Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          9R3+NC56HSzoTyczZBquPdggZEmuuwGb4P0yrEit2pI=
Subject key identifier:   7B:80:92:71:72:0D:A1:27:5E:B7:10:38:A9:94:7E:7A:A2:29:5A:70
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       102B3D9320F87A7284C61BCCFF8D63B12B8D2786
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          04E8
Signing time:             Sun 12 Apr 2026 00:35:38 +0000
Manifest this update:     Sun 12 Apr 2026 00:35:38 +0000
Manifest next update:     Thu 16 Apr 2026 00:35:38 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: 8vb3J5QiPQDtpZT2rfnwy96rd9oz4X2yP2KpF77TwZc=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: TGZWYG7a5c8xVJqHyU8yqbnIR+azbJkE+16QHi6TTFA=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: lGQpcEhDIEhFjIk2i8v7KasFEWckt3oZL1je6gcWykU=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: vqmIWZTDw4X9+245sbGxATsB3EOigrzzk10IK4pKFII=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2b:3d:93:20:f8:7a:72:84:c6:1b:cc:ff:8d:63:b1:2b:8d:27:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Apr 12 00:35:38 2026 GMT
            Not After : Apr 16 00:35:38 2026 GMT
        Subject: serialNumber=7f80392d4d1e3675417bac92a2551b392f46d1bf163e4c81550d678c1ce98f8a, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5c:6f:23:60:21:0e:fd:5f:ac:35:e5:62:56:
                    3f:53:1f:e2:f5:9c:ff:5a:94:b7:ed:e4:f4:9c:72:
                    4c:f5:f4:98:a1:f1:1d:5e:65:e1:5f:ad:79:9b:8b:
                    49:1f:10:77:7e:20:ac:16:a0:61:bf:2b:9f:12:81:
                    8b:4c:fe:0d:cb:eb:36:dd:ec:eb:5b:72:a7:ef:39:
                    a1:e5:56:a7:1b:23:40:10:eb:fa:95:a8:28:51:33:
                    c7:c4:4b:b2:4d:87:23:83:90:31:1d:cc:d9:9e:41:
                    b5:bb:eb:31:82:ff:37:63:a2:50:7d:00:50:ac:0a:
                    a1:c2:12:77:55:7b:9d:7b:65:45:90:1d:d3:ae:ef:
                    85:81:c2:ac:c3:18:2e:3b:2f:ba:ca:1a:b3:f8:31:
                    37:b1:37:be:5c:9d:e3:b8:63:4d:ca:cb:2b:28:df:
                    18:75:48:b1:74:fa:c6:ad:66:32:8f:43:9a:71:2c:
                    d4:db:87:c9:f9:f1:27:e8:3a:54:94:17:da:6f:fe:
                    75:ac:59:ca:42:b2:06:b0:ad:09:c4:97:50:f6:3d:
                    4f:c4:3a:87:08:74:dd:d9:95:86:8e:3b:7a:e9:17:
                    3b:31:6c:07:65:9a:e7:31:2e:cf:d6:4e:5b:44:71:
                    ae:ba:d2:c6:5f:6d:cc:d4:94:4b:c6:9e:40:22:bf:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:92:71:72:0D:A1:27:5E:B7:10:38:A9:94:7E:7A:A2:29:5A:70
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:42:a3:35:82:7c:3e:76:a1:29:44:cc:7c:0d:93:89:8b:
         e9:49:08:79:15:de:df:95:e4:7c:b3:a0:a2:b6:e5:55:ba:71:
         35:04:76:63:e9:49:2e:17:d9:54:70:90:cf:26:02:be:48:0d:
         da:20:28:3c:a7:10:0f:2e:a5:0d:ae:b2:52:89:b1:b4:dc:de:
         03:ac:94:02:30:ba:e6:b8:f2:b9:b5:47:69:98:b4:37:9e:8e:
         8d:7e:cf:b4:f8:3f:74:b7:f7:8d:69:8e:46:2b:e6:47:cc:a9:
         00:35:21:de:e6:27:44:e3:54:aa:2c:43:dc:62:c8:ed:5f:40:
         24:be:b8:be:44:d7:2f:40:4a:7d:b6:9a:75:0f:08:5b:9c:51:
         98:e8:54:82:aa:68:51:95:ff:b1:09:5c:67:40:6d:7b:75:e6:
         3f:7f:cb:78:f6:34:44:83:91:df:69:b7:eb:78:68:e2:0f:ac:
         35:ad:bf:ec:53:75:18:3b:f8:26:c0:71:8c:06:1d:88:ea:c9:
         a4:0e:78:70:6b:4e:e6:ac:0c:19:d2:2a:79:fc:2e:95:e4:36:
         43:37:db:0a:90:80:d3:42:23:07:ea:00:c5:b1:57:07:a7:01:
         9f:28:99:37:a7:2c:fd:e8:21:99:23:3e:a4:ce:a2:a7:6e:ef:
         e8:c5:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 18:28:28 2026 by rpki-client