Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          mz+mm8/VsifXcFf6H1XxaeLDPG9ByqijaLOq5QtOiGs=
Subject key identifier:   29:D6:A6:43:DB:86:0A:65:8F:89:8B:5B:8C:9E:81:47:D5:12:A9:C6
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       13DC40DB1DCBAF585C5F0AE117EF23CE39574ED6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          0809
Signing time:             Sat 07 Jun 2025 08:53:32 +0000
Manifest this update:     Sat 07 Jun 2025 08:48:32 +0000
Manifest next update:     Sun 08 Jun 2025 08:57:32 +0000
Files and hashes:         1: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: kj/vBinWjbv8gQHq4ksTbkI9cf6aH87Qqr0wjqp4YNI=)
                          2: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: SD8eSbNpC+j2ob1Lnp5qYAO0x7aCbcCbnqNr2jZFro0=)
                          3: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 9pniSLjFRQJ+eqL4yaOaOLJswVTB5vXeN3pUAVMb9/Q=)
                          4: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: Uaez6iZritL8qNb8zashZZRXPOsrbSHSEJJRbEionds=)
                          5: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: MlAIwNvpU9pLqPm5GeqhwAydZcRl+n9fF0MyIYdunng=)
                          6: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: 57nYp6h/6E+SHSpEE52l7J3TWn+o2NI5EucTi82ES0I=)
                          7: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: 5bRZUpWmhIQUAhiN95HpRdn7fSN+Ft8oNPypKcjOs0Q=)
                          8: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: b29zK4U8Mcq+XxDLVK6zeqp99cVMrTm1iEY248+v7GQ=)
                          9: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: wBOqtkvpiOecj4e9IalrDt/1tgnOJOarTPyacCkkRqQ=)
                          10: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: 96o5E3l8VX2A9M6Mv6rN9cqwbqxcVJnLdu+NXHSrwR0=)
                          11: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: jHkaVLNAdW9lo8zt42tA5xcsgmOhm7V0BOVpGQA4ieo=)
                          12: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: 8WZiiARP34rsVV/fJ1SdzWD+kELbuKRgTXKuVh47r0Y=)
                          13: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: LWed9Rzs/E3FpbUuUHuGcznFEfyy/hMHuF8qh8yj/Jk=)
                          14: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: 2mm1m6Q1iZ3+kukwyxhPE/1ZIdE+eJ3Y1a97MNv75b4=)
                          15: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 0WYqo5igyKkDLhLeGNETpW87dUrlfRLrVabhhC6LhW4=)
                          16: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: GxhrfMYbrIorIZx7sAuAdXT2L2AlBHK6bwQj24J+2XM=)
                          17: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: 8QFGxo0ziOX84hkhYcQL2uBAbpvLPoPY71QwOCLSfSQ=)
                          18: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: Zp2dLdflPopZRz2wCBvQ323kQWGGkQirp3/oJFp4gtE=)
                          19: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: rpG176mq+Hz0ATWW9+e61ZLrSrpzkMO/+wQlXX8v8ZU=)
                          20: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: +Pjx51eEXOpxm1J8vexGgphqxhR9IXG5FbXTZK5zJmQ=)
                          21: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: rrISbsCtEnimnofMMvgGj0FxtsaUbnOC5+KJRQbLfHk=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dc:40:db:1d:cb:af:58:5c:5f:0a:e1:17:ef:23:ce:39:57:4e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Jun  7 08:48:32 2025 GMT
            Not After : Jun  8 08:57:32 2025 GMT
        Subject: CN=29D6A643DB860A658F898B5B8C9E8147D512A9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:f1:c7:5a:74:68:b8:2d:25:cc:82:9d:ef:
                    31:ee:d3:47:0c:73:73:a1:1d:85:52:89:d7:73:4e:
                    7a:a5:f8:71:5c:6b:31:6a:89:34:25:3d:f4:14:ea:
                    bc:47:7b:3b:3c:26:50:63:0d:20:42:12:fa:f9:06:
                    2a:8c:fb:d6:cd:e6:65:00:14:73:95:e0:c0:84:63:
                    d2:57:3b:15:5f:66:4e:d3:9f:a7:66:a8:ca:a8:8f:
                    5e:86:f3:1d:1b:c7:b9:f1:b1:72:20:5b:7f:03:81:
                    70:b8:e4:5a:93:21:1e:e0:22:7b:18:88:47:5f:0f:
                    25:ae:f1:4d:40:92:d3:d6:e7:39:5d:86:9b:28:b6:
                    0d:60:90:a7:8f:52:2d:af:70:d7:61:66:00:ee:b0:
                    fc:37:9a:d8:12:fb:d0:a1:b3:67:83:bc:91:94:ff:
                    77:ab:de:f3:74:fb:c2:f7:35:88:7b:eb:54:fe:5e:
                    00:85:86:33:51:9f:cd:0b:c5:8d:bd:7c:ed:97:f4:
                    32:41:6a:3e:a8:23:a1:20:d3:86:9f:e7:4c:a8:0c:
                    0d:75:a1:47:b3:6d:65:40:ee:f9:6b:35:f4:71:53:
                    2f:a4:ff:4c:a5:ad:2a:c6:69:9d:d4:f0:09:a7:ca:
                    96:f5:e9:1b:74:48:08:6e:35:b3:3c:09:cb:00:31:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D6:A6:43:DB:86:0A:65:8F:89:8B:5B:8C:9E:81:47:D5:12:A9:C6
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:13:d1:f7:5e:d9:66:3e:f9:51:a4:b7:5f:c4:a4:a9:49:
         a6:65:16:53:0d:e6:d2:fb:0a:d3:89:88:eb:46:3d:56:7a:fe:
         9b:2a:70:76:db:86:ab:e9:63:10:51:6b:d8:e5:28:0b:4e:5f:
         a9:18:03:97:03:9b:0e:2c:90:6e:84:66:68:ee:e0:00:f4:fc:
         67:6f:b9:39:ff:93:5e:c1:c8:2d:a9:32:0a:4f:c0:3b:b7:a3:
         3f:2b:e4:fe:fe:f0:f5:5a:4f:5a:94:46:a7:fc:1d:a2:b3:02:
         ee:5b:ac:39:29:b7:69:a0:43:88:21:d1:10:b2:5a:36:ee:cf:
         bd:1a:62:2e:c2:2f:9e:3d:8c:13:92:f7:13:9c:0b:8b:0a:8f:
         d8:e5:31:b1:52:6f:f3:25:5d:b8:c7:a2:0a:3f:73:ea:9d:85:
         75:1d:4b:dc:c2:eb:dc:82:39:a6:70:ee:95:ab:ce:32:d6:5a:
         15:a1:25:47:80:36:63:91:a9:0b:82:2d:a4:54:3c:c9:88:77:
         17:8e:9a:3b:20:44:f3:b7:be:12:52:0f:0f:e2:cd:8e:86:d8:
         3d:58:3e:39:9b:3c:67:e0:63:3a:2e:8f:bc:b3:e4:38:d7:ac:
         9a:f4:aa:78:e9:4e:da:46:b0:58:ca:25:7b:39:fe:9f:89:6b:
         41:2a:eb:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:20 2025 by rpki-client