Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          jSa8eOCHMy9QMi4ZTFnJvBMdXp7OvW9w6ElnIcJnWyw=
Subject key identifier:   98:08:AC:30:66:B6:58:DF:BF:DC:6F:03:3C:FA:31:BC:B9:39:36:63
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       1D0FE41ED47962721668B32EB578175A7E21701E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          08CC
Signing time:             Tue 28 Oct 2025 06:10:28 +0000
Manifest this update:     Tue 28 Oct 2025 06:05:28 +0000
Manifest next update:     Wed 29 Oct 2025 08:49:28 +0000
Files and hashes:         1: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: aT+uZrC8MjUK0f1pXdDj3UAr44FEGYm2Xv5JMP1c4lw=)
                          2: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 7kLebjxjj8bDZhH97mL0NhhYPLU3LGJ6JEojV7/KLOY=)
                          3: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: VcHnZPXmg+gwqZFeMl1gjuitPawQ201SlIEuoE5gbAc=)
                          4: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: CM/1tvvJ+iG3JOaA56LGtrraZV8hJPHF16x5WexD3EA=)
                          5: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=)
                          6: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: D0Ow1HD5dL19BD0PK2OSn7PrujexMNUo6oIuSOROZDY=)
                          7: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: XgEQDqckGRfEL8QiTRDOh1+DHEdKK9Jr8bCeRb2IXI8=)
                          8: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: ZWLxz/UMof5CXOQxQiQYlJX05GocBRX3n7pyJMgwDaw=)
                          9: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: BCi+oWVmoqOCXPGYoNN5Gsw3cvawNSr67DTbvpk/4oI=)
                          10: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: S0/99S4SQFCsn7C6fqH1eBp/mlFCWgTAUGYCWQSkqUg=)
                          11: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: Y3K45zh5z8NeSvOqnRV7qo6P/UbiRD3ZVtK0iG3l2t4=)
                          12: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: PsaxYaFFNgIVFn8NYLn5iFDo26nPs15VoRUG+gbERz0=)
                          13: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: T8524IkTl53YxIGY4nfQDm1ogpfKBQpuEVKmOtHeDPs=)
                          14: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: +srvz8C27iXoh4/wHeKT6bnnQhe+kCVRRtOx0VrIsuA=)
                          15: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: Ay+2RLs/lGDsNEwPaZB7ph1WGRZxvFl+JiT3aoRyP2Q=)
                          16: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: ywnQwUejjazmcsyVs2hd/pl0jkDTfRB5XK+eCoGz1qg=)
                          17: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: P2oGoXE9s79xQs+izISwAhc+YwsVs9UuFxcGIqplUcs=)
                          18: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: J2KqAEgEY3NPoq76uN/b3hGzatbGYhM3NPozvwNZlH4=)
                          19: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 8n+PAt2nTSgexhYzl45tiKTEPLRCJIy6tnkFSvykAhc=)
                          20: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: KfWnTMEVQvJybqIim3RIlHFlNK2Vzr7q/aC6EJcgMWk=)
                          21: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: toARjDv799USUlmcjzCD9e8PN8NqvuIHXY8whE+ZEs8=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 08:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0f:e4:1e:d4:79:62:72:16:68:b3:2e:b5:78:17:5a:7e:21:70:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Oct 28 06:05:28 2025 GMT
            Not After : Oct 29 08:49:28 2025 GMT
