Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          TnOFPTpW//BW7CQtz9+1j/0IyronRnkrfsBWQRR4fVI=
Subject key identifier:   DF:C2:28:51:44:89:54:82:E8:AD:BF:8E:0E:4E:FC:0C:D3:89:27:67
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       506A882D5AF04F79577BB09DEA305417D10D8471
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0540
Signing time:             Thu 09 Jul 2026 00:38:23 +0000
Manifest this update:     Thu 09 Jul 2026 00:38:23 +0000
Manifest next update:     Mon 13 Jul 2026 00:38:23 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: oUMe3g3QTdCxYfZWaKIOifKEISh/Xn0CDwcFibAPq+Y=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: 0ubrTL268HfnNFx7ZFd8ITkd8Y2eNAJR1Uikm+p08A0=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: EySpKTnGTXRtqg/FT+5OU2qs4XWoKp6X7kyWjscJP/s=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: ph5ySmRjt511C6NuilGv40TeBDy8HssmKgXImEOi+bo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6a:88:2d:5a:f0:4f:79:57:7b:b0:9d:ea:30:54:17:d1:0d:84:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jul  9 00:38:23 2026 GMT
            Not After : Jul 13 00:38:23 2026 GMT
        Subject: serialNumber=d6d13f88b4dd168fc5c3a6fbb668be798cf4d357dbe4fb0b71122b83eee80132, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:7c:e4:45:f6:3d:6a:38:ea:2f:44:57:3a:
                    7e:37:8c:47:5b:ab:b9:e4:1e:0e:ae:07:89:f7:03:
                    68:1d:9a:00:42:6d:4d:32:4d:82:ec:15:e7:c0:ff:
                    ed:de:20:2b:9f:30:17:b0:07:e7:2c:23:bd:74:3c:
                    fd:9e:1a:bd:39:61:7c:0d:dc:ae:28:f8:39:c6:ae:
                    1f:75:d3:d9:f8:c8:df:27:56:63:c5:e3:3c:11:26:
                    85:5a:a7:66:9c:ac:13:fe:2d:a5:5e:c8:54:e3:66:
                    ee:a3:e4:65:b1:ae:79:d2:5f:ee:61:00:59:9c:3d:
                    cd:bd:8a:24:92:9a:4f:41:2a:a6:0f:92:99:ab:99:
                    ab:10:66:09:39:3d:94:69:30:c1:3b:1b:09:e8:93:
                    ad:c0:85:1b:bb:af:a2:d8:04:07:d4:ba:88:27:bf:
                    85:cb:48:43:ce:34:4b:1b:1f:c1:2e:bc:75:b5:a8:
                    1b:bd:56:6d:13:c7:78:8c:7a:50:e2:0e:2f:93:04:
                    4f:ca:d3:b0:c3:db:4f:63:60:60:fb:25:6e:87:bc:
                    19:b4:17:d6:72:a4:7f:e4:26:6e:29:fe:0c:e0:33:
                    28:8a:81:c2:6e:a1:07:72:9f:21:2c:66:40:0c:8a:
                    8f:e5:d0:c1:6c:f2:2b:5c:5d:d1:35:fd:f2:35:fe:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:28:51:44:89:54:82:E8:AD:BF:8E:0E:4E:FC:0C:D3:89:27:67
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:d9:71:03:08:c4:aa:93:8e:b7:7b:74:f7:06:f2:e1:23:
         97:34:36:a4:b9:c6:51:36:e8:b3:99:eb:4b:bd:6b:2d:13:21:
         f9:27:a5:c8:71:24:b6:ef:6f:a1:1a:6c:16:4e:80:da:2f:81:
         da:6a:e4:19:26:d9:c1:7e:8f:4f:45:b3:12:dc:ed:b6:41:82:
         c4:79:21:e6:04:aa:98:16:1d:a6:0a:d1:25:2d:9e:60:69:99:
         7b:5e:81:b9:cf:fb:0c:c3:6b:b8:24:68:4d:28:60:2f:70:48:
         d2:c3:a8:47:f7:22:44:97:fe:c9:99:66:df:13:ca:22:df:33:
         2b:62:a7:bb:f2:7b:f9:b3:d6:fe:20:63:00:8f:e6:bd:ad:0b:
         43:76:4c:d6:b4:69:bd:69:bc:5b:99:5f:f3:40:17:01:da:40:
         c7:54:12:e7:1f:9a:b9:4f:65:bd:25:c6:cf:2c:19:42:bc:22:
         fb:a9:a0:d3:e8:04:ec:6f:69:5e:06:91:91:2a:ae:10:ca:73:
         e7:91:6c:79:7c:60:66:f6:a9:b5:13:8c:f3:f6:22:95:9e:1d:
         ef:54:c7:8f:e1:fb:8f:c0:1d:03:64:c4:3c:44:9c:76:48:64:
         9c:3d:73:2a:32:bf:20:dc:98:95:1b:3d:a7:4a:5f:69:d7:45:
         87:a6:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:40:39 2026 by rpki-client