Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          vT4RBhHbn1pB87WZNHI01vJ25LIvJBRR+oU2cQmUCpA=
Subject key identifier:   AA:32:A1:8B:9E:84:9F:C6:03:E0:4A:D0:F8:DB:2B:9E:FD:F5:1E:71
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       65F54974C87F4966C42158EA8CF793E49F0ED489
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          054F
Signing time:             Fri 24 Jul 2026 00:42:46 +0000
Manifest this update:     Fri 24 Jul 2026 00:42:46 +0000
Manifest next update:     Tue 28 Jul 2026 00:42:46 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: oUMe3g3QTdCxYfZWaKIOifKEISh/Xn0CDwcFibAPq+Y=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: vo7zDkeIj1zvAKFvlgu6s59FbmmzTZtE3Bgt3+MoaOI=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: EySpKTnGTXRtqg/FT+5OU2qs4XWoKp6X7kyWjscJP/s=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: ph5ySmRjt511C6NuilGv40TeBDy8HssmKgXImEOi+bo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f5:49:74:c8:7f:49:66:c4:21:58:ea:8c:f7:93:e4:9f:0e:d4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jul 24 00:42:46 2026 GMT
            Not After : Jul 28 00:42:46 2026 GMT
        Subject: serialNumber=5e424faa6ff500d173c6caf91b698e5bd4f79415c7ec810a04aafef2a3aa9be3, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:b8:01:db:35:2c:6b:6b:3e:47:3e:d9:e5:
                    06:b4:fc:80:9a:a2:c0:a4:4e:e2:79:85:1f:6a:30:
                    1a:4b:fe:5e:39:f6:a9:73:b5:05:b4:f1:32:7d:db:
                    d5:78:f0:d3:fb:3a:f4:d8:f5:ee:5e:78:c6:d7:30:
                    99:b3:fa:82:67:af:ac:13:7f:41:52:03:0f:4b:1f:
                    cf:8d:e6:44:7d:9a:24:85:75:1a:59:87:b7:14:c0:
                    b1:5f:df:e2:4a:b9:a5:a7:ff:a8:f1:4c:3e:62:6f:
                    2e:91:ba:71:da:1a:2a:1b:5f:bb:21:ae:b1:2f:65:
                    78:fa:7d:5e:d2:c7:ed:a5:35:ca:5c:90:11:80:fa:
                    5e:47:3d:d2:e5:cb:8d:12:80:3a:6f:c8:63:83:20:
                    f0:4c:48:3b:b9:7d:6a:6c:a1:a5:c3:3e:45:ef:1c:
                    f9:49:1d:c8:0f:7e:4c:44:38:4d:2d:e9:bd:d2:05:
                    1d:0c:11:d0:90:fc:0c:a1:6e:8f:e9:28:0f:fb:d6:
                    32:47:64:45:e9:16:59:77:0a:b3:ea:1e:c8:bd:97:
                    d7:b4:35:ab:51:2f:09:f7:2e:b5:a6:15:78:57:4d:
                    c4:41:d5:8c:b1:0e:84:66:88:01:0e:96:50:a8:80:
                    08:98:72:a4:55:17:d8:34:c3:e8:a5:97:55:13:ca:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:32:A1:8B:9E:84:9F:C6:03:E0:4A:D0:F8:DB:2B:9E:FD:F5:1E:71
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:58:cd:fd:4e:5b:94:33:58:6e:1a:70:ad:0d:c6:78:08:45:
         d3:a4:89:a5:83:7b:bc:9f:7b:e2:60:5e:03:25:59:cb:81:77:
         01:3c:19:ce:c9:ba:2b:47:4f:25:62:49:7b:14:14:14:11:c7:
         f4:b0:13:30:cd:5c:fa:71:55:8c:11:f7:f8:4a:9d:0e:91:ed:
         be:18:78:55:80:42:34:8e:cf:16:db:8a:9a:ad:45:4d:50:3b:
         65:dd:ee:d3:e9:d6:f2:62:58:3b:bf:36:c9:b3:f6:60:8d:21:
         8c:13:06:07:5c:b4:c4:ef:ff:37:93:ee:f2:db:67:f5:b3:32:
         3b:cf:c6:35:27:d9:aa:f7:c6:cd:61:1c:d0:4e:aa:91:93:1b:
         4e:1f:d8:b4:51:20:5a:d4:0a:39:9f:fb:3f:61:27:84:2d:70:
         78:a5:a6:89:91:9c:2f:2d:e2:0f:01:df:48:bd:37:9a:ad:72:
         c7:80:1d:e2:d0:aa:67:36:6c:07:64:2e:e1:fe:24:32:cd:47:
         48:24:53:f8:d7:5e:27:4f:6e:cc:71:78:7d:86:73:60:09:b9:
         24:2f:c7:be:a0:57:9b:d2:b3:b6:06:c8:71:70:fe:49:6b:80:
         f1:44:f3:84:6c:6d:5f:97:47:71:40:51:3d:c6:b1:95:73:96:
         be:41:88:fe
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUZfVJdMh/SWbEIVjqjPeT5J8O1IkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5
MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjYwNzI0MDA0MjQ2WhcNMjYwNzI4MDA0MjQ2
WjB6MUkwRwYDVQQFE0A1ZTQyNGZhYTZmZjUwMGQxNzNjNmNhZjkxYjY5OGU1YmQ0
Zjc5NDE1YzdlYzgxMGEwNGFhZmVmMmEzYWE5YmUzMS0wKwYDVQQDEyQxNWYxNjgz
YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz5rgB2zUsa2s+Rz7Z5Qa0/ICaosCkTuJ5hR9qMBpL/l45
9qlztQW08TJ929V48NP7OvTY9e5eeMbXMJmz+oJnr6wTf0FSAw9LH8+N5kR9miSF
dRpZh7cUwLFf3+JKuaWn/6jxTD5iby6RunHaGiobX7shrrEvZXj6fV7Sx+2lNcpc
kBGA+l5HPdLly40SgDpvyGODIPBMSDu5fWpsoaXDPkXvHPlJHcgPfkxEOE0t6b3S
BR0MEdCQ/Ayhbo/pKA/71jJHZEXpFll3CrPqHsi9l9e0NatRLwn3LrWmFXhXTcRB
1YyxDoRmiAEOllCogAiYcqRVF9g0w+ill1UTysxbAgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQUqjKhi56En8YD4ErQ+Nsrnv31HnEwHwYDVR0jBBgwFoAUbcpl0HFNfvJW
kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01
NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0
ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm
NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4
NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5WM39
TluUM1huGnCtDcZ4CEXTpImlg3u8n3viYF4DJVnLgXcBPBnOyborR08lYkl7FBQU
Ecf0sBMwzVz6cVWMEff4Sp0Oke2+GHhVgEI0js8W24qarUVNUDtl3e7T6dbyYlg7
vzbJs/ZgjSGMEwYHXLTE7/83k+7y22f1szI7z8Y1J9mq98bNYRzQTqqRkxtOH9i0
USBa1Ao5n/s/YSeELXB4paaJkZwvLeIPAd9IvTearXLHgB3i0KpnNmwHZC7h/iQy
zUdIJFP4114nT27McXh9hnNgCbkkL8e+oFeb0rO2BshxcP5Ja4DxRPOEbG1fl0dx
QFE9xrGVc5a+QYj+
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:42 2026 by rpki-client