Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
File:                     966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft (raw, json)
Hash identifier:          T8UQYqEt5mI1ceGLy8zuPSrkL6dzZJE6M/bGBC7b+1c=
Subject key identifier:   79:A4:82:BD:C1:75:28:1E:EF:27:16:37:DA:1D:F1:5F:BF:50:EC:44
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584B9C48ACD79F49197F8DF2E800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
Manifest number:          010D0C9F4328584073A82B8D25562C4607BCAA08
Signing time:             Wed 22 Oct 2025 22:00:10 +0000
Manifest this update:     Wed 22 Oct 2025 22:00:10 +0000
Manifest next update:     Fri 24 Oct 2025 22:00:00 +0000
Files and hashes:         1: 05d53889-8629-3f75-b779-6895e4c540d0.roa (hash: G8M9PYQVRnwSM1JCHYTCWs46bQBU43A2a2P5zPEVDDY=)
                          2: 2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (hash: lFT7glMpKUR+pVLYKoLisvxV69I1wZKGFs+N+HCIRw0=)
                          3: 25ac78b4-e1ca-3663-9d67-95abb9982390.roa (hash: RcjXN8dAmxudFrjEBYf8rtk/M4/B5PmJC6FevNLlQ7I=)
                          4: 2b01e8a5-5bc6-3b57-9464-78ee952d54f1.roa (hash: qhpuq+vF4595ZLk0XbyAWfBrhqvJ3s+EbGcR3tEF9yg=)
                          5: 48d069ba-5ef8-3f64-a653-d806fe8fd001.roa (hash: wryGfEQyMYnTEfShOEFhFfduC4DKiLG3heE0DuBuGYQ=)
                          6: 6cb98a97-7fd6-3210-a587-bc220c0d976f.roa (hash: JeK0cO4q0h4LUwPvl9qBVz0f4+q4DQKqY2O3WeJ4YfU=)
                          7: 7debd1b2-5d83-3b5d-abcf-cea0e892bdf0.roa (hash: gkOJemW8982ONU6mEv6vRx0dM7sn46y5eoyfSYVAKl8=)
                          8: 966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl (hash: +NJYNTruuMOgGNIywN8mRDSerjIdCgyua4/51AYZLF4=)
                          9: f2365043-f512-3bfd-8495-43e52b28ab51.roa (hash: vAGuMsnZBJCW23Im/FCu/tVvMhBZ43W3RSLWPWyJKVs=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:48:ac:d7:9f:49:19:7f:8d:f2:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Oct 22 22:00:10 2025 GMT
            Not After : Oct 24 22:00:00 2025 GMT
        Subject: CN=61c8703a-eabd-4d23-ae90-c4cbcd19fe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:c2:41:62:f3:63:08:7c:83:2a:33:7f:bc:
                    27:83:23:84:f5:45:ce:78:85:ed:a1:38:b3:92:0b:
                    ed:ca:0d:9d:23:9d:ae:e0:12:09:1b:e8:97:08:88:
                    6d:c3:0c:18:5f:eb:77:81:5c:fb:01:9c:6b:5d:9d:
                    a7:28:b3:39:db:32:87:0c:b5:a7:f1:49:35:b1:c7:
                    b9:bb:cd:7c:43:a0:43:35:87:17:59:d8:ac:4b:e5:
                    3c:bb:b2:a5:17:70:13:18:99:c3:73:9e:40:42:c9:
                    a4:a0:4e:14:62:12:1e:a7:a6:b2:29:76:4b:83:5f:
                    39:01:4a:98:48:28:62:be:45:06:e7:89:35:43:e6:
                    54:b7:40:d4:c4:0e:f3:c0:4c:46:c9:c9:56:33:d2:
                    b9:86:81:57:b5:22:54:5c:46:22:07:ef:13:45:fa:
                    d6:88:10:16:fc:d1:5a:9b:db:35:42:91:e7:fb:62:
                    df:31:7a:8a:9f:5a:5b:fe:fd:0b:ea:21:2e:b4:96:
                    58:31:8c:fd:0f:6a:74:df:65:4e:4f:89:6d:5e:6e:
                    6d:e5:72:81:a6:bc:95:f9:ac:7f:cb:b9:13:d5:ee:
                    00:57:cd:6c:58:8a:c1:6e:e9:6e:52:3e:f9:61:83:
                    f2:0c:ba:e8:69:1b:59:c2:97:5f:9f:09:6c:cb:d0:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:82:BD:C1:75:28:1E:EF:27:16:37:DA:1D:F1:5F:BF:50:EC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:49:7f:37:89:64:01:6c:25:bd:00:e7:bc:98:d0:55:ed:
         e5:29:36:cb:c2:77:8d:0f:63:d0:d5:9a:3a:d3:f2:c9:fa:03:
         f0:e7:1a:78:30:ba:f3:2f:b6:2a:ce:dc:9f:86:fe:28:d1:07:
         3e:50:dd:b4:e8:ae:2f:d2:09:10:78:2e:1d:02:5b:0a:2b:2d:
         d2:08:eb:75:d3:14:fd:e2:e2:83:58:95:b6:61:4d:7c:46:e1:
         76:e1:0f:0a:bc:c3:52:30:42:ae:dd:8a:0f:c3:ad:82:0b:ad:
         d5:5c:86:9b:c2:5a:f5:33:44:64:1d:b4:23:06:ff:2c:60:41:
         3e:cc:54:d0:2b:f8:74:1c:a2:58:e1:1e:3f:f8:68:a8:80:f0:
         3f:e5:4a:b4:7d:0d:47:f6:7c:d8:f6:07:48:c6:0e:8c:f6:70:
         b8:f5:c9:b7:4b:b9:d9:87:13:d1:0b:23:32:b2:09:8e:0b:58:
         16:91:e2:56:8c:36:a9:ff:37:d5:c4:28:1c:38:2f:cb:fc:8f:
         07:56:a0:b9:f2:c4:8a:7e:ad:b0:f0:41:f1:a4:ec:89:66:5b:
         2f:57:fa:81:20:3e:64:79:94:77:79:78:f3:b2:34:5b:63:8f:
         5a:01:4c:83:96:52:1e:7e:58:f6:dd:0b:8e:01:45:e3:5d:1d:
         bd:a2:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:53:04 2025 by rpki-client