Manifest

$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
File:                     0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json)
Hash identifier:          xiH78Vne1i0doJDsonFLBffr9/mTwQ/Xdo2FsZH55Ok=
Subject key identifier:   B6:7C:D5:90:9A:DC:98:5C:4F:5C:52:68:4A:F9:78:9E:5A:15:BA:14
Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Certificate issuer:       /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
Certificate serial:       1C1AEC95F853DB7F47126CBA604A90BA3EC2E303
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
Subject info access:      rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
Manifest number:          61
Signing time:             Thu 21 Aug 2025 22:04:26 +0000
Manifest this update:     Thu 21 Aug 2025 21:59:26 +0000
Manifest next update:     Fri 22 Aug 2025 23:04:26 +0000
Files and hashes:         1: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=)
                          2: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: S4S3CQALXAjJ4zcXQ6mlqJ01cuRXfg5RS6MgtGOQf8o=)
                          3: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=)
                          4: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=)
                          5: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl
                          rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 23:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1a:ec:95:f8:53:db:7f:47:12:6c:ba:60:4a:90:ba:3e:c2:e3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Validity
            Not Before: Aug 21 21:59:26 2025 GMT
            Not After : Aug 22 23:04:26 2025 GMT
        Subject: CN=B67CD5909ADC985C4F5C52684AF9789E5A15BA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1d:a3:be:21:0b:95:f4:fc:7b:de:73:97:f2:
                    27:f9:09:8c:c8:29:85:79:df:fd:5f:43:fc:a3:ec:
                    55:6e:32:52:a7:97:ea:96:07:75:fc:7f:b1:7f:92:
                    30:c2:93:3a:bb:de:61:31:78:e9:9f:40:a0:71:7e:
                    4b:88:9f:28:0b:87:cf:ef:c8:8a:ef:d3:15:a9:17:
                    ca:69:c5:36:33:f1:b8:4c:5d:4f:ae:5a:c4:d9:d0:
                    d6:2e:9a:31:5d:26:96:cc:58:ed:c4:83:78:f3:0e:
                    08:7e:c6:71:53:b9:a3:82:e9:56:62:16:d5:87:16:
                    a1:5d:e5:df:c3:be:f8:91:3f:ec:6d:22:e5:16:3a:
                    0a:13:32:4d:3e:8a:2e:74:04:cb:7e:df:a3:bc:79:
                    ea:88:50:7b:a4:13:2c:34:b2:25:6a:33:33:8b:02:
                    55:ac:01:d2:b6:1a:49:3d:91:ab:42:ad:ce:09:b7:
                    b6:d3:5d:d0:60:11:36:74:14:5d:6a:e0:8a:c9:95:
                    77:ea:2f:8e:ad:57:e9:78:92:27:57:bb:b3:48:41:
                    89:4c:61:18:30:c2:0f:68:02:30:83:21:c9:1d:29:
                    a1:2b:7d:0e:2e:74:9a:3a:eb:cf:6a:be:d0:48:10:
                    9c:6c:9e:26:a4:9b:be:38:08:47:2f:ea:c2:11:ed:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:D5:90:9A:DC:98:5C:4F:5C:52:68:4A:F9:78:9E:5A:15:BA:14
            X509v3 Authority Key Identifier:
                keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:d6:00:f9:26:6a:18:a6:69:2c:6d:47:b6:93:41:81:5a:27:
         c0:6b:5b:3e:bf:4f:e1:1d:02:ac:6a:56:5f:a6:30:52:cf:a9:
         89:62:74:4d:f2:2e:fd:7b:c8:32:9b:a6:c4:3f:0a:ea:9a:ad:
         c9:a8:23:cc:e4:36:d0:f1:20:39:b1:8a:2e:73:24:51:2a:d2:
         84:aa:0b:ac:fd:39:29:17:6f:91:e9:ba:33:cd:c6:1e:50:f0:
         b2:a8:b9:31:51:ee:99:2d:48:9f:c9:de:a8:70:3b:dd:52:83:
         89:4e:b7:ba:7f:02:5c:c5:23:c1:62:41:b8:94:8e:b6:a7:dd:
         8d:1a:d3:1e:da:df:83:93:a4:a6:ac:84:4e:52:70:da:e5:47:
         83:bc:ad:68:bb:4d:74:9c:cc:11:9b:f4:1c:34:7e:03:3e:a7:
         36:f8:10:d8:bc:cc:7b:5a:fa:4a:1a:ff:70:66:d0:49:03:3a:
         83:42:75:33:f4:50:46:0a:94:a9:95:29:00:45:9a:7c:f7:aa:
         6b:38:9f:12:bc:4f:d5:40:4c:ae:40:48:4c:a0:f1:fa:23:1f:
         0a:6b:ff:89:87:a4:ac:95:b8:41:8d:bf:71:65:4d:fe:8f:4c:
         53:23:c4:46:9f:a5:2f:fd:38:5c:e8:d5:e3:7e:29:81:72:11:
         4c:a8:9f:8e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUHBrslfhT239HEmy6YEqQuj7C4wMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk
NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUwODIxMjE1OTI2WhcNMjUwODIyMjMwNDI2
WjAzMTEwLwYDVQQDEyhCNjdDRDU5MDlBREM5ODVDNEY1QzUyNjg0QUY5Nzg5RTVB
MTVCQTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B2jviELlfT8
e95zl/In+QmMyCmFed/9X0P8o+xVbjJSp5fqlgd1/H+xf5IwwpM6u95hMXjpn0Cg
cX5LiJ8oC4fP78iK79MVqRfKacU2M/G4TF1PrlrE2dDWLpoxXSaWzFjtxIN48w4I
fsZxU7mjgulWYhbVhxahXeXfw774kT/sbSLlFjoKEzJNPooudATLft+jvHnqiFB7
pBMsNLIlajMziwJVrAHSthpJPZGrQq3OCbe2013QYBE2dBRdauCKyZV36i+OrVfp
eJInV7uzSEGJTGEYMMIPaAIwgyHJHSmhK30OLnSaOuvPar7QSBCcbJ4mpJu+OAhH
L+rCEe2t/wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFLZ81ZCa3JhcT1xSaEr5eJ5a
FboUMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE
AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu
b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy
REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF
BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp
LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy
OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx
LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh
NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB
BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt
UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQDN1gD5JmoYpmksbUe2k0GBWifAa1s+v0/hHQKsalZfpjBSz6mJ
YnRN8i79e8gym6bEPwrqmq3JqCPM5DbQ8SA5sYoucyRRKtKEqgus/TkpF2+R6boz
zcYeUPCyqLkxUe6ZLUifyd6ocDvdUoOJTre6fwJcxSPBYkG4lI62p92NGtMe2t+D
k6SmrIROUnDa5UeDvK1ou010nMwRm/QcNH4DPqc2+BDYvMx7WvpKGv9wZtBJAzqD
QnUz9FBGCpSplSkARZp896prOJ8SvE/VQEyuQEhMoPH6Ix8Ka/+Jh6SslbhBjb9x
ZU3+j0xTI8RGn6Uv/Thc6NXjfimBchFMqJ+O
-----END CERTIFICATE-----
Generated at Fri Aug 22 10:34:17 2025 by rpki-client