Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
File:                     bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft (raw, json)
Hash identifier:          4XcZiOXSSPquMY5UBQQ1EHyI3782f3grWJIQhZBjY2w=
Subject key identifier:   D3:A8:8B:EA:FF:8B:86:40:6C:1B:D1:00:16:DB:C9:FB:64:A5:1C:5E
Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2
Certificate issuer:       /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
Certificate serial:       010D0C9F4328584D5436E9A6C7CB86E807366600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
Manifest number:          010D0C9F4328584AB3740036000CA7473DAEBE7D
Signing time:             Sun 29 Mar 2026 12:00:03 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:03 +0000
Manifest next update:     Tue 31 Mar 2026 15:00:00 +0000
Files and hashes:         1: 3146a355-4904-3716-8587-bfd701b63f6a.roa (hash: RhCZ8BVnz87sr2HTlkFGh/egbxV/VbV74bTUUk6cC8c=)
                          2: 52a98281-143a-37cd-966c-808bd9db6981.roa (hash: 4+Qp90kSITXhPWdKoXWvrG6xWkgMXc9G59NLV7+v07A=)
                          3: aff2f39e-faa0-3953-afbf-237b8e2372fa.roa (hash: fOdLRszzknBHjpx1GESphRZwxYM5+pHQMyO8wix9kvs=)
                          4: bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl (hash: LdKFxAeblOl5+fzekulE93fEyRlzbV6oOL40+0mrOU8=)
                          5: ed573cf1-a596-38f3-ac33-bbb7d8ad9ca9.roa (hash: T86TQsnb8azcfyTAWl5Hdl5/G8YdbPpqfxO4VWTtDn0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:54:36:e9:a6:c7:cb:86:e8:07:36:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
        Validity
            Not Before: Mar 29 12:00:03 2026 GMT
            Not After : Mar 31 15:00:00 2026 GMT
        Subject: CN=8a35619a-ffde-4918-abb9-45e8bf14beef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:3e:39:b9:1d:bf:57:92:9b:ae:1b:ba:b3:
                    d0:5e:29:06:75:64:70:96:98:f1:ee:0d:e6:21:f0:
                    e5:b3:95:d1:86:dc:53:67:72:ac:57:b7:30:f0:71:
                    1a:76:6c:bb:a5:84:d2:d4:32:7a:b0:c2:ec:a0:c7:
                    ad:cb:4a:9a:02:e1:55:8c:05:0e:06:d8:eb:06:44:
                    5f:86:a4:b0:70:45:30:0f:95:33:5e:a1:63:82:d6:
                    8f:1b:3e:e9:bc:94:e1:1a:dd:0c:5a:6d:c5:fb:3c:
                    57:71:4b:34:c0:44:68:d9:fe:7f:a4:bd:7b:0a:e3:
                    41:10:cb:74:f1:90:14:ec:1a:45:5b:5e:05:81:41:
                    e8:48:c9:a5:31:26:0a:f0:19:5e:46:81:3d:54:7c:
                    fb:fc:bf:50:a1:42:9a:a7:1c:1b:96:d1:7e:0a:00:
                    eb:0e:c1:e8:5e:d4:8f:a7:9e:87:be:4b:ac:51:de:
                    24:be:d1:3e:05:0b:75:33:46:dd:e6:a8:35:01:eb:
                    31:b9:03:28:0a:8d:db:c5:90:be:fe:84:0d:f4:dd:
                    92:de:f0:2b:bc:b1:d9:74:89:99:f9:8f:29:db:99:
                    50:42:4d:33:de:b9:04:10:cf:46:80:a3:b5:11:78:
                    22:54:b5:98:0b:f0:e2:86:91:f8:41:e3:85:27:cc:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:8B:EA:FF:8B:86:40:6C:1B:D1:00:16:DB:C9:FB:64:A5:1C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl

            X509v3 Authority Key Identifier:
                keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:99:93:e3:ea:a6:f8:c7:73:a8:a6:3f:29:c7:ce:20:9e:
         85:e4:12:eb:e6:b1:8e:fb:6f:d8:f0:2d:a7:ef:8e:77:25:2b:
         9e:eb:eb:64:99:fb:33:6b:4b:bc:03:38:ed:e2:13:57:85:4f:
         64:5f:61:a2:6c:c1:92:ba:bf:2c:7b:09:ca:ed:d6:f6:7a:6d:
         91:81:37:e8:23:71:d5:ee:ce:ef:27:6a:58:c4:0d:fd:a8:b0:
         fb:62:2c:60:68:72:3d:a1:ba:11:60:d7:cd:73:6e:08:56:75:
         81:b1:db:67:b5:18:ab:00:51:52:5b:98:88:ce:60:16:f9:1f:
         38:5b:b0:d3:80:61:54:5e:68:3c:73:5c:11:cf:da:b8:ff:f3:
         06:a6:17:f2:76:6c:c8:18:86:d9:e9:b7:27:3b:f4:50:86:f0:
         5b:cc:4a:96:5c:9d:62:4c:47:7e:1f:e4:fb:49:f2:64:9f:13:
         83:c3:63:04:4e:a1:0d:55:cb:db:30:42:4a:68:52:39:e3:01:
         18:40:a6:42:c2:b7:98:ee:f3:01:76:f5:01:0a:16:83:f8:a7:
         a7:c9:ff:9f:d2:b7:3c:c9:57:35:52:fb:b4:7d:0d:39:7f:dd:
         d3:e8:53:33:f6:80:96:89:4b:18:9f:96:96:dd:52:b5:d7:54:
         f0:70:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 06:44:34 2026 by rpki-client