Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
File:                     _2i1wiK-1gUjyNKa-HTumZaQltA.mft (raw, json)
Hash identifier:          88NkvRkGn6tVWGmfZ9qXgkpRDt9U5cNiNBkHRQLWQs8=
Subject key identifier:   29:71:53:90:FD:EE:13:04:58:C3:40:9E:EB:A5:D0:9D:2A:E8:EF:16
Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8
Certificate issuer:       /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
Certificate serial:       20644CD37AAD91679513A8BEDDE3CEC0FB3E1331
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
Manifest number:          15
Signing time:             Thu 21 May 2026 20:05:34 +0000
Manifest this update:     Thu 21 May 2026 20:05:34 +0000
Manifest next update:     Mon 25 May 2026 20:05:34 +0000
Files and hashes:         1: 551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa (hash: mKMLR2BAlQggmhQKddtc71/G6UtQsDu1a0ryuihsTqQ=)
                          2: 6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa (hash: g85QLSyJlAV/ksthDHDgTZGCjTL7f/4DL9JNrba9C4Y=)
                          3: 94f5f688-47ac-44f5-a5fd-9104b80f7066.roa (hash: +3ApiQ0606xFMsavngcTQXt126XuAm0zmACbBh4VhSE=)
                          4: _2i1wiK-1gUjyNKa-HTumZaQltA.crl (hash: 4A+5R/bzv/nHkuShMbfLCSN7IHUxysVILhU6X6n9J0o=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:64:4c:d3:7a:ad:91:67:95:13:a8:be:dd:e3:ce:c0:fb:3e:13:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
        Validity
            Not Before: May 21 20:05:34 2026 GMT
            Not After : May 25 20:05:34 2026 GMT
        Subject: serialNumber=163dc5f3ab9026fc14b25ffef09d7a1dcb35bed548039a6341ad100180531ffe, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:1c:4c:09:15:49:54:aa:e8:00:9c:59:b2:
                    24:da:b4:3b:f1:2c:18:8b:36:52:57:8d:bd:c2:d8:
                    89:af:4a:41:87:03:66:8a:72:13:c3:62:8d:bf:0a:
                    e6:4e:2e:f6:74:46:fe:25:52:4b:98:df:27:6f:0f:
                    53:82:e5:44:a7:7b:87:22:0d:d4:a7:bd:26:89:c7:
                    7d:57:b9:fe:b0:ec:58:5d:dd:24:4a:c9:33:6a:23:
                    3c:c4:35:1a:30:3e:c8:29:cd:1a:c4:72:df:5d:83:
                    41:95:8b:d5:04:ed:6a:a1:47:92:8f:f9:4c:79:fa:
                    59:a7:00:bc:5d:04:86:38:0b:ea:64:6e:e5:28:8f:
                    6e:53:64:3f:bc:ae:51:c5:1a:ef:62:6c:78:5d:da:
                    5e:9d:ef:5a:53:77:8b:42:62:04:d9:3c:9a:7c:7f:
                    13:34:f3:cb:17:35:99:79:76:07:5a:de:21:73:68:
                    a1:55:c3:73:4e:f1:fa:03:27:c8:f0:1c:9d:27:83:
                    80:98:3e:5e:da:ec:38:1b:d6:41:88:aa:69:a5:4c:
                    fb:69:3a:19:fa:0e:0e:c0:ee:39:ab:fb:84:94:33:
                    2a:51:a1:dd:5e:21:c8:2f:78:ce:5c:b3:b7:3c:fc:
                    13:1f:a6:61:e5:69:d0:e0:be:6f:92:55:bd:75:08:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:71:53:90:FD:EE:13:04:58:C3:40:9E:EB:A5:D0:9D:2A:E8:EF:16
            X509v3 Authority Key Identifier:
                keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:62:31:2c:20:f3:87:05:8c:92:d3:df:dc:b8:d7:c7:32:
         ff:55:31:0e:83:ef:a9:f5:4e:d4:d8:75:41:03:0f:97:c8:6c:
         da:a4:14:23:1d:1f:00:6b:ae:95:1e:59:e7:1d:14:69:8f:e8:
         83:5c:56:21:be:85:18:2a:ad:8d:60:0e:42:d4:4f:69:59:ee:
         7d:83:41:33:a1:81:f3:0a:1f:5e:7c:08:26:94:8d:07:c3:71:
         13:b6:6f:ab:65:a6:86:06:1d:c8:e8:a1:01:d5:73:00:a5:5b:
         20:f3:eb:6f:8f:fc:68:a8:d7:c5:66:4e:ed:c0:f0:2a:07:66:
         6a:a0:44:26:68:63:fa:91:44:ee:23:fa:70:2d:53:fd:e6:19:
         80:17:a2:d5:98:d5:7e:90:72:42:67:30:7f:e1:00:59:6c:33:
         fd:39:68:d9:91:b0:00:01:9c:f7:0d:a7:96:69:2e:0e:b8:6c:
         3a:b2:9a:8e:5c:95:7b:35:d2:bf:a2:89:6e:ad:93:8b:f1:13:
         74:77:01:a6:c4:fa:b6:70:2a:f7:f6:d8:df:88:ee:93:af:9d:
         b6:97:77:34:ae:3b:71:91:a6:13:4d:0c:54:01:a4:20:12:81:
         d9:6a:ee:fe:02:c4:98:fc:d5:c4:f7:ba:f3:0c:2f:c8:9d:73:
         60:b0:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:05:43 2026 by rpki-client