Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
File:                     XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft (raw, json)
Hash identifier:          XFbaB3neiIszSd+zV4qBY3grnm5/JlZ6NWWIbqvA7YE=
Subject key identifier:   F8:C4:1D:92:03:BF:97:EC:AB:FB:81:42:9F:6B:BB:6D:86:4A:96:8D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5BCBAF03AB293E57F21687C2B3CAA45916AD4665
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
Manifest number:          05D4
Signing time:             Fri 25 Apr 2025 15:20:11 +0000
Manifest this update:     Fri 25 Apr 2025 15:20:11 +0000
Manifest next update:     Tue 29 Apr 2025 15:20:11 +0000
Files and hashes:         1: 02e8e3cf-8157-4c2c-8460-90cdfb690289.roa (hash: B1Hku2HL2fwML4yEqHtuZPeQkKpcDKp7L4Rd7uLHSXM=)
                          2: 0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa (hash: aRvd++mI9lJ6vXnmpzBAuoPwWDYrGKQjuGHqWQvSY0g=)
                          3: 19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa (hash: 8aSKASzOmsIdnqzJnqFEzSQj+FJc+FvaVNBJaugaZQg=)
                          4: 309213e8-3e04-41b5-88c4-b9d8053b7fbe.roa (hash: AalSyScNHUYdjB9waySkcosedsGuEM6oZeC99Mblf5c=)
                          5: 4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa (hash: 927XpW6YAUYODLin+rkagBzyr0pfWQyfQ74MpC4h7to=)
                          6: 5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa (hash: ZfPIcnnmbftdBkPVOl3mTtpntWzDXmkbxyuiDYrHewM=)
                          7: 62814b99-92f8-4054-8d21-b418199235c9.roa (hash: Ex8fYm4h2vU0/Tiqj6Jef4sZELFboDKZWCFx3JgxNrs=)
                          8: 67a4e3f2-46be-4e1b-9070-1a8c069df9c9.roa (hash: YvOvww7UoyTUQoWp3yveAbVHh/4dbJxvynX9wTeWa4M=)
                          9: 88d05d2c-791d-492a-9697-f4c4a592c57a.roa (hash: IUCGnVyJVNIfp36Ys/3liukeqKsM7FO+/6RkUCBLef0=)
                          10: 8b4d99c5-89ad-4008-a629-96e00cf5656f.roa (hash: wRZ/ty+AX+5Frd+IyODsPCHliJ+SPQ/MVcyT2+T6iDc=)
                          11: 8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa (hash: lRrxo4RFcgIhHJf0iRvcgiX2T5ODB44SGRvtmhmmPlU=)
                          12: 8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa (hash: vAtoMsQj4Uk7KCLaKcwI/ysgcpx1GIP55li1KRJKbHw=)
                          13: 90cfe61c-18cf-49e8-b6df-56574149e45f.roa (hash: bEUl/j9/+SHlIMJ/6b3SBqpLB5svcusl10ohHOMT3Dg=)
                          14: 9c668317-9f28-4868-b993-30a89bb71db1.roa (hash: EZORSFd3oTdeGeur45hwnqw1DzHTWBzYR3VfjtYwwzs=)
                          15: 9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (hash: zijht/Lg4e2Cw3Sb14BV9ZWEV/buiMCibzQEMmt0V/0=)
                          16: XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl (hash: NYBYcnJ73ujFAmMjUwr1npW7Kf+hm9RevkrVCyzqFZo=)
