Manifest

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft
File:                     ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft (raw, json)
Hash identifier:          3TJKF5dUJwVInexnOqHlvTJEypyJSfCCKIzb2PtUrkY=
Subject key identifier:   40:31:9D:A5:A4:E4:DA:08:C8:44:03:83:DB:6B:14:A5:40:10:50:5D
Authority key identifier: DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB
Certificate issuer:       /CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a
Certificate serial:       62DBF55B12F1C1498D15CB1092FD7DB0E5F96BB9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft
Manifest number:          282A
Signing time:             Thu 05 Nov 2026 04:30:48 +0000
Manifest this update:     Thu 05 Nov 2026 04:30:48 +0000
Manifest next update:     Mon 09 Nov 2026 04:30:48 +0000
Files and hashes:         1: ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl (hash: /fuF8vzYjxLCt0LjOntpaJV6GXyjg1u753Yx1VRlFS0=)
                          2: ae237c81-ced1-4e19-9308-27d6b958b12d.roa (hash: iMZMJu/bO+eDZeQRl2ny2ahWgRcI1wOdWTqEM3aD/dk=)
                          3: f6082068-1502-4d02-a99e-190e44dee2aa.roa (hash: amMPUBjWycgTLAQlFvz2yLsuI1hJS6TCsdelLBqflsM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:db:f5:5b:12:f1:c1:49:8d:15:cb:10:92:fd:7d:b0:e5:f9:6b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a
        Validity
            Not Before: Nov  5 04:30:48 2026 GMT
            Not After : Nov  9 04:30:48 2026 GMT
        Subject: serialNumber=f4f0de9db9dad7441b1ab6d51862e51346ca3f7cfe5240b42e0f3acdc175aaf9, CN=66e6bf6f-c96c-4747-9680-4d23221702e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:33:c8:47:e6:cc:63:59:a2:db:80:2a:9b:
                    0a:ab:6e:2e:d9:ac:fa:42:8f:02:70:1f:9a:16:3c:
                    dd:22:18:88:02:bb:b2:fa:f3:10:30:29:35:17:45:
                    94:50:39:8d:f2:5a:74:b0:95:54:00:8a:fb:79:1e:
                    b4:e8:84:5d:12:5a:09:63:ed:c2:e3:4b:f3:bd:5c:
                    82:7f:21:96:89:bc:4d:40:d6:74:02:c7:96:49:b7:
                    cb:30:59:40:4b:1a:60:54:7e:55:e2:a1:62:c2:b1:
                    8e:a0:e8:66:15:d6:1d:04:cb:e0:cb:79:9c:3c:e5:
                    bf:4b:ee:ca:73:b6:e1:13:da:6d:88:62:10:ab:32:
                    cd:c1:fb:03:50:e2:4a:bc:2c:da:8f:61:bc:18:ca:
                    1f:44:c1:41:fa:cf:ac:f0:fd:87:b3:05:08:45:4e:
                    1a:31:77:9a:58:8a:3f:d3:8f:f6:3f:d7:85:9e:b8:
                    24:63:72:88:51:62:ac:f9:1d:55:6f:ac:6b:5b:a6:
                    4e:d7:59:6e:e6:91:cb:bb:22:60:d2:7f:69:d1:e4:
                    fd:0a:39:a9:d2:6b:0b:6d:3d:c1:06:a2:96:50:f8:
                    f6:51:16:99:17:82:30:19:84:e7:6e:80:04:e1:c2:
                    cb:dd:1f:3b:90:09:97:31:41:56:14:f8:f5:4c:da:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:31:9D:A5:A4:E4:DA:08:C8:44:03:83:DB:6B:14:A5:40:10:50:5D
            X509v3 Authority Key Identifier:
                keyid:DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:c4:f1:da:7e:5e:87:d6:80:09:ac:28:3c:9f:84:6a:23:
         0d:f3:92:6f:46:24:46:8e:53:53:59:c2:c1:2f:d6:b5:99:34:
         1c:a3:11:03:03:82:cc:af:cd:54:d2:eb:b6:7f:93:e5:c3:2b:
         7e:f4:4b:b9:ca:83:e3:f2:15:73:00:00:be:24:82:7c:53:d7:
         2f:71:1c:73:57:c4:62:a4:f8:90:ad:d0:1e:9a:84:3b:4b:dd:
         21:fb:34:15:59:cd:4a:e5:51:90:2d:9a:a0:51:2f:03:4a:20:
         ca:3f:2e:a8:01:43:04:ea:eb:e8:22:20:d4:63:a0:9c:ee:ae:
         b9:46:fa:d4:d8:87:48:bb:e6:5f:d3:d0:ed:b9:82:64:ac:96:
         6e:dd:ca:00:a8:24:3f:84:2e:2a:05:c6:68:a1:22:29:30:b6:
         9d:5c:10:60:48:4f:12:f9:d2:de:e4:1c:a2:11:e4:50:37:1d:
         88:95:d9:4a:ff:5a:24:87:9f:0b:52:97:58:9b:5d:e4:59:a1:
         75:95:39:0d:6e:dd:8e:6d:b7:63:a7:32:d0:5f:c2:24:18:1a:
         ef:9e:32:56:72:3c:87:0b:b1:92:2b:27:b9:04:b2:7d:c4:25:
         ad:68:e0:41:ee:83:32:0d:4e:ce:a4:03:0e:b8:1f:e5:aa:82:
         d4:09:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:17:46 2026 by rpki-client