu1R9qOwKJk=)
                          16: 54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa (hash: NieBv/KmFnpkNZK7Ij/NkBwxjoHZNCtpVpiuhII7DNE=)
                          17: 5d8f3fe1-e905-3bc4-a6f1-e1ffa46eeb09.roa (hash: 8uWOtJgU7PlwKCp6hDp6BRaD3njEYEzb6+X4K3Q+5N4=)
                          18: 65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl (hash: z5zoegrqFxAoUZ+kdOGGsWV1RAi73uWmFllihhJY2tY=)
                          19: 699adbfe-eb3c-3981-a243-cff5b1b17b33.roa (hash: C5uNFizl9ALrj1F7i1RcuiM5/FihBf44NMxEPLFEius=)
                          20: 6c5bb5da-e510-3e29-a83b-47f8ff8d0add.roa (hash: us1MLAx0j1s7USo1qxYNCXLhxCbuamPYM8eyoUCtpUE=)
                          21: 82ad5cc5-0dc9-3d83-9736-ff3bf4b6c7d4.roa (hash: xyC+P6n6X4yNoyVEKrCHVsJEpBfl27/N9Nbz7/7y5LA=)
                          22: 8df85303-0c83-3e75-99ff-69c78e7ad9e4.roa (hash: DYJy+VrlS0Om1o7vBUh4C1Ej4HQDAWMtOXveuZNwWmM=)
                          23: 944798f3-c757-3437-a879-f1ef410b924e.roa (hash: jWDQuh6Cb2QyruGnfxVBuK3mbjg7BrK4tVTbrKmFnjI=)
                          24: 9b3a1c8e-6335-3cc0-b375-5dfeb8d7a582.roa (hash: r7Qk/LmWhzEZP3p30ZN/YbEqsb5PER25qGj1Nzk84RM=)
                          25: 9dd4334e-c87f-3221-b0a5-fb90be0d7f78.roa (hash: lSBqYcBT/REvh3SJOaM5xw9Vf9AYu5xm2FoccaIImIk=)
                          26: a42bb71d-2336-3ef6-a6bd-e30f46d0813d.roa (hash: A8RkQ686gMPmJro+NEzNMRVMD81/mffYtn/dZWiiozo=)
                          27: aed37f97-9d26-39f4-bede-8847dce5b703.roa (hash: ZDmNETfs1KBTdTlyoXBLZCnUTRQee+vqBtVB7tm5joo=)
                          28: bc5ab001-20f8-3dd4-875b-a1df9d060ee5.roa (hash: KgQLS/pPxgWy8ehrJwT7cLNPm7A2crI5wv1PNf/rUcA=)
                          29: bdea95b5-6ac6-3343-8c09-ca296bac4953.roa (hash: Ae+IDTFfakBl7HR4hSl7YJXoWmJqX1e7kIgm7OIzHJ8=)
                          30: c42ea2f7-c5d8-3ff4-874c-e85b2714e34e.roa (hash: aPpgZjE6d8L3IdHPNM6wdFVyQ4sgofOImSbHN4v8TtE=)
                          31: ca06bd9b-beb6-3f78-950b-575c93605483.roa (hash: mNxu+trR2RjTSmL0OXoL9PczUitEiasEJUJxfkz2TVo=)
                          32: cb916401-ea5b-3d86-8a26-5b1519d47e01.roa (hash: PgPiIvhZD5Yc2zurQJf5tnGvllYkt8wH9lHqJkuurBE=)
                          33: cbdce3c2-d409-3f34-ae70-ad6da5abedf5.roa (hash: rDk28K9I034NLMqDwT7rTA+rof0sTj3uIQ1BL0LtoWk=)
                          34: dcf6abac-3278-34ff-858f-216949196e32.roa (hash: 6gehW8k8+LqEklq3Iyp0yx4gJKYrqwzApHLUVwWmOFQ=)
                          35: dd4b9e4a-23ac-3cdd-9c09-0db6702ee4f6.roa (hash: FgQ4JHjxGC4CwUSdlqojUyRPSEIO2pa3sWfnpIEnhNU=)
                          36: dd625632-a539-33a4-9237-fe4bb2a3cc8b.roa (hash: hWSEcdHR8Fj6Pb7+ZmFpcCcBHMcqJS33k3cNyxqQKsg=)
                          37: e29947bf-55a1-3ca2-8208-b846343c1da0.roa (hash: 1RBb8OggSJHC50Q1fgyQBYBErqY4Ju9SpbOWuGgkvxg=)
                          38: e37b5869-b2c1-3651-acaf-85d0925faaea.roa (hash: 6XHIw7SkX3fCHiZ1flNlF6JN8Iql9vhjkpVZjBhHIa8=)
                          39: e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa (hash: ikoAqGGbZLCAs8rdezXP+AT/XcOKuERpvHkvrqhrPWo=)
