Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          66AO+tyQswVPOmnBI1qhxhXsUClADK+4sreej24fPkg=
Subject key identifier:   20:85:65:0F:51:DB:AE:E9:0B:74:47:9E:D8:AB:04:B2:28:7D:94:6C
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       71ED6EECC3B6D6A58FF134A873AFE2C061AE731C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          088A
Signing time:             Tue 09 Sep 2025 11:57:21 +0000
Manifest this update:     Tue 09 Sep 2025 11:52:21 +0000
Manifest next update:     Wed 10 Sep 2025 14:47:21 +0000
Files and hashes:         1: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 7kLebjxjj8bDZhH97mL0NhhYPLU3LGJ6JEojV7/KLOY=)
                          2: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: XgEQDqckGRfEL8QiTRDOh1+DHEdKK9Jr8bCeRb2IXI8=)
                          3: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: ZWLxz/UMof5CXOQxQiQYlJX05GocBRX3n7pyJMgwDaw=)
                          4: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: r+fYWkv2ehFBdX04DkKqK0fkmRoWfMF9z5FGYgZxQ4g=)
                          5: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: aT+uZrC8MjUK0f1pXdDj3UAr44FEGYm2Xv5JMP1c4lw=)
                          6: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: PsaxYaFFNgIVFn8NYLn5iFDo26nPs15VoRUG+gbERz0=)
                          7: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: J2KqAEgEY3NPoq76uN/b3hGzatbGYhM3NPozvwNZlH4=)
                          8: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: CM/1tvvJ+iG3JOaA56LGtrraZV8hJPHF16x5WexD3EA=)
                          9: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 8n+PAt2nTSgexhYzl45tiKTEPLRCJIy6tnkFSvykAhc=)
                          10: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: Y3K45zh5z8NeSvOqnRV7qo6P/UbiRD3ZVtK0iG3l2t4=)
                          11: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: KfWnTMEVQvJybqIim3RIlHFlNK2Vzr7q/aC6EJcgMWk=)
                          12: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: T8524IkTl53YxIGY4nfQDm1ogpfKBQpuEVKmOtHeDPs=)
                          13: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: BCi+oWVmoqOCXPGYoNN5Gsw3cvawNSr67DTbvpk/4oI=)
                          14: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: Ay+2RLs/lGDsNEwPaZB7ph1WGRZxvFl+JiT3aoRyP2Q=)
                          15: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: toARjDv799USUlmcjzCD9e8PN8NqvuIHXY8whE+ZEs8=)
                          16: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: D0Ow1HD5dL19BD0PK2OSn7PrujexMNUo6oIuSOROZDY=)
                          17: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: S0/99S4SQFCsn7C6fqH1eBp/mlFCWgTAUGYCWQSkqUg=)
                          18: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: P2oGoXE9s79xQs+izISwAhc+YwsVs9UuFxcGIqplUcs=)
                          19: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: +srvz8C27iXoh4/wHeKT6bnnQhe+kCVRRtOx0VrIsuA=)
                          20: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=)
                          21: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: VcHnZPXmg+gwqZFeMl1gjuitPawQ201SlIEuoE5gbAc=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 14:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ed:6e:ec:c3:b6:d6:a5:8f:f1:34:a8:73:af:e2:c0:61:ae:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Sep  9 11:52:21 2025 GMT
            Not After : Sep 10 14:47:21 2025 GMT
        Subject: CN=2085650F51DBAEE90B74479ED8AB04B2287D946C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:61:30:90:c4:d6:96:ad:d2:2f:f8:02:9b:
                    9f:9b:75:91:31:bc:81:b7:07:c2:e0:7d:95:6a:07:
                    37:f8:b2:d4:65:0c:e8:7c:b3:7c:a7:25:a0:51:ef:
                    b0:82:bd:95:d4:58:28:0b:fa:86:6d:91:40:44:69:
                    ef:d8:e4:67:80:ae:b5:5c:60:c4:5b:f2:d8:8b:bc:
                    a0:84:24:2b:2b:6c:f5:d4:37:08:3f:02:7b:cb:5a:
                    1e:00:49:a0:6f:04:6e:6c:69:7e:e6:55:b4:a3:24:
                    50:e8:7b:9e:09:f1:83:70:fa:0e:8e:0d:59:c4:4d:
                    1c:51:3e:eb:9c:0a:c4:38:e8:01:da:d8:95:5d:c0:
                    ea:62:ee:96:ed:6a:3e:64:51:c9:11:83:a1:30:17:
                    2e:b5:82:a5:64:75:ba:d5:8c:2a:65:32:15:06:e2:
                    36:43:0e:42:c0:77:03:32:42:d8:0c:d5:6f:a3:95:
                    64:12:b8:38:08:76:32:92:a8:24:89:0e:fb:55:87:
                    f1:aa:36:b4:3d:4f:10:3f:40:b8:80:d5:31:4f:13:
                    79:94:ea:d3:90:ce:ca:1f:3f:1f:14:7d:d4:72:30:
                    8f:5a:cd:75:a2:fb:25:4a:2f:fc:2a:0a:aa:a4:1a:
                    b6:c0:fc:33:94:ed:35:4a:a7:ab:10:c5:f3:9d:8f:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:65:0F:51:DB:AE:E9:0B:74:47:9E:D8:AB:04:B2:28:7D:94:6C
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:b4:7c:58:5c:7a:4f:f2:a9:e3:51:dc:96:64:8b:4e:47:
         29:0e:16:3d:c7:d6:cd:03:24:fe:2f:56:15:d1:19:f1:21:08:
         40:ba:18:33:92:dd:a8:88:12:10:82:f0:94:99:e1:38:1f:e7:
         90:db:5a:e9:4f:bf:18:1b:8e:34:2a:50:9c:97:2e:09:c7:41:
         b9:54:a9:e5:00:fa:34:ca:bc:55:c9:36:58:77:21:5f:18:91:
         04:24:6a:71:99:b6:0f:fc:53:13:e7:6b:5c:d2:89:d2:97:79:
         c7:15:77:4a:d5:87:c0:a9:3c:4e:c1:0b:94:1c:9d:dd:90:48:
         ec:67:6a:e8:80:75:e1:2a:39:d3:e9:9b:f1:8b:15:4e:96:37:
         c9:57:0f:e4:bf:68:4d:d9:2a:d4:86:1f:f6:de:3e:43:93:e0:
         fb:ac:2f:b2:cb:4b:3b:11:39:9b:46:37:1d:41:fb:e3:9d:6d:
         8a:d2:89:15:c7:41:a8:04:50:8c:f4:2e:32:ce:61:2f:0b:95:
         a9:5b:dd:76:2a:ff:d9:d3:5f:68:ea:68:5d:c0:69:f8:3a:a3:
         c0:e7:55:d3:9e:3d:0f:d7:2c:6e:71:44:b3:1f:88:08:13:85:
         45:cb:0f:47:85:5c:0f:32:cf:38:ec:80:15:c5:06:a3:6a:6e:
         d0:d0:92:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 9 20:37:57 2025 by rpki-client