Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
File:                     n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json)
Hash identifier:          DERExYlkLeJ29QmBi1XPU4PH/PbKn0cjYlOjLmYlrKI=
Subject key identifier:   EA:3B:9B:36:70:BA:CD:0E:C5:AB:CB:3A:2B:9E:CC:CA:5F:95:93:08
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       7622F0098876EA7A7E8E9C790D7A13239E18774E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
Manifest number:          9F
Signing time:             Mon 20 Oct 2025 00:10:33 +0000
Manifest this update:     Mon 20 Oct 2025 00:10:33 +0000
Manifest next update:     Fri 24 Oct 2025 00:10:33 +0000
Files and hashes:         1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: 1kP2M++fmWMNdeWHhWRDYGmhyBjDh9eVYNPrBWNpzCg=)
                          2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: m74/Y7AXPmenm4HcEa34J/O3E1khAnnEthHqbf3xaW8=)
                          3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: 9OM8KMPdNuQjQeB+6VVjTObX2r3L99F+7xJCKpVxJTs=)
                          4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: MJN1JHEhaUwlTLPvrqtAMQ+VdxfLuvodxCCLO0JzdLY=)
                          5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: 6tz2WoYEgJdALlaW9L6WAI5quBxS5hVl7KGt1Bb3eMg=)
                          6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: y/QH5BQ5TP6dQgZZigiolieZoHguppvZjnuMcYe6t/I=)
                          7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: dOtclQZJO3q1euXcFEfm+wyredqxLCAZgMt9j8i7Q/g=)
                          8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: bffOYUPP+I3Z4d4rrr+AaX8manKt40dAPnAvKgD4mWU=)
                          9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: TQYUohrElyKM+nn20cVf/Scx+RzBZLDl5Dcj/bhkll0=)
                          10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: r1Oc5U0H2kaq5/FrS+/HBFz7gWpgOOAAR4yJZh19fOc=)
                          11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: F/4GXpD+h63YLO3CR8UfTK/L0JHtgaTvd+xyFAYQCjo=)
                          12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: js7ccmNP950ZxGmvT22+qxxzt2mS9+WhRQ2ZTiKExZE=)
                          13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: CDUUxDf7KxKhP4Ighuyr/dViwFNAUfpOGw2bRT2oyCk=)
                          14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: 2lwB58UsF9WHsXXWxQ4wIgCalnXLOzk7FhDI0eM6IE4=)
                          15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: OzxpJXzDvuhBGzJLwQ7xDJzS93aA5yTPbv0zqhSzuhA=)
                          16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: 9MAWyxl8OSjTpr5G41Au4Ao90yyTgPQT21TrA83cC6o=)
                          17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: ku3m8+vhIyzxt83KPsvlEt7OPqTXmowAZM+Pmca2uak=)
                          18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: VKhFV7XMmlQAhFqWgXFggmzYJjhKFnHlG7ZdAUh8MC0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:22:f0:09:88:76:ea:7a:7e:8e:9c:79:0d:7a:13:23:9e:18:77:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Oct 20 00:10:33 2025 GMT
            Not After : Oct 24 00:10:33 2025 GMT
        Subject: serialNumber=1c84bccbed8100130dd52e52d2c6f0443b0cc5493845633bbe330be7b90d79fe, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:d6:fc:51:b8:5a:0d:f0:19:79:a1:0e:4f:
                    cb:4d:d1:a2:cf:d4:96:e9:2c:10:26:76:07:67:06:
                    5d:20:c8:76:7c:04:59:21:66:b6:2a:6b:ec:1d:9a:
                    85:90:40:27:d5:10:b2:18:9c:e2:6f:86:12:3b:35:
                    ca:88:40:ad:24:6c:b5:ad:bc:fc:c0:b0:da:0e:0f:
                    46:e7:23:a3:95:f3:d8:9b:8f:9f:8b:31:2d:f8:28:
                    b5:81:05:90:9b:fa:19:c3:62:45:b0:df:1a:11:7e:
                    77:7f:18:e3:ea:bd:bd:c2:57:45:1d:d3:3c:3c:01:
                    8e:f0:4c:e4:0a:94:b0:fa:df:ff:3e:7f:44:10:21:
                    ef:58:db:77:17:c5:7b:3a:34:23:29:8e:92:5c:a9:
                    1f:ef:aa:c7:57:24:5f:82:08:38:26:15:c2:a3:b8:
                    b8:1e:1e:01:f5:9b:7d:a4:d5:e6:e7:d4:f3:4c:c0:
                    f1:2d:d8:8e:c3:cd:0e:7c:b9:a9:4b:51:90:7d:38:
                    91:8e:d8:4b:b3:32:89:cd:05:5b:0e:4b:d0:04:aa:
                    de:64:46:9b:fd:28:27:2b:b5:19:e2:27:c8:a4:3c:
                    2e:31:a9:80:7f:ba:47:30:63:eb:3b:17:66:3c:a4:
                    c0:38:b6:43:33:b0:46:39:94:9b:de:f5:e1:f8:8a:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:9B:36:70:BA:CD:0E:C5:AB:CB:3A:2B:9E:CC:CA:5F:95:93:08
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a2:9c:4c:92:9d:22:a0:34:4f:2e:2e:cb:4e:4e:81:a1:45:
         24:6a:44:7e:ca:87:4a:1c:09:79:f6:6b:e2:11:36:43:c9:c5:
         0b:7d:3f:01:95:7e:df:54:9e:e7:16:02:9f:ec:93:af:e8:a3:
         7b:e7:e2:41:59:ca:ee:98:ce:95:de:0c:0a:29:16:52:63:17:
         6e:2b:98:2d:e4:20:95:f8:fa:ea:cd:73:9e:21:3f:70:16:7b:
         7e:d8:14:fd:d2:a8:90:6e:e6:c8:4b:e2:a7:a1:26:f4:9e:61:
         f9:e2:37:ea:ab:9e:4b:e2:50:9e:ec:04:4f:ee:00:74:1d:0a:
         93:32:46:aa:74:c8:17:03:b8:ae:64:76:2d:53:3f:dd:8b:c5:
         55:ab:51:01:e3:1d:14:84:e7:4f:da:98:d2:41:a7:a4:dc:06:
         0b:7e:19:6a:ae:1b:28:06:15:1e:4f:05:48:0e:b7:0a:26:e0:
         4a:dc:25:ee:22:d5:f5:79:1f:20:bd:28:15:6f:eb:c5:30:5f:
         c9:28:96:0b:60:99:4e:8f:3f:dc:ce:3f:d1:86:d0:54:d6:07:
         69:db:b7:f1:a8:f3:d9:bb:a1:de:99:f2:ed:97:30:98:88:d6:
         a1:89:39:50:b8:fe:de:d7:95:ff:fe:e5:ee:db:30:72:bc:58:
         25:84:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:38 2025 by rpki-client