Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
File:                     XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft (raw, json)
Hash identifier:          GGk9gLhdohfe0Uj9f4Q2cC024dSFr6JLKPQXUQLmP+o=
Subject key identifier:   40:E5:E5:17:D1:05:74:4A:E9:56:23:3F:90:71:1F:17:C1:F9:D3:83
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       54022E7013CC88616B94D8A5ADE5053D65F21B5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
Manifest number:          0657
Signing time:             Sat 23 Aug 2025 00:21:34 +0000
Manifest this update:     Sat 23 Aug 2025 00:21:34 +0000
Manifest next update:     Wed 27 Aug 2025 00:21:34 +0000
Files and hashes:         1: 0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa (hash: Czi6kBmDcnr1P5CyND5DoSOCFj+m5T1baaKg2E5WcGE=)
                          2: 19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa (hash: ktWpuPmRZ3Jn25Ur8uznTM4xXgnLGZJLGz44YNxA3qk=)
                          3: 309213e8-3e04-41b5-88c4-b9d8053b7fbe.roa (hash: vGezzXRaOLL/jN5tiHVaFCaTN+TgeAWbhCqjqlSrW4Q=)
                          4: 4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa (hash: 5Q2oKHke1hhcZZr+TQ9Wd8fKcR0dT8CJz5h1Mk7JXbQ=)
                          5: 5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa (hash: LJHizu/RzUjRvv45rOXuF2yxI6S5mlahXQD2+orkcIc=)
                          6: 62814b99-92f8-4054-8d21-b418199235c9.roa (hash: f9Cplpgunv05n7vfT9bQTyajvck5ZAjkWpqnwhNBPT8=)
                          7: 67a4e3f2-46be-4e1b-9070-1a8c069df9c9.roa (hash: vaFPoRkD6VRNQgMs8jj5p6PUNFHOlQo+dgAxMsKQV8E=)
                          8: 6ec6eac3-6772-49b5-b04f-ebbfe1d2c01f.roa (hash: p+Zuf27eNg3Rw67bjwGU15lpI4BHyHO3E8SF6oPfvzw=)
                          9: 88d05d2c-791d-492a-9697-f4c4a592c57a.roa (hash: q1bxZoJl/P23xKN/8JaQddyJw+f6DhfRdhNr1Zo+mPM=)
                          10: 8b4d99c5-89ad-4008-a629-96e00cf5656f.roa (hash: Hfs4SoT9s9nwpNL/IbAd01lm4G5LIleSMuxv0nJcBdY=)
                          11: 8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa (hash: Liy0D5wkXOnoNEKAGyBf5unBkINvOEZmeYr755F9F08=)
                          12: 8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa (hash: 0OmKoUmIytxFHv71coQxdjEJbANWRIQBVZrVnatdHwY=)
                          13: 90cfe61c-18cf-49e8-b6df-56574149e45f.roa (hash: dKw+Tb/U7h3Is5K14ujKgTAFZ/GzJKKYIJbviwoLZjw=)
                          14: 9c668317-9f28-4868-b993-30a89bb71db1.roa (hash: uUSTKrYHvIutIs4Fu8KMbiKTge93Wm8Og0axIoJDhtg=)
                          15: 9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (hash: cGxIHZKQxTCL6nX2Y7FgQWsHMc9kvRvk6U3yuyauFx8=)
                          16: XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl (hash: 6o1b+rEU6avYvJoDgO5AsDXvVKkuQYYgj5m23ullL/M=)
                          17: a10037ab-052c-48f8-ad64-92ed72e76722.roa (hash: j8z8QCLWlWzS+gQxeKV83sEWndXZ6QMqnNxJ6lgFnsI=)
                          18: a1e648bb-cfc9-4252-8342-da6740732696.roa (hash: Kj145WyXzYlurJYxliqyFjtbEU8CkKvFk99FT3t7ar0=)
                          19: a23f57bf-3947-48c4-91f1-e4364b7d94a1.roa (hash: kny0T8hP3zxS/fg95Ar01zt0emO+97BUEvaDChZ7NMs=)
                          20: a264e569-c898-422e-8778-bb2090bc1056.roa (hash: E+lnCUHdhBhbAKDEwFTTVfVOAepHdfapogMDeoUL0Dk=)
                          21: b0d33020-6ece-4acd-b13b-856d17693653.roa (hash: V/0uE9gD/Rn02RDom6i5EVua3tXFzsPYuMVk/4UJq2Q=)
                          22: b4696ceb-f833-43c4-af53-9960894ce08d.roa (hash: jSwPnRkPy95edDw03ttzBu7EXWJ7yWyK63ezZz9v5ts=)
