Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File:                     cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier:          8OK3/jjTAOfqXf5t7MNo1ga4RaXZrCLl4fGspng33RA=
Subject key identifier:   4E:28:8C:A2:3D:8A:DE:FB:12:E7:1B:6D:EA:F0:23:B4:72:ED:D7:26
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer:       /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial:       4881C9BB473BA6B7E44F16456CAE51014D1E1BD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number:          0149
Signing time:             Sat 06 Jun 2026 00:04:57 +0000
Manifest this update:     Sat 06 Jun 2026 00:04:57 +0000
Manifest next update:     Wed 10 Jun 2026 00:04:57 +0000
Files and hashes:         1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: UF2NI9to/ZTHTw76rU42WL5vvIIGRtLRLTutrT8D2g8=)
                          2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: NF0lpNAvE1ky5X5dXD5+40imIi9Qmyb4N+BqeMW9Xfg=)
                          3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: D27sebtwjhIzn7+oBHloqEPGwdgeIEBB++3b64HUG3o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jun 2026 08:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:c9:bb:47:3b:a6:b7:e4:4f:16:45:6c:ae:51:01:4d:1e:1b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
        Validity
            Not Before: Jun  6 00:04:57 2026 GMT
            Not After : Jun 10 00:04:57 2026 GMT
        Subject: serialNumber=ecf101b895b474b99476eb46f0c8f1a0ddbd1b95824a0508242a512444149204, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:68:6e:a3:eb:80:92:3e:05:99:d6:53:aa:24:
                    46:50:fe:64:46:00:19:28:7d:74:0a:b8:71:22:d7:
                    7c:0f:e0:5e:e3:50:28:42:c3:9a:6b:82:07:38:dc:
                    dc:a4:89:9f:f0:5a:88:ea:95:57:1b:11:db:e3:b5:
                    47:6c:01:94:5e:2a:4e:ce:ed:a6:99:58:3e:12:66:
                    fb:f6:f6:15:92:8d:cd:64:5a:f0:1a:46:35:e8:33:
                    ef:92:af:c6:a2:13:36:33:18:a0:92:d5:ee:d6:3c:
                    39:7e:94:f1:e8:fd:6c:23:19:12:6c:f2:38:ba:6d:
                    ea:ba:fe:a5:e5:ed:41:7d:d5:57:6d:65:54:f3:70:
                    d5:b8:ff:14:5e:29:bd:d1:56:36:9f:a8:59:91:27:
                    d3:9a:ee:d6:b0:89:b4:9e:36:6f:f0:be:74:c1:ee:
                    04:58:6d:82:42:5a:c6:80:5c:86:c9:a2:b7:8b:bf:
                    a6:0d:ca:83:dd:7c:f9:04:70:fd:41:b1:b9:2e:42:
                    d3:5f:81:b3:8e:21:b1:12:c4:74:c7:cb:11:52:20:
                    ae:21:dd:9c:d5:0b:5c:31:bd:b8:9e:67:1d:d5:34:
                    5a:db:97:4d:da:39:a3:15:6b:07:52:f6:94:dc:cf:
                    eb:e6:2c:b5:49:86:3c:d0:fe:60:7f:c4:d5:6f:9b:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:28:8C:A2:3D:8A:DE:FB:12:E7:1B:6D:EA:F0:23:B4:72:ED:D7:26
            X509v3 Authority Key Identifier:
                keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f5:af:dd:f1:ec:17:6d:59:73:1f:93:9e:20:1d:c8:41:72:
         64:36:71:04:50:fd:8f:29:ba:6f:d2:14:c6:24:d1:75:b8:f0:
         cb:35:ed:83:6e:88:4c:e2:1f:01:dd:d8:f2:af:55:ba:70:93:
         ba:ec:61:ee:ce:aa:9a:18:f3:61:3f:9b:3a:cc:26:03:00:c7:
         71:9e:da:96:c9:37:3a:c9:d3:21:5a:4d:18:cc:2b:6d:29:91:
         8f:3f:cb:24:f6:40:00:5b:9e:ba:ab:34:e7:79:12:41:19:bb:
         34:12:fb:df:3a:e3:55:ee:87:77:08:21:54:49:f4:12:96:4e:
         bf:e5:32:38:32:6c:11:40:4c:62:c2:a9:c6:99:4c:f5:b2:fd:
         fc:6e:a6:6c:a2:55:7d:2e:5b:9b:15:f3:64:f9:96:6a:3f:a7:
         11:d6:df:0a:48:c2:8b:20:28:71:27:9e:72:54:a6:17:7c:1f:
         69:3b:17:48:3f:f9:bb:5f:89:b4:f7:c7:4b:be:ff:be:42:25:
         a9:b5:8d:c1:61:8a:96:53:7f:47:d8:c1:63:23:d6:bb:39:6b:
         bf:b7:02:47:73:2e:d6:20:23:a2:ca:76:bc:7f:d5:97:b8:b2:
         53:49:ad:3a:29:51:6c:f8:1e:90:57:08:77:b6:76:81:fa:8a:
         cd:ec:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 03:18:43 2026 by rpki-client