Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
File:                     HwZxfSr2LjgJByCEw6-PSJSOQOI.mft (raw, json)
Hash identifier:          HMV62COPJdUrVN+Bul+chXhWnVbSnakib5MIPJFrDVM=
Subject key identifier:   F0:AE:E4:28:FF:FA:1B:CF:40:C3:AA:19:1F:E2:DF:20:53:1E:5B:EE
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       58926D51310665E9B00F253CE3644F1D47291B3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
Manifest number:          04B9
Signing time:             Mon 20 Oct 2025 00:23:13 +0000
Manifest this update:     Mon 20 Oct 2025 00:23:13 +0000
Manifest next update:     Fri 24 Oct 2025 00:23:13 +0000
Files and hashes:         1: 0c492edd-c347-4b97-a816-01566f9d097b.roa (hash: SDd5dp1rSONPDABypNCOKh3AxR6UjQxREvpLISyf/lA=)
                          2: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (hash: DVqr5m6F4M4kwigv7sJIUmkhj7pOyaDwBdJNWw0NBHU=)
                          3: 59031a63-ea1a-4943-86ab-19221a23ca42.roa (hash: QT8TRN1AwFzCh0NqKSgMx7+5EGRN69Y8ECBCmhj1H5E=)
                          4: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (hash: BpxrTRU8GoEuHdZItrtWJ8Chb6A74i3AXzgGD0Vls4w=)
                          5: 91a27594-a038-483a-a558-a5377f4d266f.roa (hash: wxDPX7oaeomt9KXow4vKWMpETLabLSwXFUz1MuLa93g=)
                          6: 943694fe-e278-4d76-b786-7df26f151dd9.roa (hash: dfnUACfEadw2UAG9YMu24QFFT6yzAdaukQCGDj34yQM=)
                          7: HwZxfSr2LjgJByCEw6-PSJSOQOI.crl (hash: +aWmpnS6Yh6WY6KGzRoi1rDKjnpNHrzKhhnxYuubi14=)
                          8: a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (hash: aHFCy+nssm/JdAYP81jJgyBi92DHF2fLZK/tZZE5yhI=)
                          9: c686f937-000a-490a-846c-e2773b637b26.roa (hash: orO0M8lp10dpO0gP4wDOwqBm7pfxrxHMFE+q+xnxhGU=)
                          10: d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (hash: 5nIJprtnzhHgjOiWyZPmEmQcZTSIJ8neOwIaHwg39RA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:92:6d:51:31:06:65:e9:b0:0f:25:3c:e3:64:4f:1d:47:29:1b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Oct 20 00:23:13 2025 GMT
            Not After : Oct 24 00:23:13 2025 GMT
        Subject: serialNumber=36712adff265ea9323938d5d8b8b9fe329c0356bcabc32aa62bed94b8fc127ec, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:93:10:9f:11:45:60:e1:2b:e8:9b:61:3b:
                    b8:d2:6e:1d:78:2c:20:fe:ec:36:04:f7:50:5d:f0:
                    d4:c0:5b:72:43:78:a1:d0:df:aa:dc:58:ae:75:a4:
                    61:97:3b:d4:ef:8d:ce:93:77:a6:d6:7c:77:88:17:
                    29:8f:23:8c:8f:47:87:87:ed:32:cd:8a:71:41:31:
                    94:03:f2:07:ef:6d:2a:2c:6f:a4:14:d6:93:b8:c9:
                    23:6c:a3:7f:11:21:5a:c7:3a:88:7e:32:88:be:4d:
                    01:0c:6a:85:5a:fb:4f:a3:5c:2a:67:fd:7b:1f:5b:
                    d3:c2:03:9f:c9:25:b7:d9:03:24:1a:30:9b:48:65:
                    6c:22:c8:73:ee:b0:d9:52:02:69:07:0f:eb:9d:86:
                    70:8a:3f:55:f6:72:31:58:46:cc:37:49:19:be:03:
                    e4:c7:3f:7e:e5:8f:c8:56:0e:8c:da:72:13:8f:f3:
                    fb:73:69:7e:e2:3b:2d:7d:df:a8:d5:c6:5f:d0:5a:
                    b4:58:ab:7c:8f:16:6d:d9:3b:01:21:3e:8e:5c:14:
                    c2:21:38:af:b6:71:8b:d0:a6:08:68:32:7e:6a:10:
                    72:76:20:ec:a2:55:2d:87:b5:bf:64:80:4c:13:26:
                    a7:b1:80:57:d5:4f:55:f7:59:f6:e0:54:e8:8f:71:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:E4:28:FF:FA:1B:CF:40:C3:AA:19:1F:E2:DF:20:53:1E:5B:EE
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:42:f9:f0:a1:16:19:5c:59:37:ef:07:2e:e2:57:af:07:eb:
         02:8e:7c:d9:42:e5:3e:f7:fc:ac:10:24:a7:12:11:c5:8c:6a:
         56:8f:07:ec:f0:52:27:dd:0b:44:6c:8a:92:b4:12:83:22:b8:
         ad:dc:7d:ee:ba:b9:58:b1:fb:c0:21:d5:21:d7:c7:b4:30:15:
         f4:0d:3e:75:1f:a9:99:12:8b:c1:b7:f3:31:b8:ac:fc:c3:a0:
         4e:b9:c3:60:63:50:17:fd:d4:0d:f9:42:05:dd:ff:e5:74:75:
         88:0d:52:4c:dd:0d:bc:28:3b:0b:c5:ec:12:21:c8:b5:43:81:
         28:ec:3a:e5:97:ab:b3:db:a2:29:a9:df:d9:da:e6:b4:82:94:
         fe:c6:8f:f8:94:75:11:cd:a6:cb:5c:d9:95:1c:1b:f8:49:44:
         37:58:70:b1:29:ff:a6:60:4b:dd:95:03:0d:3b:80:15:ed:32:
         b0:1a:02:08:0b:e5:3f:b4:29:65:ee:15:74:a2:d2:f2:7e:76:
         c7:1a:c2:20:d2:5b:8a:e4:42:8e:91:60:39:5f:e0:cb:73:f6:
         38:c2:b1:eb:60:f3:66:02:1e:8a:a8:d2:77:de:64:08:09:a0:
         fe:86:5d:ff:36:57:5c:0a:e6:d4:ae:96:c3:cb:3f:7a:9c:5c:
         50:2b:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:57 2025 by rpki-client