Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          M34RqaPlkYpcVEptszA9xQ14sryHqIjlnKzWF9M2WRk=
Subject key identifier:   CC:A1:A2:4E:9D:12:C7:23:F8:CE:F7:EA:2B:4A:94:49:2E:ED:51:F8
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       5700C03C0779D1A3890C6D0BED8979722CEF10CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          0965
Signing time:             Fri 04 Sep 2026 12:14:58 +0000
Manifest this update:     Fri 04 Sep 2026 12:09:58 +0000
Manifest next update:     Sat 05 Sep 2026 13:17:58 +0000
Files and hashes:         1: 323430303a646463303a3a2f33322d3438203d3e20393439.roa (hash: 4OtJQcFR6NrA1itHOZWJi2PIlbIiljflEMW5I2p5dLw=)
                          2: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
                          3: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
                          4: 3130332e31392e302e302f32322d3234203d3e2033323538.roa (hash: 7phVEmX0NGZNTERU01hd3o38S5hH/ZGyooQwdvUsQ1Y=)
                          5: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: 4qQnAPXKif2G/I0JA283MM4L9Q8rof5sciOf//i7b1s=)
                          6: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: Cq8ngB5duqsfS9AX8X6w2CDvQnVmYwX2AAqXbyczTxg=)
                          7: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: Od69baMDBTs29fP66Wn9kV1Tx+1JmwSrwUn4HcRUyvo=)
                          8: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: 5+W2+C0XBaCoMdQ1cbjP/+L4LLlb/ynRpMohTzrw8i8=)
                          9: 323430303a646463303a3a2f33322d3438203d3e2033323538.roa (hash: 4E3ThF6GTDq7/R91I4OEDX6P+idmNZ1KCeaEcnKCIpQ=)
                          10: 323430303a646463303a3a2f33322d3438203d3e2039333132.roa (hash: Gush9eZ5nXorTMTp44vClvkla5aeqj+UTuTCzb4xYBE=)
                          11: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
                          12: 323430303a646463303a3a2f33322d3438203d3e2033323034.roa (hash: M9xY05OIup8OYfBbbUfbrPA0odquxrpBvAkKyxFcCbM=)
                          13: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
                          14: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: NNgs7Qj/K1RwEFdi1CD3X6dwzWWCWJxpEUKTHMVH0RY=)
                          15: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
                          16: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: HWxtjWXQEyaifgnrGAK0g8Hjo7f2prGIP4a2wkIeP6Y=)
                          17: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: NtTgWNNqo9xb1WxCUUjnYotypA5kDlI/tbH3rkCuP94=)
                          18: 3130332e31392e302e302f32322d3234203d3e2038383838.roa (hash: OdkPxJ/egLNYvt3ZKZFs00x32CRh57zZD7kdTb64n48=)
                          19: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: el0BqSReTT43ikfy+5SDfXR0J8kbkltj+JAUgyeb7Yc=)
                          20: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: 6P1yhAIkuvKeVZw9mLlmlyrJjE7qXAqdF8WvsA0QH44=)
                          21: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: MvlLrq6gLMJe2G3r0uV9gBw2cGFbvjLpy5rdncNhO5I=)
                          22: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: TWBVV2sKr5vAgVL7H9CHKRLzXENcDmDChBjFID4ClWA=)
                          23: 3230332e39362e3233362e302f32322d3234203d3e2033323538.roa (hash: JMaRsQ48zGb4xncBKzQEEQ2heSEKed6SCwNzvViFnYI=)