                          40: f2fc9ebd-5322-319e-92fc-ab1e1f23e104.roa (hash: EKfZ1vK55TFDt6smJC64kwV+5aqHQzVsEKzT0J+2t8M=)
                          41: f472fb35-0540-3ebc-ab17-926ca90c1609.roa (hash: oODcQWsjUmpR9lGQ45rTLCkS7cp7PdHJlGBjpWRgH8Q=)
                          42: fa414485-139d-389b-9463-e7927e00b8bc.roa (hash: 3MbWh+WofPPOF1TwsIxgC2KuS2kcrMnJaafKrW/Xbcc=)
                          43: fdd597b4-07cd-3c70-a8db-c0e7beb7e92e.roa (hash: KcSAdC2XWUd/1VNhgSOsXPXFWGxmplwUTi5aLDRuejU=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:94:6a:e7:09:10:6f:20:4f:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 21 01:00:03 2025 GMT
            Not After : Oct 23 01:00:00 2025 GMT
        Subject: CN=dce8f7d7-1aaa-439e-aae7-79274f883620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ae:78:ac:25:20:be:7f:b6:31:49:4d:a3:a5:
                    17:bb:f1:cc:80:e1:fc:bd:a7:2e:9a:59:b0:b8:3c:
                    5e:d3:d5:ab:af:ec:b3:80:7a:5b:3f:cd:14:97:5c:
                    eb:a5:0c:b3:96:e0:b7:28:7a:5f:8a:3b:7a:b7:f6:
                    6b:fb:d5:8a:0c:35:5a:54:3a:14:83:9b:f5:ff:6c:
                    ea:2c:ba:7b:47:ae:f1:93:e1:91:76:90:d9:da:7f:
                    00:ce:fa:e2:ed:ee:b8:56:16:fa:ae:55:2e:39:85:
                    32:50:d2:98:f9:56:59:1e:b6:74:0d:05:44:92:2f:
                    df:9b:a9:90:1a:60:3f:df:cf:cf:31:fa:ce:e3:a4:
                    33:30:b2:5e:79:51:49:31:84:ac:08:29:4f:d9:c6:
                    cf:bc:d6:bd:fe:70:d7:d0:86:c8:fc:09:cc:58:f0:
                    1c:cc:2f:a9:eb:c2:40:f3:9f:27:bd:fa:a2:24:08:
                    f1:af:72:b6:31:5b:4e:5f:a4:28:41:cd:60:56:6c:
                    df:1d:64:72:79:9d:98:b7:15:03:13:02:9b:5d:00:
                    d6:d6:bb:cd:db:7c:38:b7:5e:67:26:b1:19:ff:a8:
                    2e:bc:04:06:91:2e:24:74:ff:ab:85:37:81:8c:7f:
                    b7:e7:51:f7:29:3e:80:64:3d:e1:4c:38:68:7b:0b:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:55:63:3B:FE:FA:A8:26:4D:31:C5:EE:22:BC:DB:B6:F2:C9:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:d5:a3:62:7d:8a:dc:0a:3d:b5:84:b2:aa:e3:cb:fa:13:
         25:db:51:ad:51:65:19:50:60:de:37:0f:46:81:48:28:bb:e7:
         74:ab:3a:5e:86:56:08:61:04:64:dc:8e:28:91:9b:97:23:f4:
         81:ac:45:20:cd:62:05:a9:6f:6a:2a:10:0d:f6:97:45:1e:42:
         99:cc:e9:c8:1b:bb:5e:26:23:c7:95:69:34:1a:f4:1e:e9:fa:
         8a:fe:0f:eb:71:4f:85:00:20:19:64:8f:dd:82:1b:b7:e4:7e:
         8e:27:e0:f6:c9:cf:e9:e0:46:a3:cf:a7:22:8c:73:f1:e2:a3:
         55:7d:f2:9b:b7:41:ce:b7:f2:68:b6:ea:88:c9:6c:8e:6c:6f:
         78:9f:3b:b2:f2:8e:c1:20:c1:87:df:2f:38:9d:ff:a6:19:7b:
         3e:4b:2c:4b:88:ae:63:c0:7e:4a:32:6e:af:29:10:cb:27:12:
         6f:24:04:fb:d3:30:6c:5a:da:d7:38:65:2a:d2:16:57:09:94:
         d4:c4:c3:8c:7d:65:7b:69:57:51:4a:a0:10:10:97:74:83:85:
         49:26:0d:2a:af:83:a5:a3:fe:e9:a8:3f:47:94:d1:a5:59:0f:
         d7:b5:87:ed:51:07:da:07:74:8e:f1:bd:40:05:89:f1:2a:e9:
         2a:16:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:24:03 2025 by rpki-client