Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
File:                     gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json)
Hash identifier:          hpoUiBCPRkaG/2hkL944o3y2c5UW4N1inHijCSGbKyE=
Subject key identifier:   DD:26:87:E5:DC:8A:F4:DA:64:6A:F2:F5:74:86:67:EF:C4:14:60:AF
Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70
Certificate issuer:       /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
Certificate serial:       74209DB41833B25774137631CE4EC97CF24248B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
Manifest number:          0436
Signing time:             Sun 19 Oct 2025 00:13:15 +0000
Manifest this update:     Sun 19 Oct 2025 00:13:15 +0000
Manifest next update:     Thu 23 Oct 2025 00:13:15 +0000
Files and hashes:         1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: WrM65XBCF+HUfUTh1P+N0iVVVPyhLTVHZoaJplsOOgw=)
                          2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: eD1zq8KVnk0ogI3YAAuR6yZypYQmUhWFnejRbL7DlPY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:20:9d:b4:18:33:b2:57:74:13:76:31:ce:4e:c9:7c:f2:42:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
        Validity
            Not Before: Oct 19 00:13:15 2025 GMT
            Not After : Oct 23 00:13:15 2025 GMT
        Subject: serialNumber=3dbbdd31f9b04368d691814cf5647b1b6a59bd3977e1a7ed52d594fd47172a69, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:84:40:24:33:4a:0e:91:3a:22:b3:b4:16:
                    dd:64:f2:94:e0:be:65:c1:93:af:ec:ce:89:06:ae:
                    47:ef:e9:e9:a1:29:60:80:80:90:b8:cf:d2:b3:76:
                    40:58:e4:91:2b:33:f4:a0:fd:e7:23:8a:a5:e7:70:
                    b9:19:44:06:97:4e:f9:49:36:44:23:3b:59:01:1e:
                    7b:bf:83:9c:5a:ae:0c:27:3a:30:8b:ef:4a:6e:51:
                    09:1c:51:7b:b5:ba:7a:c9:f6:40:24:e1:5f:fe:30:
                    84:e1:a2:82:7b:74:51:4c:43:53:59:89:1b:b7:27:
                    98:1c:c2:ea:87:a5:54:18:0e:2f:ee:e1:89:77:25:
                    e1:a2:c8:c5:4a:56:6a:ea:25:cc:59:e3:12:43:41:
                    fb:04:be:79:38:f1:73:11:ba:f2:8a:2e:c7:ed:a2:
                    82:54:6a:f0:b4:e5:ec:a4:97:a2:95:a3:53:40:09:
                    a2:53:d8:28:79:3b:a1:07:9f:b3:47:1e:64:a2:3b:
                    ed:75:85:43:d5:68:38:32:fa:41:68:91:14:ac:1a:
                    ca:7a:5c:f3:aa:cf:55:ab:b0:1d:78:e0:41:ca:c3:
                    2b:0a:33:f1:ea:ea:6f:44:bd:45:f0:03:39:00:14:
                    e1:0e:90:08:d1:01:f1:0a:49:50:06:55:3a:19:3c:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:26:87:E5:DC:8A:F4:DA:64:6A:F2:F5:74:86:67:EF:C4:14:60:AF
            X509v3 Authority Key Identifier:
                keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f2:e4:fe:f1:a1:cb:3f:10:a8:74:20:22:ab:ce:39:58:bb:
         48:48:fe:c6:09:f4:75:67:af:db:f4:ff:9f:f4:6c:93:9b:f6:
         4f:30:6a:8c:4d:c2:77:98:7e:f6:fb:c1:61:78:72:bc:09:6c:
         48:58:00:ff:96:8d:3b:81:31:e4:2b:a9:77:a5:ee:86:6e:6b:
         46:f6:68:f6:18:c7:bf:a0:d0:82:08:8c:11:87:2a:7a:87:54:
         76:f3:8b:37:26:12:44:62:12:c5:5f:9f:dc:a6:f3:89:3f:c8:
         69:3b:04:8b:f7:0e:26:fd:3c:0f:0d:c8:4c:37:38:b7:c9:a5:
         e9:97:b5:60:52:97:04:fa:fe:dd:d2:4e:ca:b9:a3:a0:04:16:
         2d:2f:05:ef:aa:2f:ba:ce:e6:24:e2:ef:0a:58:59:6f:32:c2:
         e2:58:76:dd:bb:e3:3f:56:81:4f:dc:34:c7:f8:fd:c1:1e:95:
         ff:4a:ad:7f:ba:58:16:11:1c:55:94:f1:29:28:98:92:f7:80:
         44:20:48:13:ff:8d:aa:6f:ac:1e:90:d7:38:f5:9a:dc:1b:d6:
         73:30:1f:a0:ef:f6:2f:21:53:c4:8b:7e:75:f4:47:35:95:00:
         c4:7d:27:41:6c:87:ef:4a:10:84:fe:75:be:27:b7:a4:78:d5:
         f9:5b:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:25 2025 by rpki-client