                          17: a10037ab-052c-48f8-ad64-92ed72e76722.roa (hash: PYd8nzLubA8U9vWH8Apno9DPGiovc8lJZNnOVk2zO2I=)
                          18: a1e648bb-cfc9-4252-8342-da6740732696.roa (hash: vZGLFopASSOcUiSS48xmUGJiR1iap74sM2n51tk4QWM=)
                          19: a23f57bf-3947-48c4-91f1-e4364b7d94a1.roa (hash: GtRVvb7BeaGERblJJelZwfSG0yyPnj6HlqmfpPMhflU=)
                          20: a264e569-c898-422e-8778-bb2090bc1056.roa (hash: OHhAvEKzK6SU1KtJq2BSqDBGzk5xqXPL97n7pWosvKs=)
                          21: b0d33020-6ece-4acd-b13b-856d17693653.roa (hash: vyyDrD2jwDx+YD4r0sIGUD47Kq3z11N5mmHffnUZe48=)
                          22: b4696ceb-f833-43c4-af53-9960894ce08d.roa (hash: addw0JCmRJsk2vh7gVbTMsoIISrlisPKISz81Bzlkxo=)
                          23: ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa (hash: YJibF1ev7qeJpFzF5jBAuLz94c3AdWv9ohDXL6y8Wx8=)
                          24: de5759b0-8ae0-4c75-8bc6-1760901356b2.roa (hash: 7CvTlndXpMCb7ZK/B0EK7lfL2+mhAT6DglXnKGuJSEA=)
                          25: e7956dbe-ff3b-4911-9492-89c3cd5a2947.roa (hash: m9sVM9W3Z8a83EN54X27D26kXCnq8p7p8xyx9rZqcCo=)
                          26: ecba0557-c004-41c2-bd5b-63142dbee294.roa (hash: DFc3OwLq/aNvlkQp7Znq5eEtOZhN521L4B+gY71gqR0=)
                          27: eceec9b6-1378-4e42-b82d-a3aa97be056e.roa (hash: Rv87g/leUfQzxLhq/rUAdIPvX+6iiTiWXDsdqynsnL8=)
                          28: f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa (hash: RG2uCk47fHvuBeYUY4c/fu63ENdM3ZQPxE3jvgS8ewY=)
                          29: feec66e8-f95b-444d-bd4e-917d547d1820.roa (hash: N7iq5wsteiRZIdsSh1lJTcJP0HqjCfG3q7gR4vXJ6lM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cb:af:03:ab:29:3e:57:f2:16:87:c2:b3:ca:a4:59:16:ad:46:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr 25 15:20:11 2025 GMT
            Not After : Apr 29 15:20:11 2025 GMT
        Subject: serialNumber=b40f78e25f00fe25e77666244d508a9a3978e0a65f8d7163daafece0d565dc46, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:16:e5:70:fe:7c:4f:d6:a7:10:53:90:bb:
                    80:eb:e3:5d:1a:35:d6:66:13:b9:c9:d9:85:82:e1:
                    89:d3:02:fa:46:1d:72:bf:4a:cd:54:7f:80:38:cb:
                    18:53:27:07:56:10:94:77:86:09:bb:11:df:ca:44:
                    54:10:bc:45:93:c4:4b:81:30:7a:5c:aa:0e:b9:65:
                    12:34:7e:e1:aa:0b:4f:b1:1c:25:0b:90:d5:17:3b:
                    8f:0c:7f:f5:d6:2e:d2:61:b7:f2:6d:d7:36:c3:61:
                    1d:96:9f:3b:a3:4d:d5:e8:0d:5f:7b:2e:5a:39:ea:
                    61:04:6c:98:40:92:1d:23:ae:78:6f:00:b4:27:4c:
                    54:b1:0f:8f:84:03:62:d8:e8:be:f1:b3:c8:f0:0f:
                    99:80:7f:8d:6b:88:f7:b4:ab:1a:07:d1:be:cd:3e:
