Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          RFxEwYZgC1LFr6WoggAjDvAXwaK7DMsxbGYa7gehmss=
Subject key identifier:   A0:9F:90:E5:8E:9E:3B:D1:04:08:34:CD:40:E6:27:4C:54:F3:BE:55
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       7CC85B2AFA34082AD22625150684E7567D8F0D82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0457
Signing time:             Tue 18 Nov 2025 00:31:14 +0000
Manifest this update:     Tue 18 Nov 2025 00:31:14 +0000
Manifest next update:     Sat 22 Nov 2025 00:31:14 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: NUAxblQSneUGnl7JG0zV6WR93mYNJEsJEa6yo2LVjp0=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: /7YdYVQpXeRr+/ZQ8Y1r/uuqGYSyGBFrgSxJjAcYWkM=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: KFWfd6l0BShkQZfJ3md5ZQX3cf+majPH2lWSnjRRVjU=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: EBwIaYHr8B4gbGZn8jwOQ5Sa+Dyhx0h95ClHP4WNGxI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c8:5b:2a:fa:34:08:2a:d2:26:25:15:06:84:e7:56:7d:8f:0d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Nov 18 00:31:14 2025 GMT
            Not After : Nov 22 00:31:14 2025 GMT
        Subject: serialNumber=bfccd1d4e8e31b98450a17681129c0ecb00a2aa82ddc775863f11de5ef0feeac, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:fc:9b:c1:e2:9b:60:cc:cd:44:0c:22:ef:
                    d9:3f:f9:c1:35:7d:bd:c6:8b:85:55:84:25:df:7d:
                    24:b0:76:d5:ef:98:de:ff:5b:60:0f:19:90:67:76:
                    34:63:b5:6e:41:45:22:ef:95:07:f7:ca:2e:6b:03:
                    84:e8:b4:4f:05:2a:ac:8d:98:e1:7a:b1:0e:f0:c4:
                    2a:db:4d:0a:34:0c:08:d1:01:cb:31:f8:fc:25:50:
                    15:30:81:e7:91:44:8d:a1:97:d6:bc:56:73:f4:f0:
                    94:40:03:ae:ac:21:bb:aa:df:f3:87:dd:5b:1b:fb:
                    a6:29:02:82:58:bf:b4:b8:fe:50:86:eb:b2:ea:ec:
                    28:6a:d8:48:6c:3a:61:87:af:ae:b1:76:b3:aa:6f:
                    55:9d:6f:82:63:65:eb:ef:ca:7a:f2:50:a8:3e:fe:
                    c0:9f:41:64:7c:06:ab:59:e2:1b:e1:ed:32:1b:3a:
                    d7:ec:fe:16:e6:0c:1c:47:76:16:24:8d:75:33:c8:
                    72:2e:56:27:eb:7e:9c:06:19:a3:48:ac:05:22:90:
                    a8:ae:ed:b0:16:f8:eb:2a:03:0c:e4:61:b8:92:82:
                    aa:50:06:b5:a6:ca:28:aa:52:5d:ee:1c:d9:cb:83:
                    4f:3e:0a:90:fb:66:9c:01:df:83:46:e6:11:26:8d:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9F:90:E5:8E:9E:3B:D1:04:08:34:CD:40:E6:27:4C:54:F3:BE:55
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:56:d8:c6:4c:2d:56:d2:cc:42:94:72:72:c6:74:da:cc:58:
         7a:77:6e:4a:18:b2:d2:84:52:4e:bf:aa:11:56:f7:eb:1f:2e:
         bc:e1:67:a1:64:15:00:7d:73:52:d2:d8:ea:04:a5:6c:1b:fb:
         73:8a:0c:e8:e8:05:39:58:63:0d:ad:6a:da:80:9b:59:ae:e6:
         bd:7a:59:2f:39:c5:24:9d:71:0f:a9:97:6a:3f:b6:33:70:52:
         59:b2:96:23:f2:88:2f:82:09:7e:05:f1:0b:c0:42:fc:70:df:
         4e:02:5c:7e:c3:aa:81:31:c1:a8:c0:a7:93:ce:dc:92:42:ee:
         e7:5f:6a:3b:30:e7:28:8d:9a:31:5b:08:37:23:5c:c5:1f:cd:
         60:c8:56:67:20:a5:5a:45:9f:1c:69:4f:3f:9b:69:e4:f9:f5:
         f7:fb:a4:08:ce:37:d4:86:df:bf:2f:c4:27:6c:cc:fa:10:d7:
         6d:fd:bd:aa:81:79:41:d4:87:3a:30:f7:27:80:c8:0e:fe:d0:
         0f:c4:b5:2b:c8:6d:66:55:20:64:e3:c0:36:cb:e6:5b:fa:3d:
         35:7b:e6:a3:8f:89:a8:1f:e9:2f:0d:8e:58:98:4e:76:1b:1f:
         f2:da:d7:f0:95:c9:7c:d3:d5:b1:07:36:15:94:58:80:64:2b:
         a1:f0:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 03:02:35 2025 by rpki-client