Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          5cGxODLc9gSMOP/ggUZ6ajK/hejwOvvZKOUgvDqOASc=
Subject key identifier:   DF:BF:4C:F3:6A:91:FB:E3:37:4B:FF:6A:58:BF:9F:0C:8A:04:C5:E9
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       7A76CAA17866A26F2AB5B5379EEC5FA2B5FBBAA3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          03C9
Signing time:             Tue 01 Jul 2025 19:16:13 +0000
Manifest this update:     Tue 01 Jul 2025 19:16:13 +0000
Manifest next update:     Sat 05 Jul 2025 19:16:13 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: eS1Gncj0diPqihdtGKtROQwPDExgqDJYpel72oZl7h0=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: ORGQaz442RcdGXt8RwZmaWcVcvMYOCrjT2iZ1l7eS/E=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: Zt2gneEX/tex8EAZ78zSjHZsIQAK+AsbTfcjz1jxqX8=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: nlWn5ixzoy3XncvXgv1hG+V4tTdTkg4z3Qpwqagz0E4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:76:ca:a1:78:66:a2:6f:2a:b5:b5:37:9e:ec:5f:a2:b5:fb:ba:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jul  1 19:16:13 2025 GMT
            Not After : Jul  5 19:16:13 2025 GMT
        Subject: serialNumber=6d11a22a4547231a7dea7861e8cdf324636c55f5747ff9aef1a43dd22ffb52d6, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:f1:80:c0:ca:5c:36:c5:fb:ef:43:f0:0f:
                    88:87:22:f7:51:c4:69:78:b9:98:ac:e3:0f:42:f0:
                    f2:e0:e4:23:32:0a:16:6b:37:69:02:ef:b3:63:5a:
                    a9:f8:df:22:b1:56:4d:28:32:ed:c1:cf:7b:c3:51:
                    d5:3d:72:48:ac:5d:e2:d4:75:b0:78:31:94:e5:a9:
                    47:51:fa:e4:26:4f:32:33:70:30:0d:29:b4:d4:66:
                    17:f3:32:25:73:60:7b:e2:79:e2:1d:49:c8:f7:94:
                    ac:d6:80:65:08:66:b3:2a:85:27:44:e3:c6:4b:b3:
                    94:3c:16:a3:25:85:70:ba:b7:49:4f:7e:3d:24:97:
                    15:e2:0d:13:fa:6c:db:16:b2:99:fb:e9:bd:c7:ea:
                    56:20:ff:96:b1:2e:7c:0b:60:cd:9c:4d:af:c1:4b:
                    54:e1:dd:e9:72:6d:17:85:83:23:20:b3:78:84:03:
                    36:5e:47:4d:70:ec:7f:53:6c:2c:18:66:03:10:65:
                    c9:26:33:82:35:c6:32:ef:1d:c5:f8:57:97:2e:2c:
                    57:9c:df:fe:4d:e1:51:ac:21:0e:c1:8a:94:99:e8:
                    44:45:8f:4b:ad:c4:76:4b:a3:8f:0a:eb:b9:87:4f:
                    91:19:2d:4d:37:38:5c:db:b5:b9:b8:61:4c:72:46:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BF:4C:F3:6A:91:FB:E3:37:4B:FF:6A:58:BF:9F:0C:8A:04:C5:E9
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:f8:68:91:ac:54:8c:25:4f:42:41:ed:7a:de:3a:dc:97:
         85:44:04:24:96:bf:57:bd:5f:ee:91:f9:f8:09:75:54:db:91:
         65:f9:f8:7f:32:5f:79:a4:35:9c:98:83:a7:2e:12:f8:5f:9b:
         b8:31:a9:bd:ae:2d:ba:dc:5b:b4:60:dd:b8:7b:10:ca:77:07:
         c2:8f:f5:de:cf:6a:18:76:92:3c:97:85:f2:f0:62:78:ed:97:
         a3:f2:86:22:38:46:94:9b:ee:88:56:c3:c4:82:5d:6c:88:cb:
         15:5c:84:fe:ae:85:6c:e9:17:ef:0a:df:22:6d:b8:b8:63:28:
         b6:49:3a:37:d7:1a:eb:03:d2:38:a2:d5:86:0e:77:db:2c:29:
         ca:81:9b:5a:cc:a7:ce:cf:85:2e:07:ac:45:3d:c8:5b:c7:52:
         a5:23:df:c3:96:96:7b:94:bb:8c:d9:7f:e9:71:3b:35:0c:c8:
         6b:7f:87:3b:54:d3:58:6b:8c:4e:a3:00:e8:8f:88:8a:d6:ee:
         d8:62:0d:87:33:d7:15:e1:8e:60:87:3a:f2:78:02:52:ad:12:
         69:00:b3:6b:9c:af:df:1f:7a:41:02:b0:8d:ed:96:09:b1:50:
         93:32:04:6c:50:eb:3f:75:80:5d:d0:00:77:56:7b:50:27:07:
         b0:f7:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:49:18 2025 by rpki-client