Manifest

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
File:                     _2i1wiK-1gUjyNKa-HTumZaQltA.mft (raw, json)
Hash identifier:          A5GWLeQoacuFAVCpFbdWQeBg+gHLeE7U5KYfOvpgmvI=
Subject key identifier:   AA:13:F9:97:4F:35:BF:DD:F9:7A:10:F7:63:78:0B:75:6D:64:80:2C
Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8
Certificate issuer:       /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
Certificate serial:       2D35B5A46C9594C8506A059E4701FE53F4B69B93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
Manifest number:          90
Signing time:             Mon 21 Sep 2026 00:31:24 +0000
Manifest this update:     Mon 21 Sep 2026 00:31:24 +0000
Manifest next update:     Fri 25 Sep 2026 00:31:24 +0000
Files and hashes:         1: 551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa (hash: K7PyJ2piTiXpyhCflhlEDsVvP/8TNS3H/3fcMPXBsDU=)
                          2: 6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa (hash: zwZMxIj+nvs0UHL411cYzLhkubMHbZbSLhCKYBX2OnM=)
                          3: 94f5f688-47ac-44f5-a5fd-9104b80f7066.roa (hash: rcFnStVAxLQaOMwBHza12CiGh+l3t0dvKX5HYrnBBgU=)
                          4: _2i1wiK-1gUjyNKa-HTumZaQltA.crl (hash: TfWgHgDYwhZLhZ+HypYiA/gQkCmHzIxhfVW9DtRO2YE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:35:b5:a4:6c:95:94:c8:50:6a:05:9e:47:01:fe:53:f4:b6:9b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
        Validity
            Not Before: Sep 21 00:31:24 2026 GMT
            Not After : Sep 25 00:31:24 2026 GMT
        Subject: serialNumber=9beac54e1a1a6895d8613a97277c43cd9a775c74dcd043cd70f75d08a3427d21, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:ab:2b:d0:72:0a:f5:59:bd:19:29:e5:ec:
                    cc:bc:2a:56:d3:a5:51:ac:c1:04:01:1a:3f:00:d1:
                    2e:5c:6d:18:06:fc:76:c8:0d:de:09:fd:df:e3:4a:
                    da:7a:e7:5d:59:6c:13:e7:4a:57:ad:0b:9e:b4:6d:
                    c2:bf:76:f9:1d:d6:a6:e4:74:f7:d0:13:e3:e2:bb:
                    ea:4d:b6:0e:88:07:e8:80:25:d0:77:18:9b:df:cf:
                    92:67:bc:8d:ab:56:ad:1a:4f:d4:9a:15:8b:30:5b:
                    ee:f5:c7:e1:af:3c:bb:c6:05:cc:b1:2a:6d:d0:10:
                    db:d1:93:a4:c8:6a:bd:04:ef:ee:e8:e4:d3:47:94:
                    20:fd:9d:0a:a8:47:1b:e9:42:6e:7d:08:ad:4f:77:
                    f8:e5:98:8b:76:66:83:ed:1a:17:0f:36:04:c3:dd:
                    84:1d:c2:17:dd:ad:31:98:64:df:3c:31:7d:c9:b1:
                    f1:65:6f:77:06:69:54:58:a4:a7:42:45:a2:8f:54:
                    61:9d:7b:57:96:83:67:63:1d:55:a7:c0:1b:25:ca:
                    b4:6b:e3:c2:33:4d:07:75:e7:dd:28:2f:d3:bd:c9:
                    6e:0e:c6:d5:76:d5:db:41:8a:f8:1c:ea:4f:46:8d:
                    5a:63:7e:ec:0a:3d:09:62:6e:82:d8:75:66:39:69:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:13:F9:97:4F:35:BF:DD:F9:7A:10:F7:63:78:0B:75:6D:64:80:2C
            X509v3 Authority Key Identifier:
                keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:a3:f5:5e:57:cc:20:f2:04:46:0b:df:b5:4a:d9:6d:cc:
         79:98:00:95:38:f2:03:f9:74:b1:bf:3a:74:b0:17:f0:cf:8f:
         64:62:ba:ae:42:cf:6b:db:ab:04:a5:11:16:bc:98:ae:80:36:
         55:b2:1f:11:86:a5:99:54:7e:b5:97:07:d9:90:73:c1:08:92:
         3b:32:c2:4a:aa:b3:ff:a4:f4:43:53:23:03:34:cf:59:34:70:
         8a:18:fd:ee:6b:82:9b:4f:12:9b:bd:70:4c:d7:3a:14:f0:9e:
         77:10:bf:02:a8:01:b6:94:b0:81:c5:10:56:51:f5:5f:6b:8a:
         a4:48:45:4b:68:9c:36:f9:d6:ec:ee:a5:20:22:6e:68:fb:73:
         12:97:d8:d0:d0:d8:39:bc:2d:53:2e:7b:24:b3:b2:e4:61:76:
         f6:0f:f8:32:68:6b:10:e7:06:69:1e:ac:07:a8:5b:0f:62:4c:
         6c:25:f5:17:1e:74:3f:9f:19:6d:15:80:f6:1e:7b:4e:d3:ac:
         2f:1f:26:4f:49:ba:26:7c:76:be:ac:a9:36:d2:9e:81:e1:a6:
         41:c8:e0:f5:08:6a:ca:38:85:74:b2:4e:3c:60:e1:05:ba:1b:
         80:2a:81:b9:35:4b:4b:7b:da:e2:29:fd:d4:2d:ac:77:73:cd:
         7f:a4:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:25:06 2026 by rpki-client