Manifest

$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
File:                     0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json)
Hash identifier:          LLzntxGXo/qQwyFmyZVlMnADk0TQd9sH3m4s+NJMaUw=
Subject key identifier:   D4:7D:5E:15:90:B9:93:38:C9:F4:51:F9:72:46:07:04:D2:43:1A:50
Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Certificate issuer:       /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
Certificate serial:       3D4D95CA5BA804E372793BB26956A01ACF6E2FF9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
Subject info access:      rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
Manifest number:          AC
Signing time:             Fri 17 Oct 2025 13:39:28 +0000
Manifest this update:     Fri 17 Oct 2025 13:34:28 +0000
Manifest next update:     Sat 18 Oct 2025 16:03:28 +0000
Files and hashes:         1: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: QAX2EhBBGkV0joT78s7gIK7nBmzTKQj0PBp2O+fqeMc=)
                          2: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=)
                          3: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=)
                          4: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=)
                          5: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=)
Validation:               OK
Signature path:           rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl
                          rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4d:95:ca:5b:a8:04:e3:72:79:3b:b2:69:56:a0:1a:cf:6e:2f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Validity
            Not Before: Oct 17 13:34:28 2025 GMT
            Not After : Oct 18 16:03:28 2025 GMT
        Subject: CN=D47D5E1590B99338C9F451F972460704D2431A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:01:3c:0a:a6:42:0d:53:12:55:99:bf:69:b6:
                    cb:9e:db:b8:f7:dd:bf:fe:83:3b:e5:24:9c:63:52:
                    53:52:6b:02:cc:69:86:d2:a3:ea:16:99:13:e3:d2:
                    03:00:d5:28:02:34:31:c4:ad:a8:e7:19:7b:83:43:
                    eb:4b:b3:65:27:df:f3:96:f8:4b:d5:60:db:eb:c8:
                    dd:c4:f8:5a:35:4a:94:8f:04:ff:74:72:75:21:6f:
                    4c:a7:bc:e2:e8:ae:69:26:d1:98:99:44:c7:4a:83:
                    aa:bf:14:44:fb:f5:63:c8:2b:5d:83:bb:76:44:dc:
                    50:85:8f:b8:38:b2:fb:a3:35:2b:d1:cd:d9:e7:47:
                    ac:d4:3f:7e:1d:f0:76:c1:9e:2e:77:48:db:4f:67:
                    76:c0:e4:10:ee:f6:6f:3e:6b:e8:40:aa:a3:a6:52:
                    f9:00:1d:97:70:8b:72:e6:9b:f2:bb:fe:03:5a:96:
                    1c:8a:4a:45:b1:9b:39:7c:1d:fe:0c:2c:6a:1f:e3:
                    5e:6e:b4:0a:9b:dc:76:4b:8d:24:d6:3e:a7:1d:88:
                    02:af:6f:7f:1f:bb:56:0b:0b:02:19:4a:83:4f:55:
                    da:92:8c:45:70:87:57:7c:0f:e2:9c:9a:2e:cf:37:
                    11:ca:3e:ae:95:ca:a6:92:89:5f:29:b1:44:d4:00:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7D:5E:15:90:B9:93:38:C9:F4:51:F9:72:46:07:04:D2:43:1A:50
            X509v3 Authority Key Identifier:
                keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:d6:ef:f8:48:74:33:01:c6:81:bd:f7:b1:2b:a3:ed:f0:9c:
         02:1e:a6:c1:c1:03:e8:26:e7:57:59:78:dc:d8:5e:91:42:6a:
         e3:ea:ed:d2:13:ab:cd:f6:3c:02:3e:f6:a5:3e:f0:08:8d:3c:
         cb:b0:cf:50:83:e6:a5:2a:78:9c:c3:13:0b:d7:80:43:67:b5:
         82:2c:13:7c:90:f4:cb:10:b3:a4:69:a6:78:82:4d:f0:aa:40:
         da:38:bf:b5:30:91:b7:1b:35:c3:3e:43:63:eb:aa:93:8f:87:
         aa:5c:04:61:50:90:62:66:67:c6:43:51:ea:4d:18:2e:e1:72:
         a3:99:e1:cb:6f:2f:87:8b:5c:cb:49:13:aa:92:c2:51:71:1f:
         4e:63:f9:35:a0:e1:34:1c:f1:b0:7f:b6:d0:e8:c3:19:83:10:
         4f:e2:95:55:fc:f2:94:14:7b:13:44:c8:fe:d4:ad:c1:93:ee:
         2a:a7:94:97:d7:fc:74:a6:15:ed:a9:5c:7e:bc:0c:83:88:23:
         a5:6c:ce:49:93:2a:13:b8:80:7b:0c:99:c3:0e:93:13:7e:69:
         60:f1:72:14:71:86:e2:3f:3c:82:5e:48:81:1d:4e:d2:c4:0f:
         53:95:b0:fa:ce:37:34:82:01:37:cd:5e:28:91:26:98:d0:60:
         04:e5:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 05:36:11 2025 by rpki-client