Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
File:                     HwZxfSr2LjgJByCEw6-PSJSOQOI.mft (raw, json)
Hash identifier:          rHbGCDi5qrlpZv3fK0jFIgcfeP48BCxXVO8ugrcFz2w=
Subject key identifier:   17:36:A4:27:99:A6:C9:CB:86:E9:5F:40:5A:FA:5B:0E:03:5A:02:00
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       3AD148F71ECE6DB13CAAE83C60747E47C39C88A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
Manifest number:          04C9
Signing time:             Wed 05 Nov 2025 00:00:50 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:50 +0000
Manifest next update:     Sun 09 Nov 2025 00:00:50 +0000
Files and hashes:         1: 0c492edd-c347-4b97-a816-01566f9d097b.roa (hash: 5c3ly782Chxh7dbmkyzxNggJmaOpHWxNArbReCN7bXs=)
                          2: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (hash: EFmKNle5ro5UfWrBkGN5EZ3dbmeSlkb4piuFr5SN4TY=)
                          3: 59031a63-ea1a-4943-86ab-19221a23ca42.roa (hash: Q6alZLbh7m22hU5vnmDn9iJkEfErcbGvGdRZ0sBMZoQ=)
                          4: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (hash: yv+wg0MjMb1P5Sorv6SKMC9bUkXpP2pAuof8gRYaEX4=)
                          5: 91a27594-a038-483a-a558-a5377f4d266f.roa (hash: kqqwRvf02smMsqc/yBITQNkan3o3mxbKvMjcZBVEIRU=)
                          6: 943694fe-e278-4d76-b786-7df26f151dd9.roa (hash: tDbCMNI2qh+Sps4JTkoNvMsbTNLhu07DvVYON/MkJjM=)
                          7: HwZxfSr2LjgJByCEw6-PSJSOQOI.crl (hash: 6Ra7KW3XGyZt+hVtPrqMfetwDVjxfi6TcLDsvkZXZTY=)
                          8: a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (hash: QZxTL59NuAEyGeUvD1m7yWDCwZjliZB7Vf3OmCvJzfY=)
                          9: c686f937-000a-490a-846c-e2773b637b26.roa (hash: rAP3jyFf8B725ShoThKoW+DzvZZD6hFoLW/7fWzG1tQ=)
                          10: d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (hash: VEqBqGeRuPXP2z9s6n0TYZrl3uWrzy+hRFMTSQDmaKI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d1:48:f7:1e:ce:6d:b1:3c:aa:e8:3c:60:74:7e:47:c3:9c:88:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Nov  5 00:00:50 2025 GMT
            Not After : Nov  9 00:00:50 2025 GMT
        Subject: serialNumber=9fed5443d2f831e16215d9f817509e048c2d48414b22c39409911746727e4747, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:30:78:e1:f0:9e:1b:5f:7f:6c:72:6d:ba:
                    2f:59:78:cb:68:a2:1b:70:0c:29:9a:29:a9:32:64:
                    2a:89:e0:07:0f:de:88:7a:be:49:54:16:25:32:51:
                    f3:77:58:92:34:bb:bd:ef:d9:71:5b:26:aa:4a:92:
                    b7:12:92:8d:7a:2a:c3:da:fe:b8:05:b6:eb:22:07:
                    02:ca:9f:b5:24:52:46:d4:4d:6c:58:c6:46:22:9d:
                    6e:9b:e3:8f:cf:a3:95:14:77:d9:99:5c:5a:9f:02:
                    74:0b:8d:e3:40:c2:62:48:2b:26:50:3b:5c:86:99:
                    d6:e0:fc:94:8b:57:e0:a0:ca:74:f3:16:3b:c8:9b:
                    40:09:62:45:c0:01:3f:09:10:5d:62:a0:70:ea:90:
