Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          w4AmATx3YhEj3HaWKG71uYXz1LchFpdhc9rsbaw7/ds=
Subject key identifier:   C1:CB:16:32:32:A3:35:00:2A:C2:63:18:67:CF:63:E0:08:5E:C4:4E
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       172DABAD1CC03D1DEB3426B7993F45B418CBD6DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0522
Signing time:             Tue 09 Jun 2026 00:27:28 +0000
Manifest this update:     Tue 09 Jun 2026 00:27:28 +0000
Manifest next update:     Sat 13 Jun 2026 00:27:28 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: oUMe3g3QTdCxYfZWaKIOifKEISh/Xn0CDwcFibAPq+Y=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: ZKc8Zz9K2RI+gnBeEn9+X6Q0dmUWhn1aoOEgeXxRRg8=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: EySpKTnGTXRtqg/FT+5OU2qs4XWoKp6X7kyWjscJP/s=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: ph5ySmRjt511C6NuilGv40TeBDy8HssmKgXImEOi+bo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2d:ab:ad:1c:c0:3d:1d:eb:34:26:b7:99:3f:45:b4:18:cb:d6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jun  9 00:27:28 2026 GMT
            Not After : Jun 13 00:27:28 2026 GMT
        Subject: serialNumber=af94b609113f508d5c36485539d5e87ad46551435347747af5531fa0111c28d1, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:7f:6e:e8:0b:05:a2:bc:bb:8c:bd:29:f2:
                    ea:e3:56:cd:2b:75:75:45:a6:80:33:4f:c7:71:78:
                    29:c1:a9:13:e4:eb:03:8c:ce:70:5e:0f:a0:95:a7:
                    71:be:2f:33:4c:b1:4d:d3:61:b3:1a:9f:9d:ea:25:
                    e2:7f:6a:da:a5:13:8f:3d:de:b4:d9:67:c5:2d:24:
                    0f:3a:82:e9:66:d2:4a:f9:94:b2:f2:99:97:ca:49:
                    9f:0b:0a:a0:9c:35:ab:fb:ce:d8:0e:0f:79:18:bd:
                    f9:6a:79:db:2a:c9:44:05:97:dd:1a:d3:77:4c:4e:
                    ee:94:07:92:c0:22:62:b6:82:c8:64:7f:4c:e5:bb:
                    ff:06:7c:34:28:9d:6f:2d:08:44:e9:62:ef:e2:d4:
                    6d:15:4f:e6:fa:d4:67:2c:55:9c:44:a6:03:f2:85:
                    7b:cb:03:dd:f4:35:c5:a9:42:48:86:fc:72:ea:b5:
                    58:62:fe:72:d6:e5:72:69:6b:0f:5c:34:50:62:36:
                    bf:4d:99:3b:63:fc:4a:47:f2:48:de:df:9a:1b:cd:
                    8c:42:d8:c1:c3:38:12:76:29:cb:e8:f9:34:db:ed:
                    d9:4c:18:ae:9d:34:b0:f5:b9:fb:5b:1d:7b:6c:fd:
                    28:72:9f:f2:8d:c5:03:0f:33:71:d8:43:91:1d:e3:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CB:16:32:32:A3:35:00:2A:C2:63:18:67:CF:63:E0:08:5E:C4:4E
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bd:a7:f1:17:60:dd:9e:32:de:9e:03:d7:28:94:8d:51:ff:
         63:f0:c6:57:55:ab:12:35:2f:27:28:72:d6:12:1c:e8:7d:c1:
         dc:e8:ea:dd:e9:ac:37:87:bb:f5:b8:09:b4:63:4a:d1:d3:a1:
         e7:27:ca:a3:12:f3:92:4f:3f:0c:a8:c5:b7:42:7d:84:54:dc:
         64:9f:c7:67:bd:7a:4b:a1:7d:45:d6:48:91:7d:79:cc:df:ff:
         a1:81:40:d7:90:c8:b9:fd:69:ee:8a:2b:c4:94:48:54:e8:93:
         50:31:13:4a:b1:76:0a:47:a2:7d:00:b5:31:87:13:f5:d4:7e:
         61:a1:ad:92:cf:74:33:a4:e6:77:78:43:92:63:fe:99:e5:be:
         a4:39:ca:40:9f:2b:4f:03:8b:1b:26:32:8e:47:54:61:af:96:
         fc:37:3a:7c:59:02:b5:14:35:de:37:86:b5:ff:14:9b:01:2f:
         0e:6a:08:2a:70:cd:83:92:db:fd:a7:49:75:ef:94:b5:8d:ad:
         2d:5e:36:06:b5:11:5f:b5:ff:31:a8:2e:14:8e:26:f9:f3:c7:
         5f:e9:93:0d:c7:9e:b3:0f:fd:f4:e9:1f:dd:a3:ce:7c:fe:81:
         13:3e:5b:ad:68:5e:5f:74:97:8e:22:42:43:6a:87:d0:36:64:
         92:ca:cd:a3
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUFy2rrRzAPR3rNCa3mT9FtBjL1tswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5
MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjYwNjA5MDAyNzI4WhcNMjYwNjEzMDAyNzI4
WjB6MUkwRwYDVQQFE0BhZjk0YjYwOTExM2Y1MDhkNWMzNjQ4NTUzOWQ1ZTg3YWQ0
NjU1MTQzNTM0Nzc0N2FmNTUzMWZhMDExMWMyOGQxMS0wKwYDVQQDEyQxNWYxNjgz
YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjZH9u6AsFory7jL0p8urjVs0rdXVFpoAzT8dxeCnBqRPk
6wOMznBeD6CVp3G+LzNMsU3TYbMan53qJeJ/atqlE4893rTZZ8UtJA86gulm0kr5
lLLymZfKSZ8LCqCcNav7ztgOD3kYvflqedsqyUQFl90a03dMTu6UB5LAImK2gshk
f0zlu/8GfDQonW8tCETpYu/i1G0VT+b61GcsVZxEpgPyhXvLA930NcWpQkiG/HLq
tVhi/nLW5XJpaw9cNFBiNr9NmTtj/EpH8kje35obzYxC2MHDOBJ2Kcvo+TTb7dlM
GK6dNLD1uftbHXts/Shyn/KNxQMPM3HYQ5Ed48iJAgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQUwcsWMjKjNQAqwmMYZ89j4AhexE4wHwYDVR0jBBgwFoAUbcpl0HFNfvJW
kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01
NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0
ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm
NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4
NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfvafx
F2DdnjLengPXKJSNUf9j8MZXVasSNS8nKHLWEhzofcHc6Ord6aw3h7v1uAm0Y0rR
06HnJ8qjEvOSTz8MqMW3Qn2EVNxkn8dnvXpLoX1F1kiRfXnM3/+hgUDXkMi5/Wnu
iivElEhU6JNQMRNKsXYKR6J9ALUxhxP11H5hoa2Sz3QzpOZ3eEOSY/6Z5b6kOcpA
nytPA4sbJjKOR1Rhr5b8Nzp8WQK1FDXeN4a1/xSbAS8OaggqcM2Dktv9p0l175S1
ja0tXjYGtRFftf8xqC4Ujib588df6ZMNx56zD/306R/do858/oETPlutaF5fdJeO
IkJDaofQNmSSys2j
-----END CERTIFICATE-----
Generated at Tue Jun 9 02:30:39 2026 by rpki-client