                          24: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: fDeivdagLvt1dPzcb/kNjCXi5XZociKTgTKCkMYQPKg=)
                          25: 323430303a646463303a3a2f33322d3438203d3e2036323333.roa (hash: rcwvBG6d4VkXYeNz3ZFKFoYlMqXBATYi6Rux3uhsxLI=)
                          26: 3230332e39362e3233362e302f32322d3234203d3e2038383838.roa (hash: llvx1nJPqemZ0rvO4OJjQbyJXb71XdenxrhQ2TIzXXs=)
                          27: 323430303a646463303a3a2f33322d3438203d3e2033323134.roa (hash: iF81fh0nkcHacuOngDqpoGMd+NnmehDpnN8nIKYnQiA=)
                          28: 323430303a646463303a3a2f33322d3438203d3e2038383838.roa (hash: lb3WldXwA8KIOpbofBzHuERWcTb6J80msb0s9S8gwW4=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 13:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:00:c0:3c:07:79:d1:a3:89:0c:6d:0b:ed:89:79:72:2c:ef:10:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Sep  4 12:09:58 2026 GMT
            Not After : Sep  5 13:17:58 2026 GMT
        Subject: CN=CCA1A24E9D12C723F8CEF7EA2B4A94492EED51F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:16:59:5c:93:d5:34:09:5b:b6:67:4a:7e:
                    ae:7a:c4:9f:2f:1d:f0:f0:e9:74:a3:21:14:23:a4:
                    a3:b4:fd:7c:3b:40:a5:d5:65:46:e2:4f:50:03:3e:
                    65:77:96:70:24:cc:33:0b:74:20:b3:ad:7b:0d:a9:
                    e7:d4:68:ed:41:e0:35:56:e0:4f:9f:71:28:02:e7:
                    61:0b:5b:12:9b:6d:f8:99:5a:d5:34:8f:be:31:f3:
                    a1:3d:7e:dc:ae:b8:17:49:43:5b:bf:c7:e6:9d:2d:
                    14:e0:f6:c2:c9:43:a5:45:53:76:58:3e:92:ee:ec:
                    22:cd:a0:14:2e:10:45:fb:7b:6a:06:9b:88:24:b3:
                    ba:75:80:e4:c5:5c:f1:5d:b7:dd:40:7a:ae:df:d4:
                    5c:e1:bd:ff:4a:1c:05:b0:45:69:ae:6f:fd:2e:11:
                    5e:fb:dd:d4:8a:4b:0e:f8:94:e7:fb:a1:aa:7a:b5:
                    98:65:88:02:93:88:0a:d7:1c:67:21:05:3a:6f:4e:
                    7f:8e:17:ae:a1:e1:dd:e7:1c:59:04:76:cc:fd:ad:
                    96:ec:6c:b1:f4:10:4e:36:ae:11:a4:29:ec:d2:bc:
                    f6:40:b6:6a:eb:64:9e:d5:5a:b4:35:b4:9a:50:b8:
                    94:5f:e7:18:38:b5:b0:4a:6a:23:a8:25:5b:7c:1c:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:A2:4E:9D:12:C7:23:F8:CE:F7:EA:2B:4A:94:49:2E:ED:51:F8
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8e:fb:e8:7b:85:ed:8c:e1:ff:98:d4:3b:b4:d8:df:19:c7:
         83:d4:0d:0d:d5:c2:b1:64:be:bc:a5:92:d0:e7:60:b8:83:d5:
         31:e3:e9:99:e6:be:ea:dc:46:29:70:f1:a9:98:34:89:bb:76:
         78:1d:65:2a:f8:0b:61:40:48:74:b7:e2:e9:91:81:88:e7:69:
         50:da:b7:b8:82:03:3d:c9:11:d4:5b:d6:9c:ee:45:33:8f:75:
         1c:ac:93:07:d8:91:2a:ae:26:dc:d4:6f:80:b9:3e:8b:45:f4:
         aa:5e:63:9f:56:13:1a:26:2f:37:73:3b:8d:2b:95:54:77:21:
         7e:52:fa:05:cc:e6:59:27:7f:bc:4f:79:77:2e:3a:08:35:64:
         ab:43:9e:c9:9c:6c:86:bd:5c:a5:da:f6:c1:bc:ea:e6:48:77:
         9c:01:a9:ba:8d:15:10:7f:7d:de:56:be:c1:f8:da:15:82:42:
         53:0d:a8:59:6d:32:8c:b8:99:87:4a:89:ce:82:1f:c8:b7:ae:
         58:d7:fb:b0:b2:8a:07:ff:a0:ba:40:73:f5:53:15:4f:d4:f9:
         21:06:e4:b8:b3:20:47:eb:9d:63:66:a6:36:ba:fa:01:94:a9:
         16:70:e2:9f:8e:58:1d:d1:c1:b6:e5:ad:b8:ff:95:9a:18:b5:
         35:45:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:15 2026 by rpki-client