Manifest

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File:                     cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier:          Cry4c7kmwB4jXPtFZYi9UrCQs6kVvMvBPgRofGzpuc0=
Subject key identifier:   19:18:B4:DB:0D:51:68:21:03:F0:69:F9:E1:B8:C2:1A:C3:1F:A6:6C
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       59AD77694AF1FC17A3A89F87C1D328DD61F6926C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number:          01A5
Signing time:             Sat 05 Sep 2026 00:16:34 +0000
Manifest this update:     Sat 05 Sep 2026 00:16:34 +0000
Manifest next update:     Wed 09 Sep 2026 00:16:34 +0000
Files and hashes:         1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: mizRw7SEPh8dCHhUZhyfVblF0zvAs4XGiS+DkgdHUSU=)
                          2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: NgP7gRkBr0KKwrc/EznhF1Cd3Hc/z5/lHlKOKPr7tOQ=)
                          3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: wXao0MicFbxwz7yPOJpkHq3j3GR+z2qQvOEQEcgfZ7Y=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 00:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ad:77:69:4a:f1:fc:17:a3:a8:9f:87:c1:d3:28:dd:61:f6:92:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Sep  5 00:16:34 2026 GMT
            Not After : Sep  9 00:16:34 2026 GMT
        Subject: serialNumber=f782533f965c357a96200d8e4282f47ad4b32efa24f591070633caedc4fee8f9, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:63:36:1c:09:7e:06:40:8d:54:a5:53:cf:
                    8e:96:39:8e:d4:23:94:73:d4:d1:d8:8a:ae:07:40:
                    28:37:c1:e1:73:0d:41:bd:12:0d:19:9c:ac:d5:9c:
                    48:3b:af:ed:4b:77:44:07:f0:ab:ab:fe:c9:67:e7:
                    47:fc:36:5e:cf:79:54:36:3f:7f:80:e3:f7:fa:ec:
                    a5:4b:aa:d4:e7:5b:df:95:8a:e2:3a:fe:6e:5f:46:
                    38:78:05:17:f8:63:9a:fd:1c:fe:78:f1:26:13:34:
                    96:e0:4a:d5:50:67:9f:ad:f2:61:05:07:9c:34:17:
                    86:57:bf:99:54:e0:bb:ba:f5:45:e9:6f:13:bc:61:
                    a9:6b:5f:20:f0:45:b8:eb:44:eb:39:c9:90:32:2f:
                    ae:23:e0:11:06:30:a7:dd:6f:83:28:f1:31:6a:6d:
                    d5:53:94:0b:8d:5e:ec:ae:ee:bb:d2:70:3b:69:89:
                    33:06:b7:ec:5b:f6:ac:7e:0d:6c:ea:83:96:cf:fe:
                    a8:1b:8f:e9:ac:7a:1d:5e:15:03:94:02:9c:4f:95:
                    f3:14:2c:4e:de:90:24:6e:6b:13:d2:8a:40:73:e5:
                    7f:92:80:0a:8e:88:4c:45:0e:e5:18:cb:33:f7:e8:
                    53:18:ba:5a:01:02:d5:a2:17:fe:b7:bb:12:92:5f:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:B4:DB:0D:51:68:21:03:F0:69:F9:E1:B8:C2:1A:C3:1F:A6:6C
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:b6:9e:ae:bd:8f:8d:de:31:18:db:45:f8:a1:81:60:bb:
         56:b2:78:dd:30:56:64:4c:d9:35:89:17:71:b2:ae:e8:65:68:
         9d:a5:ca:ba:4a:74:77:44:21:5a:12:d0:51:8f:4e:ff:8c:59:
         64:e6:12:c5:bc:02:aa:61:fc:0b:99:3c:01:b0:cd:86:01:08:
         04:f2:29:aa:e6:88:ef:70:39:92:d3:ad:c2:2f:0e:c5:01:03:
         2f:6b:49:b2:ce:c3:6a:e9:82:2e:48:50:73:21:4a:49:5f:ae:
         7a:b5:5a:0c:25:82:b9:1e:51:31:36:79:b3:a8:a4:f4:40:a8:
         b7:ef:7e:e1:f5:56:80:a4:46:da:cf:26:8e:7e:d1:13:cd:a8:
         f1:fa:70:3d:ff:98:88:cd:a7:f6:f7:42:4d:5d:d6:c2:bd:4e:
         47:42:3a:6e:16:56:9c:b2:40:31:92:ab:86:81:da:3d:01:bc:
         98:21:7d:79:78:ff:f2:b3:9a:6c:39:ce:25:1f:8b:bb:8b:c0:
         3e:7c:70:9f:ef:14:33:4a:42:1d:b8:c2:ed:91:d7:df:14:9d:
         9b:ef:cd:b6:8a:0a:c0:15:47:b2:bd:17:8e:21:0c:cc:d2:91:
         97:b5:7b:29:c8:cd:dd:fa:1e:e2:3a:0a:67:0c:21:68:e8:9c:
         f4:fb:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:55:54 2026 by rpki-client