Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          PZjfyawzdAIHgZ2oqprIVYdBmT6yVmrEPU0QBwwqcng=
Subject key identifier:   32:D4:AE:5F:73:A3:DF:5D:C4:F8:CB:14:57:62:4F:1A:F7:54:46:E2
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       19EFBDDE794D3DC3DB3654BFA5E72FE0DF04D78C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0552
Signing time:             Mon 27 Jul 2026 00:43:20 +0000
Manifest this update:     Mon 27 Jul 2026 00:43:20 +0000
Manifest next update:     Fri 31 Jul 2026 00:43:20 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: oUMe3g3QTdCxYfZWaKIOifKEISh/Xn0CDwcFibAPq+Y=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: txai0PxWUN3NmVZmA9/FcrolVsm/J0YOjYWnQDdYBh8=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: EySpKTnGTXRtqg/FT+5OU2qs4XWoKp6X7kyWjscJP/s=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: ph5ySmRjt511C6NuilGv40TeBDy8HssmKgXImEOi+bo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:bd:de:79:4d:3d:c3:db:36:54:bf:a5:e7:2f:e0:df:04:d7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jul 27 00:43:20 2026 GMT
            Not After : Jul 31 00:43:20 2026 GMT
        Subject: serialNumber=02dd0a9e37550b03da2ccd951191857f404e74068e085b519e67f2b298c351cc, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:34:59:1b:87:83:eb:1a:c5:10:14:e9:05:
                    25:ee:1a:56:ee:44:9e:ef:c3:71:54:50:37:75:26:
                    a4:d6:ba:3f:43:b9:5d:49:49:12:1e:50:df:4b:64:
                    4e:02:09:3b:a4:a6:06:9f:03:ef:6f:8f:f1:df:0c:
                    b9:7b:61:a5:c6:53:8b:e9:55:b9:05:88:76:6e:d9:
                    a2:4c:b2:56:af:92:e8:74:56:f4:ea:68:3d:2e:a3:
                    b0:0a:d9:07:6a:4f:cc:39:d3:e8:19:dc:8a:3e:a3:
                    71:6e:57:34:34:81:5a:03:04:9c:97:81:14:14:ee:
                    7f:44:88:f9:9f:c6:1c:fd:9a:7b:0d:69:bb:01:fa:
                    04:e4:d0:1a:e5:3d:e9:b6:04:47:f8:57:c2:d9:17:
                    48:50:cc:48:4e:35:55:f1:e5:71:fd:d4:53:9f:72:
                    44:c2:ff:a2:0b:04:2b:4d:19:56:f0:f8:56:88:51:
                    9d:b9:da:5c:b3:81:5a:44:43:e7:13:f7:70:a0:d0:
                    4d:85:d9:f6:f6:bf:c6:03:68:29:96:d8:05:3a:e3:
                    85:db:cb:c1:b4:9c:1a:fe:ae:40:33:af:07:1f:fc:
                    a2:c9:f2:95:3e:1f:91:24:fc:6f:f5:8a:83:6e:e8:
                    67:e4:2f:e3:12:5a:7f:94:3c:e9:e5:f4:6f:d9:a7:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:AE:5F:73:A3:DF:5D:C4:F8:CB:14:57:62:4F:1A:F7:54:46:E2
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:61:73:2f:fb:b6:aa:9c:97:b9:d4:8c:06:37:3f:c8:25:
         4e:a5:92:d8:15:9b:3d:20:03:35:08:23:ec:b4:58:fb:ba:df:
         9a:c3:76:06:9f:8b:96:4d:6b:e6:a2:f5:dd:da:a1:be:f9:6a:
         1f:b0:89:ca:e4:df:7d:71:d1:bc:d1:a8:d2:7e:9d:34:2f:79:
         38:0f:8d:6f:66:59:00:66:f6:be:b8:e3:72:c9:99:f2:ca:3c:
         5c:5f:5c:a1:32:64:c8:8a:78:5d:bf:25:85:2e:c3:b9:a9:8c:
         7e:2b:de:96:4d:ad:80:54:e1:2e:fa:ba:62:24:ea:1b:a9:50:
         e4:ca:48:ed:86:7b:71:ef:52:cc:0e:8c:75:5f:a8:0a:64:b7:
         10:93:c5:13:07:98:07:b8:19:d3:53:45:2e:64:13:3d:b6:b6:
         dd:a7:59:73:ba:3d:60:36:32:6a:6a:5c:19:a7:9e:5b:9f:9a:
         7b:84:e4:12:67:0b:67:5b:a3:34:53:64:05:8f:7b:84:87:57:
         3f:66:19:4b:50:7a:de:d4:7c:00:65:20:a1:29:1a:d6:a9:69:
         eb:d6:8c:d4:81:66:ed:ab:45:4f:02:b7:55:f3:78:66:dd:e7:
         2b:f1:cc:e8:04:0b:f2:42:4b:92:38:11:ba:e7:d2:16:49:07:
         14:14:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:06:35 2026 by rpki-client