Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          7/SBro+NC2PQTuWjIfNtbVVvS+ki/huegifEixImW2w=
Subject key identifier:   22:2C:72:8F:E9:80:9B:6D:65:2C:03:92:5F:E6:55:9C:FB:C4:F8:D1
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       61F97F88FD2A520425511DD405CD4017CCB4E231
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          0A0B
Signing time:             Mon 25 May 2026 14:58:58 +0000
Manifest this update:     Mon 25 May 2026 14:53:58 +0000
Manifest next update:     Tue 26 May 2026 15:43:58 +0000
Files and hashes:         1: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: D0Ow1HD5dL19BD0PK2OSn7PrujexMNUo6oIuSOROZDY=)
                          2: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: P2oGoXE9s79xQs+izISwAhc+YwsVs9UuFxcGIqplUcs=)
                          3: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: Y3K45zh5z8NeSvOqnRV7qo6P/UbiRD3ZVtK0iG3l2t4=)
                          4: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: Ay+2RLs/lGDsNEwPaZB7ph1WGRZxvFl+JiT3aoRyP2Q=)
                          5: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: PsaxYaFFNgIVFn8NYLn5iFDo26nPs15VoRUG+gbERz0=)
                          6: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: +srvz8C27iXoh4/wHeKT6bnnQhe+kCVRRtOx0VrIsuA=)
                          7: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: T8524IkTl53YxIGY4nfQDm1ogpfKBQpuEVKmOtHeDPs=)
                          8: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 7kLebjxjj8bDZhH97mL0NhhYPLU3LGJ6JEojV7/KLOY=)
                          9: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=)
                          10: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: +8jlWb+dVNOAHNz/JNmoiOvrJastoW3AM2auJnPtSPE=)
                          11: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: aT+uZrC8MjUK0f1pXdDj3UAr44FEGYm2Xv5JMP1c4lw=)
                          12: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: XgEQDqckGRfEL8QiTRDOh1+DHEdKK9Jr8bCeRb2IXI8=)
                          13: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: S0/99S4SQFCsn7C6fqH1eBp/mlFCWgTAUGYCWQSkqUg=)
                          14: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: toARjDv799USUlmcjzCD9e8PN8NqvuIHXY8whE+ZEs8=)
                          15: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 8n+PAt2nTSgexhYzl45tiKTEPLRCJIy6tnkFSvykAhc=)
                          16: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: VcHnZPXmg+gwqZFeMl1gjuitPawQ201SlIEuoE5gbAc=)
                          17: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: KfWnTMEVQvJybqIim3RIlHFlNK2Vzr7q/aC6EJcgMWk=)
                          18: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: BCi+oWVmoqOCXPGYoNN5Gsw3cvawNSr67DTbvpk/4oI=)
                          19: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: CM/1tvvJ+iG3JOaA56LGtrraZV8hJPHF16x5WexD3EA=)
                          20: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: J2KqAEgEY3NPoq76uN/b3hGzatbGYhM3NPozvwNZlH4=)
                          21: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: ZWLxz/UMof5CXOQxQiQYlJX05GocBRX3n7pyJMgwDaw=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 15:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:7f:88:fd:2a:52:04:25:51:1d:d4:05:cd:40:17:cc:b4:e2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: May 25 14:53:58 2026 GMT
            Not After : May 26 15:43:58 2026 GMT
        Subject: CN=222C728FE9809B6D652C03925FE6559CFBC4F8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b6:62:4b:fb:6e:3a:1d:35:57:ee:14:28:e3:
                    fd:bb:13:30:f8:f9:d6:0e:7a:2d:98:1d:f2:30:88:
                    88:ae:c3:22:82:f7:4d:3f:f1:7e:00:d3:09:c7:fa:
                    27:db:43:80:4e:db:7e:f5:65:d4:87:84:8d:84:7c:
                    22:6c:22:8c:fc:d4:2c:bf:1d:cc:1d:d2:f0:cd:58:
                    19:30:bc:ea:1d:8a:a2:8c:ab:77:a0:08:67:fd:0f:
                    d4:9e:3a:e5:11:d8:8c:a8:ed:a4:2f:fb:9e:bd:6d:
                    20:0f:20:10:79:4d:03:a2:e4:d1:35:7d:d5:aa:67:
                    3e:2c:df:85:7d:4b:57:b1:b8:85:ed:e0:fd:8f:a4:
                    21:6a:74:07:6b:6e:7f:14:e8:80:9a:1a:fe:80:95:
                    35:c1:cd:5d:45:1c:aa:fa:1b:2a:70:fe:ac:66:a4:
                    92:c4:6f:31:63:16:4f:19:83:0d:ac:b0:4b:3a:2e:
                    52:c1:9b:61:15:31:22:02:af:47:5b:f4:88:ef:25:
                    7d:a9:19:1b:50:5e:50:a5:c8:a3:90:6b:38:54:97:
                    09:f1:09:22:9f:96:96:0b:55:57:32:61:e7:ab:79:
                    5b:a8:e1:8d:50:b0:f3:4c:7f:e4:6d:68:54:3b:77:
                    56:c3:1d:3b:d4:b2:35:4e:8c:10:62:28:64:83:bf:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:72:8F:E9:80:9B:6D:65:2C:03:92:5F:E6:55:9C:FB:C4:F8:D1
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:0b:4f:5c:fd:f8:d2:65:ef:7f:48:02:d1:e4:1b:76:4b:
         55:fb:a9:11:bd:69:5e:3a:07:d2:9f:0d:b7:0a:1d:c6:1f:ef:
         d3:cb:a3:ca:49:f7:74:97:87:55:a9:92:e2:c9:06:0d:c2:7c:
         10:63:75:5f:3c:b1:e3:83:99:e0:a4:b7:52:cc:8d:f9:49:1a:
         40:94:25:49:7f:96:6e:c0:dc:8d:e9:d9:37:e2:bb:97:6d:b2:
         2d:a1:da:47:30:ff:cc:85:b6:df:4f:05:7a:08:00:74:a0:4c:
         75:e5:e5:95:28:4f:1c:44:7f:c5:0b:2f:b9:cb:6f:ed:3e:08:
         ec:b2:ea:9d:20:c8:42:d6:f0:28:c8:dd:25:f0:15:34:de:79:
         be:d5:84:57:43:48:52:ea:bc:22:87:4b:23:7c:83:af:ad:06:
         df:39:28:6f:05:6b:0e:9c:00:10:13:2c:35:94:c9:92:15:ea:
         c1:10:c8:20:5f:03:d6:0d:a4:a0:4e:a0:3d:50:af:f9:68:dc:
         29:7e:d6:2c:7d:ab:b2:e1:07:41:ed:56:f3:58:3d:37:c3:02:
         2f:28:0d:83:ef:30:43:80:2b:47:62:f8:b1:a1:f5:4c:58:79:
         9c:f5:37:c4:6f:68:ed:4f:3e:b3:e7:2a:84:c2:af:20:ea:32:
         91:9a:c0:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 26 07:45:18 2026 by rpki-client