                    4f:2b:42:a8:5b:af:a3:ce:15:ae:48:2d:37:02:2c:
                    65:bf:34:01:65:b5:bb:5f:f7:a2:99:6a:86:bd:15:
                    4c:33:b3:87:a3:1b:82:02:c3:d3:8b:f9:08:07:8c:
                    fc:8c:17:67:11:02:d7:5d:1d:2f:b2:c8:b4:c1:5b:
                    a5:db:14:d7:e4:86:12:3e:95:fe:56:60:e1:f3:86:
                    d8:e4:93:fe:17:6b:a8:f4:23:27:b2:04:d8:23:7c:
                    94:9c:ba:4d:9d:5e:3d:46:0a:77:ec:5c:f5:ed:c9:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:A4:27:99:A6:C9:CB:86:E9:5F:40:5A:FA:5B:0E:03:5A:02:00
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:13:3c:76:ba:07:ae:c9:f0:e3:e2:ab:48:ed:97:5a:fe:
         31:4c:67:38:fb:5d:35:39:f9:e7:b8:20:20:16:9c:0f:24:90:
         85:8b:a6:a6:e3:80:1c:99:99:d1:32:10:d5:3b:3a:24:6a:e9:
         10:e1:f8:64:79:df:af:04:2a:7d:57:e5:df:50:08:a9:65:08:
         8c:0c:3a:cf:64:53:35:3f:72:02:bb:ac:76:cf:e9:26:0b:0b:
         9d:19:46:e3:ae:d3:a8:30:88:88:ca:f6:56:c8:bc:93:73:f6:
         9d:98:1b:c7:4a:9e:0a:44:fe:31:b5:c8:e2:42:54:7e:2a:f5:
         e8:e9:84:51:9f:b0:e5:0e:35:fe:7f:8f:2b:5b:01:47:53:b8:
         0f:d6:87:13:d9:f1:8f:6d:b5:39:55:12:1a:8d:93:1c:a0:d2:
         0d:86:f9:b7:a5:bf:06:9d:cf:df:50:3f:b5:3a:99:9f:fe:e3:
         fc:2c:ac:9d:eb:1c:aa:ed:d8:64:19:75:8f:81:0f:30:20:ef:
         42:6d:f9:2e:55:71:ef:85:76:78:8c:ea:c5:2a:b0:d2:5a:53:
         dc:98:5a:d8:41:3a:e3:7f:02:95:ab:68:4c:ad:fa:42:52:00:
         2f:27:69:73:8f:d9:1d:ec:21:f7:01:30:dc:bb:da:ec:b2:26:
         d8:40:66:6d
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUOtFI9x7ObbE8qug8YHR+R8OciKIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUxMTA1MDAwMDUwWhcNMjUxMTA5MDAwMDUw
WjB6MUkwRwYDVQQFE0A5ZmVkNTQ0M2QyZjgzMWUxNjIxNWQ5ZjgxNzUwOWUwNDhj
MmQ0ODQxNGIyMmMzOTQwOTkxMTc0NjcyN2U0NzQ3MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfoDB44fCeG19/bHJtui9ZeMtoohtwDCmaKakyZCqJ4AcP
3oh6vklUFiUyUfN3WJI0u73v2XFbJqpKkrcSko16KsPa/rgFtusiBwLKn7UkUkbU
TWxYxkYinW6b44/Po5UUd9mZXFqfAnQLjeNAwmJIKyZQO1yGmdbg/JSLV+CgynTz
FjvIm0AJYkXAAT8JEF1ioHDqkE8rQqhbr6POFa5ILTcCLGW/NAFltbtf96KZaoa9
FUwzs4ejG4ICw9OL+QgHjPyMF2cRAtddHS+yyLTBW6XbFNfkhhI+lf5WYOHzhtjk
k/4Xa6j0IyeyBNgjfJScuk2dXj1GCnfsXPXtydAnAgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQUFzakJ5mmycuG6V9AWvpbDgNaAgAwHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjL0h3WnhmU3IyTGpnSkJ5Q0V3Ni1QU0pTT1FPSS5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2FlLTdlYTM4YzMy
ZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJmhM8
droHrsnw4+KrSO2XWv4xTGc4+101OfnnuCAgFpwPJJCFi6am44AcmZnRMhDVOzok
aukQ4fhked+vBCp9V+XfUAipZQiMDDrPZFM1P3ICu6x2z+kmCwudGUbjrtOoMIiI
yvZWyLyTc/admBvHSp4KRP4xtcjiQlR+KvXo6YRRn7DlDjX+f48rWwFHU7gP1ocT
2fGPbbU5VRIajZMcoNINhvm3pb8Gnc/fUD+1Opmf/uP8LKyd6xyq7dhkGXWPgQ8w
IO9CbfkuVXHvhXZ4jOrFKrDSWlPcmFrYQTrjfwKVq2hMrfpCUgAvJ2lzj9kd7CH3
ATDcu9rssibYQGZt
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:47:51 2025 by rpki-client