Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          KWsBUYvgLdxaIdk0mBkfnh1k/6FFXNqdA6QfEBq4tFo=
Subject key identifier:   97:E6:52:36:C6:0E:E4:E2:95:78:AF:85:29:76:37:D6:1A:F4:98:84
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       1C97205F6B6657D64AF695D90ED29D8B37C85399
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0449
Signing time:             Wed 05 Nov 2025 00:23:28 +0000
Manifest this update:     Wed 05 Nov 2025 00:23:28 +0000
Manifest next update:     Sun 09 Nov 2025 00:23:28 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: fJ0mdp/dnX4me52j0CjmjzU1MfvNgNWxXMLTNG91PbU=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: LaqWA5MDvAnKbmWGx5zytfpmlA5x16T1m/ifWnVSsSg=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: 8kb5nOq3Rgj6e1QKsuF4c72Tf1cEQoNVR2ihoIR+MNI=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: DyUkCIbeZMZw+r/G0eGilgLWQQmRlZgwpQF2etwjRYo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:97:20:5f:6b:66:57:d6:4a:f6:95:d9:0e:d2:9d:8b:37:c8:53:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Nov  5 00:23:28 2025 GMT
            Not After : Nov  9 00:23:28 2025 GMT
        Subject: serialNumber=113e89fea704c92bad0774f01a0359261d5a8b54b6e0bfbb053a872a7750352b, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:5b:98:75:71:5d:b1:49:ef:cf:9d:0f:51:
                    f2:4d:0a:28:96:8f:43:45:04:bf:2a:3f:cf:29:5d:
                    cf:02:71:71:0f:62:9d:06:45:7e:00:5d:5d:2c:f6:
                    74:e8:7f:a6:22:e6:fc:73:97:9b:35:ed:d8:a0:ac:
                    1e:dd:0c:74:4a:03:06:7e:fa:cb:18:77:0c:cc:14:
                    34:9c:32:02:f0:17:73:e9:1a:48:7e:ca:48:32:7d:
                    da:5b:ed:b4:d8:40:8d:a1:2c:0f:ee:8b:7e:39:0d:
                    28:33:cf:f2:cf:54:8b:e5:9c:51:71:a0:63:13:f0:
                    7f:30:1d:ca:03:52:64:93:61:96:a2:12:9e:17:24:
                    33:ef:a5:45:31:e8:2a:64:f5:f4:3b:69:9e:34:db:
                    ee:b6:3f:d3:73:4f:75:0d:f6:0b:08:b0:56:df:7a:
                    d5:31:f2:3b:09:02:a4:55:6c:e5:82:ef:97:d3:a6:
                    24:55:28:8a:03:3f:25:b5:3a:28:77:aa:01:d4:3c:
                    60:91:b7:c3:1e:99:de:1b:ac:cf:ec:46:ba:cf:5d:
                    17:46:5f:3d:71:32:2a:61:ca:ca:81:e9:45:33:34:
                    13:c5:ed:49:97:92:67:a2:92:39:6f:8d:c4:31:4b:
                    7e:9e:b8:b4:22:fd:eb:40:e7:a0:8b:2b:63:b7:23:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:52:36:C6:0E:E4:E2:95:78:AF:85:29:76:37:D6:1A:F4:98:84
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:db:21:4a:c6:22:5f:be:6e:91:46:cf:2e:30:93:d7:4d:
         7e:72:1e:4a:d2:28:d4:29:81:a9:9b:8c:e6:dd:f2:c2:c8:e1:
         8d:ec:4b:8d:f3:00:89:37:a1:95:cf:de:dd:25:f8:56:dc:ef:
         37:7b:90:2d:37:9c:12:5d:7f:ec:93:cf:9e:86:d1:91:23:fd:
         1b:fe:33:43:3e:69:ac:08:40:10:96:e2:1b:1c:22:e5:c1:8e:
         12:73:34:14:7e:0f:2a:0a:c1:2b:12:cc:38:82:b5:59:1c:c5:
         00:ba:44:e6:67:af:13:a3:d1:db:fe:75:f9:f7:25:20:4f:0d:
         d5:25:58:5a:42:b0:d0:bb:75:29:3d:a6:0c:6c:28:4c:82:53:
         c5:b9:f3:78:fb:32:b4:a7:4b:47:91:2a:87:8f:f0:e9:f9:d8:
         9c:6a:c8:fc:31:0b:02:65:bd:aa:6a:98:48:06:5d:4c:e5:49:
         09:73:e3:77:6f:fd:ae:81:d2:20:73:48:b3:83:1c:64:c3:ad:
         6d:d8:84:19:e0:41:aa:06:38:db:5b:63:cb:0f:68:8b:4e:b2:
         2e:52:cc:ce:45:53:4a:a5:4a:09:9a:81:52:5a:29:4c:b9:97:
         cd:df:62:17:bf:dd:8b:2d:76:b5:3e:39:34:b5:18:4c:04:18:
         98:b3:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:18:42 2025 by rpki-client