Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
File:                     2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json)
Hash identifier:          jgAce8WS2de/kJbh/xUFkKBUsrQbk0WbRj1S9NjvObw=
Subject key identifier:   2E:6F:1F:06:F2:C6:47:5F:FC:0F:68:B4:7E:53:F7:FC:B2:D0:C0:4A
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       5894118D58A6E906ABF1A6DF82CB3413ABC2DBC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
Manifest number:          04E1
Signing time:             Tue 21 Apr 2026 00:26:41 +0000
Manifest this update:     Tue 21 Apr 2026 00:26:41 +0000
Manifest next update:     Sat 25 Apr 2026 00:26:41 +0000
Files and hashes:         1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: Ne3F6Q66jj9OKWQ+IA9YP46f/O6Z+Ko3MfpI3l7spjo=)
                          2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: GVUs03xgv+8UpIu3WE1zyCCIoGR/HjxeJhDzyb8dxBI=)
                          3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: DJaMsaBhmRctpIL5/HE3/ES2uOCC78Qj9N+KX6fzPe4=)
                          4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: Mrtfroi736x+t0blZHu7y04uc0U+LYe+zara4TtUCIo=)
                          5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: CIFZfmN5KUoU9ZYVqSQX6VPvo9Xhs8yrGttiq5bfNeg=)
                          6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: 2nt5eBTWhQGkazPpqITbnaKehpP/TvgjrYHwCeunkBs=)
                          7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: fMsGCZeAV0EfH4fL2Iy6rpL0f/UdfkpSZA8/b76QPX0=)
                          8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: MQdKUs7iLuiDpSjuTK9jglEa2AM/8Z6qCZLLxRjVEko=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:94:11:8d:58:a6:e9:06:ab:f1:a6:df:82:cb:34:13:ab:c2:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Apr 21 00:26:41 2026 GMT
            Not After : Apr 25 00:26:41 2026 GMT
        Subject: serialNumber=ff397e22c355b43d1fbf6d2d17707c68565563b7f040d819717ce70631ed94a5, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:c9:44:8d:25:3c:da:88:be:fc:50:b5:ac:
                    a7:7f:5e:eb:b8:11:4a:0e:a9:97:fc:7e:df:32:af:
                    c9:f2:7b:65:36:d3:c8:1d:c0:eb:e4:54:fd:96:e7:
                    2e:31:06:76:3b:a0:ac:5b:13:cc:1e:89:0d:53:23:
                    29:85:13:71:b9:91:25:4f:2b:07:3b:a7:b5:02:df:
                    2e:7d:d8:b4:47:c2:15:3c:d8:30:66:f6:c0:5a:9d:
                    d7:59:1c:df:23:eb:7c:16:36:2a:46:34:a4:4f:b7:
                    48:c6:e9:2a:9a:6c:d4:6a:28:3b:e8:ae:1c:63:48:
                    4e:11:79:8d:d1:86:8e:98:0e:07:62:af:a8:d5:00:
                    c4:ec:9d:2e:aa:d3:a4:5d:65:c5:58:12:25:8d:3f:
                    ad:0e:14:94:62:c2:07:f0:cb:a7:6f:b9:76:a9:83:
                    5c:d1:94:5d:e1:4d:07:5e:5b:df:32:41:4e:25:ca:
                    97:52:f4:69:83:b8:5d:ea:97:b5:c1:07:9d:5f:99:
                    cf:8c:e0:d8:03:a7:ef:59:62:ed:bb:4b:2d:d0:07:
                    93:2e:0f:ee:11:61:93:c0:dd:12:fb:5c:40:b7:a2:
                    5b:89:03:e7:b6:24:ce:63:3b:60:34:d0:2a:c9:d1:
                    8e:29:d9:37:73:1b:bc:14:62:8f:6a:01:82:7e:2b:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:1F:06:F2:C6:47:5F:FC:0F:68:B4:7E:53:F7:FC:B2:D0:C0:4A
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:12:bc:26:17:9e:20:5f:cc:f9:e0:98:cb:d4:2e:75:1d:
         5a:d8:de:89:01:e5:8c:8e:59:3e:0e:9f:5a:8a:77:e6:33:7f:
         4b:07:83:f1:f8:57:f9:b7:48:f2:5e:a4:0b:fd:36:6a:cc:ba:
         cc:93:66:0c:65:2f:ea:e0:59:a2:9f:ba:36:63:89:9f:6c:9d:
         36:f8:77:d9:87:f0:cf:b8:a3:28:41:39:57:fc:b3:5e:ec:e8:
         2a:34:ac:64:6f:79:b3:05:e0:a0:69:1d:55:ab:fb:57:e9:da:
         b8:fd:ce:be:ed:7b:bf:ca:c5:8c:e7:cd:f5:24:10:c1:ad:d4:
         f5:a5:53:29:3a:b0:5a:20:ca:19:e7:c2:c0:67:fa:b5:32:bc:
         20:9b:d7:08:0e:12:6b:b5:40:8c:83:20:2e:b9:89:46:76:06:
         7f:f7:31:ed:a6:9d:3e:7a:38:fc:d7:12:15:a3:f2:2e:1c:71:
         e7:24:20:1f:5d:a2:b9:73:0e:6b:0c:8f:3a:b5:37:16:67:56:
         b5:38:a6:94:e3:57:d5:b6:d1:61:11:a2:e7:38:63:ae:64:5c:
         30:4c:b1:3e:03:42:50:93:e0:fe:cb:93:1a:2e:cb:a7:29:07:
         a5:ee:7c:ab:40:48:ff:ac:71:8c:4d:25:87:cd:14:e4:a5:fa:
         81:29:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 18:01:43 2026 by rpki-client