                    3a:ce:e6:32:4f:a7:7b:13:ed:58:71:b3:c0:1f:bc:
                    d5:38:76:e3:4b:57:7b:16:4c:9a:35:8b:b6:fb:f9:
                    a3:bd:0e:28:52:8f:b2:ca:04:a9:31:e9:4d:dd:08:
                    47:81:80:74:a9:7d:6f:09:2d:fb:8b:c3:7c:a5:b7:
                    4e:96:db:73:d9:2f:d5:91:2a:07:d7:45:97:4c:0e:
                    4a:f7:42:d5:4a:aa:8c:71:98:29:e8:b3:6e:54:f4:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C4:1D:92:03:BF:97:EC:AB:FB:81:42:9F:6B:BB:6D:86:4A:96:8D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:fe:b2:83:33:91:97:d6:73:f0:43:5b:ab:05:d5:d7:dd:
         63:7d:34:10:44:b0:53:09:55:62:6e:56:ad:cf:c7:09:0b:e4:
         43:41:69:15:25:50:e4:8a:0a:61:d9:fc:a8:86:3c:67:39:7c:
         38:d8:09:c2:0f:66:d3:c3:77:96:d4:c4:91:71:f6:97:82:e2:
         48:e9:06:7c:41:4b:b7:a8:02:f2:53:d0:66:26:40:35:7b:cd:
         bc:77:14:c3:ef:6b:86:04:ee:48:2f:14:e1:a5:e4:eb:39:d8:
         2d:57:10:71:53:92:96:2a:24:2f:76:34:4a:f1:d2:3f:65:70:
         b0:9f:6c:f0:21:ca:3b:d9:b6:4d:da:86:dd:49:f8:3e:8e:76:
         a6:ea:7d:8b:c2:4c:1d:13:d3:88:ec:06:7c:50:1e:c4:c5:27:
         b1:50:5b:0e:c3:c0:0f:75:81:62:4c:cd:91:06:c4:92:a2:3c:
         16:22:e6:a0:dc:e6:20:be:75:8a:95:6b:f1:5f:14:e3:f4:63:
         08:9d:60:ac:26:c1:e8:98:26:53:2a:b0:10:b3:cf:69:d9:be:
         43:ed:05:06:be:39:d2:46:84:b2:fd:81:40:28:a3:30:dc:56:
         98:68:3f:36:6b:6a:e5:b9:57:27:cc:f3:02:bd:be:5b:9e:7c:
         9d:69:bf:fe
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUW8uvA6spPlfyFofCs8qkWRatRmUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNDI1MTUyMDExWhcNMjUwNDI5MTUyMDEx
WjB6MUkwRwYDVQQFE0BiNDBmNzhlMjVmMDBmZTI1ZTc3NjY2MjQ0ZDUwOGE5YTM5
NzhlMGE2NWY4ZDcxNjNkYWFmZWNlMGQ1NjVkYzQ2MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0+RblcP58T9anEFOQu4Dr410aNdZmE7nJ2YWC4YnTAvpG
HXK/Ss1Uf4A4yxhTJwdWEJR3hgm7Ed/KRFQQvEWTxEuBMHpcqg65ZRI0fuGqC0+x
HCULkNUXO48Mf/XWLtJht/Jt1zbDYR2WnzujTdXoDV97Llo56mEEbJhAkh0jrnhv
ALQnTFSxD4+EA2LY6L7xs8jwD5mAf41riPe0qxoH0b7NPjrO5jJPp3sT7Vhxs8Af
vNU4duNLV3sWTJo1i7b7+aO9DihSj7LKBKkx6U3dCEeBgHSpfW8JLfuLw3ylt06W
23PZL9WRKgfXRZdMDkr3QtVKqoxxmCnos25U9AqfAgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQU+MQdkgO/l+yr+4FCn2u7bYZKlo0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4LWY5ODJiNmU2
MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbnf6y
gzORl9Zz8ENbqwXV191jfTQQRLBTCVViblatz8cJC+RDQWkVJVDkigph2fyohjxn
OXw42AnCD2bTw3eW1MSRcfaXguJI6QZ8QUu3qALyU9BmJkA1e828dxTD72uGBO5I
LxThpeTrOdgtVxBxU5KWKiQvdjRK8dI/ZXCwn2zwIco72bZN2obdSfg+jnam6n2L
wkwdE9OI7AZ8UB7ExSexUFsOw8APdYFiTM2RBsSSojwWIuag3OYgvnWKlWvxXxTj
9GMInWCsJsHomCZTKrAQs89p2b5D7QUGvjnSRoSy/YFAKKMw3FaYaD82a2rluVcn
zPMCvb5bnnydab/+
-----END CERTIFICATE-----