        Subject: CN=9808AC3066B658DFBFDC6F033CFA31BCB9393663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a0:ab:7d:fb:11:b5:f7:b1:03:d0:95:35:ae:
                    36:86:4e:f0:cb:e7:09:14:32:3b:7d:60:46:87:28:
                    66:39:f0:39:1e:7b:67:46:db:1b:94:de:a4:01:3f:
                    ef:69:55:b5:b6:b1:e0:58:75:fc:c8:2e:91:c7:b5:
                    d3:f9:28:38:6b:cd:9c:35:bd:69:00:1e:f2:ca:13:
                    eb:23:b1:29:3a:a0:f2:b5:12:4d:9f:a0:80:a0:9d:
                    d9:d8:63:c7:3b:09:af:87:54:3a:03:a0:29:ea:30:
                    44:5a:8c:13:eb:3f:73:30:7e:6d:fe:ac:15:7c:c8:
                    48:b2:b3:68:23:07:8f:52:0f:3f:c5:73:d7:bd:68:
                    c1:d5:d7:1f:46:cc:b1:c5:59:70:d6:cf:19:56:18:
                    f1:5f:bd:97:71:e1:1c:57:06:f8:97:be:dd:bf:bf:
                    d7:52:ca:d9:aa:55:e9:0e:e4:2e:0b:76:43:9d:7b:
                    7d:28:cc:06:0d:f4:b7:fd:90:90:57:fb:60:1b:38:
                    1e:53:c7:78:7a:c4:07:62:54:91:cc:73:69:3f:c4:
                    7b:47:d8:37:53:ef:c6:3c:65:4c:e7:e5:27:0e:9f:
                    e5:a8:27:2b:2d:ca:a4:2a:7e:b3:f5:f7:b7:18:5a:
                    65:3e:b6:55:da:2c:62:cf:0a:ac:d0:16:b8:6b:a6:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:08:AC:30:66:B6:58:DF:BF:DC:6F:03:3C:FA:31:BC:B9:39:36:63
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:af:11:7e:df:c0:0b:b7:35:0d:11:8e:5a:75:b5:c6:e2:f6:
         a7:48:b5:ed:4e:22:e8:56:d4:6c:87:aa:24:fa:05:62:93:8e:
         12:64:30:c1:cc:13:d3:19:2b:a2:87:a9:aa:6d:2a:cd:43:25:
         bb:4a:7e:ae:35:eb:9b:0a:46:45:f5:3f:14:08:1c:bd:1f:70:
         d7:c0:d5:92:7c:a9:9d:1e:1a:ba:ae:69:56:ad:21:f6:4e:c8:
         a3:39:0f:1b:4f:39:c5:07:84:0c:93:f5:e7:32:5d:99:18:0f:
         dc:e5:b6:18:63:ad:de:92:42:ff:42:16:66:ce:34:f4:ba:47:
         da:21:20:da:23:1f:7a:ca:f8:32:98:41:5e:c3:fb:e5:28:32:
         51:58:20:55:48:c1:11:c8:5e:08:be:81:e2:fd:52:72:68:ef:
         aa:71:50:f1:90:a0:f9:ec:9a:1c:af:07:2b:1b:b8:76:de:9c:
         d9:8f:e2:48:52:a8:6e:98:79:a9:49:6a:b7:3b:4b:50:fc:76:
         11:8d:2a:34:cb:dd:69:98:97:15:d0:2b:4a:1f:c3:03:8a:b2:
         69:43:99:72:d3:6d:e7:8c:c7:e2:89:ac:a7:ee:9f:15:dd:a0:
         27:86:e3:e2:4a:15:12:f7:c7:c2:1f:11:d0:0e:86:9a:ca:95:
         00:d4:66:06
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUHQ/kHtR5YnIWaLMutXgXWn4hcB4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUxMDI4MDYwNTI4WhcNMjUxMDI5MDg0OTI4
WjAzMTEwLwYDVQQDEyg5ODA4QUMzMDY2QjY1OERGQkZEQzZGMDMzQ0ZBMzFCQ0I5
MzkzNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76CrffsRtfex
A9CVNa42hk7wy+cJFDI7fWBGhyhmOfA5HntnRtsblN6kAT/vaVW1trHgWHX8yC6R
x7XT+Sg4a82cNb1pAB7yyhPrI7EpOqDytRJNn6CAoJ3Z2GPHOwmvh1Q6A6Ap6jBE
WowT6z9zMH5t/qwVfMhIsrNoIwePUg8/xXPXvWjB1dcfRsyxxVlw1s8ZVhjxX72X
ceEcVwb4l77dv7/XUsrZqlXpDuQuC3ZDnXt9KMwGDfS3/ZCQV/tgGzgeU8d4esQH
YlSRzHNpP8R7R9g3U+/GPGVM5+UnDp/lqCcrLcqkKn6z9fe3GFplPrZV2ixizwqs
0Ba4a6YTaQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFJgIrDBmtljfv9xvAzz6Mby5
OTZjMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNG
REEyQkNGNzNDMTlBNjI0OEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK2vEX7fwAu3NQ0Rjlp1tcbi
9qdIte1OIuhW1GyHqiT6BWKTjhJkMMHME9MZK6KHqaptKs1DJbtKfq4165sKRkX1
PxQIHL0fcNfA1ZJ8qZ0eGrquaVatIfZOyKM5DxtPOcUHhAyT9ecyXZkYD9zlthhj
rd6SQv9CFmbONPS6R9ohINojH3rK+DKYQV7D++UoMlFYIFVIwRHIXgi+geL9UnJo
76pxUPGQoPnsmhyvBysbuHbenNmP4khSqG6YealJarc7S1D8dhGNKjTL3WmYlxXQ
K0ofwwOKsmlDmXLTbeeMx+KJrKfunxXdoCeG4+JKFRL3x8IfEdAOhprKlQDUZgY=
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:59 2025 by rpki-client