                          23: ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa (hash: FmXaeKNq4tb2llAyp0VdDr69iFCDKTC1BxVKTxKHoM8=)
                          24: de5759b0-8ae0-4c75-8bc6-1760901356b2.roa (hash: lxJHz0myHFZ/olX/7cgCQZLNX5zts4sAkzq1fEpVfSY=)
                          25: e7956dbe-ff3b-4911-9492-89c3cd5a2947.roa (hash: ntXgoa2UXdQFFM+68UW8nKK3vB+ZJWxp/5vppZOWRzM=)
                          26: ecba0557-c004-41c2-bd5b-63142dbee294.roa (hash: DLKeYIQ+wWGEd6QYZz8lKKdzBCtD6muEWxwj0BsepX0=)
                          27: eceec9b6-1378-4e42-b82d-a3aa97be056e.roa (hash: ttaEVdijVPrUts11He7EwORYACZd5bYJmL5KZssul0Y=)
                          28: f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa (hash: 30S80JX3mDQFi2IuO2zUmkBGm34rXVcbeOjSE9WlYVc=)
                          29: feec66e8-f95b-444d-bd4e-917d547d1820.roa (hash: eXmWgolpZmijHWOMCZ1Gon6YFFkF9N9g/+Z6fd7hTo0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:02:2e:70:13:cc:88:61:6b:94:d8:a5:ad:e5:05:3d:65:f2:1b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Aug 23 00:21:34 2025 GMT
            Not After : Aug 27 00:21:34 2025 GMT
        Subject: serialNumber=dd00b9deb7c24bf41e68980ed80da15df9b1798209a21bbf37d9b81cb8920f28, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:6f:14:ab:83:b1:1b:67:15:30:b2:d0:29:
                    c8:59:55:f3:8d:b2:30:e3:40:01:89:11:f2:2e:16:
                    54:83:a5:f0:0e:50:3c:89:86:9d:f7:ac:ae:4d:93:
                    3a:02:ec:7b:28:bf:6f:30:0c:82:09:f6:40:b4:ca:
                    c3:01:5d:cd:f4:e7:47:97:39:58:b6:d6:55:4c:86:
                    d5:af:17:47:eb:6a:49:13:dc:40:3d:00:de:7f:45:
                    e7:bd:1a:5a:bf:06:73:73:f0:96:27:fb:97:e0:26:
                    54:fe:66:cb:c8:fa:df:32:2a:c6:cd:de:91:00:fc:
                    ce:ba:a4:c9:8c:42:ad:c5:5b:85:21:c4:8f:81:ed:
                    92:40:93:24:f6:20:d4:86:25:61:90:9e:80:52:fb:
                    12:e8:ac:7a:ba:55:09:ad:51:8b:2b:08:a1:18:09:
                    0e:1b:99:5e:ca:ff:8a:10:b8:0c:61:e1:a8:14:18:
                    6a:c7:98:c7:b1:bf:02:4e:93:63:5c:78:4a:e6:e7:
                    e3:d6:31:26:ad:a0:df:b1:96:81:84:d2:f1:8d:91:
                    99:ab:08:7a:33:9b:1b:90:5a:17:d4:00:ed:16:62:
                    22:94:0e:6d:af:21:3c:d3:40:48:51:a7:22:e1:07:
                    47:ca:0a:51:98:dd:fd:48:cf:a0:df:02:94:65:6c:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E5:E5:17:D1:05:74:4A:E9:56:23:3F:90:71:1F:17:C1:F9:D3:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:70:7d:6d:49:0e:db:d5:cb:83:80:b3:7f:74:82:18:8d:
         11:84:74:be:1c:c0:60:02:37:3d:3d:97:2c:f6:00:6f:5c:a9:
         3c:1d:62:f9:7f:9d:26:a7:7c:73:6d:76:46:23:d0:17:12:e8:
         68:9f:4f:ac:b5:0f:cf:56:aa:31:b4:1e:e8:d6:c0:95:f5:0c:
         8f:ae:1a:fb:6e:a4:75:cf:d4:01:48:7a:1d:20:d5:60:70:a8:
         e8:4a:f7:94:5d:eb:8b:a3:0c:37:43:2d:84:c0:0a:a6:b4:66:
         2e:bc:37:9a:d9:11:3e:d2:ac:ff:a5:22:30:c6:7f:f0:6f:72:
         5a:ec:c7:30:5c:c7:fc:89:90:2f:af:e8:9e:00:52:c5:a7:68:
         c0:ec:7c:48:fc:8d:d7:12:14:0e:eb:dc:36:5e:4d:ce:03:dd:
         22:fb:22:2c:9f:c0:ab:aa:62:e7:f2:61:bb:5a:04:3e:85:a3:
         4f:f8:c6:8d:58:a6:35:93:8b:79:6c:d9:59:2b:19:db:1d:12:
         e8:43:2b:9a:97:f1:9d:56:67:12:47:be:82:2a:51:02:d6:11:
         1c:48:90:a7:00:a8:9e:a9:e3:d0:82:f6:b3:fc:93:ed:76:ea:
         97:d4:1d:5d:63:47:d8:f2:07:d1:87:8c:63:0b:b6:46:fa:86:
         13:0e:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----