Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
File:                     n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json)
Hash identifier:          QHGww+AJc63oXE+VDwWjGzusL0DUvcS3snfciMzF/zU=
Subject key identifier:   56:71:D9:08:3F:EA:36:7A:5F:E8:81:BB:4E:26:81:EE:87:DA:DE:5B
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       71308F13F09904A4CEBB851E3166C29A340DE341
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
Manifest number:          0157
Signing time:             Fri 17 Apr 2026 00:21:36 +0000
Manifest this update:     Fri 17 Apr 2026 00:21:36 +0000
Manifest next update:     Tue 21 Apr 2026 00:21:36 +0000
Files and hashes:         1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: sCY8uZmePYjGPpohsi018W/7uH/8rmauVECYBBJu+1o=)
                          2: 0f37c389-361f-4ed6-87b6-8ed5715101d0.roa (hash: 3JUxKiZX+03PqHR2wMl7NUNabuVZN02zK7n6mbXslrc=)
                          3: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: EOUNwEp2v6sWLAgio1Srj+iNzsmRVYdJEMEuAFXycnw=)
                          4: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: BFwMyiu+xswVW8W1W8EY+COE8oy4pBCE+YpqX6wfYwY=)
                          5: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: IvhayJod2WiqGFk0KfTymzfvDoaoUVg+3r61WYPpr2o=)
                          6: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: yPzzw0XNoosucoonpDfbfQUYVkGv2frd4P3V2tA/4sY=)
                          7: 5c882412-eebd-4cab-aa4f-3b6f821cbb86.roa (hash: XeCFnDK8qZHvblWgDiKA1VBc6BDiCAhC9dSsGKXGvbg=)
                          8: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: Mvo9CaHsS61PM6HJnCXy5gidWEoQLvl8ks3rGNOFZXI=)
                          9: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: 1vJf87Sj6j/cecgOVJkhykbGs7KRiPZ2+yAVY+defkM=)
                          10: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: a3bKIRRlRonwhDHNcnLD/gIMUISr8LCT7GhbiDlNALw=)
                          11: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: Lk++q6HIABtuEBt15I5MulsfDi6gGAs7AUkIL6gTNOc=)
                          12: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: Q4YAgUj43wLHRKYkmCwO67P7FrC7N1QeGS+xN4O0+/Q=)
                          13: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: 49K52nq8OKAkmwHKgLmIj+CbxHqQ+ZDwdNSRKO99lJs=)
                          14: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: 9UX0FMlSOo6FJwTIcgBy4fBflWNbTEHUwF1S1oKYhg8=)
                          15: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: /ppgzivNzOCt6R3OSjYGewTznYC9HhqZ98sUbaZmDas=)
                          16: c3e00a18-aa42-44a5-bc72-2aa9e7030f6f.roa (hash: YuONu2TzQdw2sH8DhCkrkysxtmbPUBV+/aiYUmqftGA=)
                          17: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: R8JF+fIRdNYN+zjojyB4HC9vn/shYrqIOitMF7EjerU=)
                          18: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: WyTjhbnaFmS0NTT0Ir8Eh5O4JIrWLlTgvAAsA7sYpe4=)
                          19: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: YQ4oSukWSM3ZilUOEPVIfGM7CYpfcci0ZVo3HfKyzPs=)
                          20: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: 47qZLyLUjJogwD4lzOafNpbosTpfIFiCkHQRqFlwFVE=)
                          21: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: FyIzW0RE4+Zact/DrR9piTs8BpLSs3bYHfkR65wCvjU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:30:8f:13:f0:99:04:a4:ce:bb:85:1e:31:66:c2:9a:34:0d:e3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Apr 17 00:21:36 2026 GMT
            Not After : Apr 21 00:21:36 2026 GMT
        Subject: serialNumber=b32903adca25e879c8addf53545f24a16b62013b0a49fc2985825b9bfe26de27, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:0d:45:4c:27:7c:61:9b:a8:fe:52:6c:a0:
                    11:e3:57:25:39:2a:10:96:9b:7b:94:3f:16:cf:a8:
                    e5:00:92:ac:af:45:bc:83:04:01:f2:22:d2:c9:16:
                    3a:e2:f2:a1:2e:07:2e:f0:3d:57:f3:11:c4:ac:a6:
                    97:35:1b:8a:3a:bc:20:23:d2:53:08:6a:a4:c2:08:
                    1a:7a:62:12:f8:2d:78:64:81:c1:dd:97:80:7e:cd:
                    a9:4e:bb:fe:3d:ef:fd:d5:1a:6a:5c:24:be:95:58:
                    f8:7c:cc:e8:89:64:2c:31:e0:5f:ba:d3:a3:03:ea:
                    56:a0:10:b5:0e:17:06:25:66:cb:d8:66:44:22:9c:
                    f0:f0:bb:6b:dc:bd:d0:36:ec:df:6b:ad:30:75:c6:
                    1b:eb:70:ee:27:67:39:49:2b:05:4a:21:1f:b0:3f:
                    da:80:71:de:df:86:ee:de:27:ad:40:3f:8a:f8:e9:
                    e0:87:09:67:84:fa:61:7b:e9:d8:e6:e7:da:ce:ab:
                    50:a6:9d:62:35:94:53:65:ce:ed:ca:f2:86:71:82:
                    7d:a9:b1:32:80:56:6f:f3:30:ff:aa:bd:2f:f7:50:
                    5e:b3:a1:c3:79:16:90:22:b6:1d:53:3a:a5:50:65:
                    2c:93:86:94:51:a9:7c:46:85:36:0a:91:28:af:d7:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:D9:08:3F:EA:36:7A:5F:E8:81:BB:4E:26:81:EE:87:DA:DE:5B
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:d6:9e:70:e6:e8:b8:3b:7a:08:a7:ec:b3:61:5c:62:b6:
         dd:07:63:8e:9d:b8:27:b5:20:6d:eb:56:17:44:5a:0c:63:02:
         d8:5f:d1:bf:6c:53:3b:00:64:f2:2e:eb:53:33:a9:8b:eb:0b:
         5e:9c:2c:a2:23:22:e6:b6:78:94:d8:59:76:72:4e:b3:91:58:
         d0:15:61:47:ec:32:58:6f:8f:75:72:46:58:ef:dd:1b:2d:7f:
         5a:55:ce:0b:be:d3:f9:91:2c:70:18:71:88:63:41:9a:3e:f8:
         61:1e:19:33:b5:53:fa:81:92:41:6c:bc:8d:c0:51:40:7b:5a:
         0f:da:2c:f4:fd:d4:dd:3f:9c:87:c7:87:ab:16:e6:91:32:9c:
         25:41:c2:ad:46:25:d2:e8:85:2a:88:ca:04:7a:b9:02:96:c6:
         94:01:6c:82:2a:f3:a6:86:74:3f:31:f2:90:49:06:a8:a3:e2:
         88:86:6f:93:aa:f3:70:31:93:53:05:3b:00:05:e6:6a:68:b7:
         72:cc:dc:d4:70:cc:f3:bb:de:c4:48:2c:b6:ea:d7:4c:b8:59:
         73:ec:0f:90:9b:4b:48:d1:66:fd:83:b4:ce:f8:dd:38:38:3d:
         9c:79:e5:e9:da:1b:6e:d9:1c:73:d0:be:03:96:73:21:fb:78:
         7f:37:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:39:51 2026 by rpki-client