Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
File:                     gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json)
Hash identifier:          8kxrfnqHq+awRhkoewuf6UPeWpk0XWj/meod0ysM2ak=
Subject key identifier:   30:0D:CC:C6:3F:52:52:C9:34:69:0E:C4:89:A8:7D:51:F6:06:37:13
Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70
Certificate issuer:       /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
Certificate serial:       7191343011F8181EB7D8A722945287039F219EFB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
Manifest number:          04D4
Signing time:             Thu 26 Mar 2026 00:08:09 +0000
Manifest this update:     Thu 26 Mar 2026 00:08:09 +0000
Manifest next update:     Mon 30 Mar 2026 00:08:09 +0000
Files and hashes:         1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: O6XLahvXozd/v92Q6WcNRuqhS81OKEzXHYcciw1bslU=)
                          2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: mfri5lzSIs+QJlnUH/wggWH0g7JO317MNhwi7EYvSXE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:91:34:30:11:f8:18:1e:b7:d8:a7:22:94:52:87:03:9f:21:9e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
        Validity
            Not Before: Mar 26 00:08:09 2026 GMT
            Not After : Mar 30 00:08:09 2026 GMT
        Subject: serialNumber=6ff5090577969e6a5a8120a0aabc889a412d0ad2bffa9cab65b7317fbfedf46c, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:a6:fb:94:7e:83:98:a6:02:32:1e:46:5d:
                    bd:1c:cb:64:b5:df:1d:6d:f4:47:0f:50:44:64:15:
                    e9:d1:5b:9e:be:0d:c4:01:ce:98:39:ca:c4:ad:65:
                    ab:a6:9a:4f:ab:40:0e:7c:a3:29:65:00:8b:cc:0c:
                    82:8c:75:5e:f6:8e:cd:1b:ef:a0:ac:ca:eb:bd:5e:
                    a0:41:10:ec:2b:7e:7b:df:47:4d:28:8d:20:aa:11:
                    f7:80:a8:ad:e0:f8:d6:7e:b2:5f:da:72:21:a8:27:
                    a7:af:88:6d:52:57:7b:01:c9:83:28:00:9c:b9:0b:
                    65:6b:7a:57:e3:c9:f7:5e:70:10:0e:5a:d5:c5:52:
                    6f:83:c6:3a:ee:ec:db:c1:b9:12:04:e0:51:ea:6b:
                    01:cd:ea:00:78:2f:c2:b0:63:fc:c7:7f:24:02:7a:
                    cf:a6:83:97:98:17:e2:06:c1:a9:d4:e1:f3:49:25:
                    ca:cc:d1:98:f9:3b:f3:2d:ea:85:95:ac:a4:87:f8:
                    f8:45:35:0b:29:03:bc:7f:52:e9:8f:6e:19:57:e1:
                    9e:3a:72:2e:c2:8c:fd:ef:e2:ac:22:fd:59:19:f1:
                    f5:a3:f5:79:db:43:e3:42:5d:30:6e:dd:87:2c:52:
                    5b:aa:8c:fc:fa:41:30:b2:bc:00:1b:d8:62:46:0b:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0D:CC:C6:3F:52:52:C9:34:69:0E:C4:89:A8:7D:51:F6:06:37:13
            X509v3 Authority Key Identifier:
                keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:73:d5:fb:ae:dd:77:55:0b:92:a4:7e:36:a7:89:05:17:db:
         46:cb:01:20:09:51:69:53:e6:f9:e9:27:25:3f:cc:8a:15:e7:
         6d:d7:c6:80:a2:f7:61:ca:87:70:46:e2:60:ff:00:2b:c4:44:
         da:e0:10:a2:0c:0d:de:41:a9:30:ac:b8:dd:04:7a:de:78:72:
         4c:87:39:5e:29:1f:af:e3:6b:8b:e6:e8:82:6e:ee:6c:9d:69:
         76:6d:50:ff:a1:bf:33:d5:46:7a:3d:50:54:fc:16:d9:22:14:
         83:55:88:45:da:5a:2c:4f:9c:c9:7a:2f:cc:a5:2b:3e:2e:49:
         19:7f:7d:8f:01:e1:0d:28:f8:fd:87:0e:41:69:a9:68:f0:03:
         70:57:58:09:12:55:fc:ab:0f:1e:81:9a:40:0e:72:3f:f2:ea:
         9f:53:bb:d7:0a:fa:d9:cf:16:c1:30:04:44:64:df:ae:0d:19:
         d0:34:a7:b8:9c:02:91:41:ca:c8:60:c3:ba:34:a6:58:15:b5:
         a3:9e:4a:3c:5f:2b:38:35:cf:0c:bd:aa:2c:c0:17:74:78:81:
         ef:82:86:2d:f3:88:0b:99:73:60:f5:e4:0e:a2:52:70:97:14:
         00:17:eb:2f:99:e8:f5:d3:99:0c:47:f8:42:64:f6:4c:82:d6:
         a3:43:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:20:37 2026 by rpki-client