Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          bIdYzlcHN+efOD63EHgdyTbtyMmaxygXhKkYEd5BoJc=
Subject key identifier:   34:E1:6F:3A:99:FD:57:2A:F8:7A:FA:15:5B:2A:61:02:E4:B1:2F:AA
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       1105F8894A76F9C183E4D37598F83739BA378B88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          08FF
Signing time:             Fri 04 Sep 2026 16:59:58 +0000
Manifest this update:     Fri 04 Sep 2026 16:54:58 +0000
Manifest next update:     Sat 05 Sep 2026 20:23:58 +0000
Files and hashes:         1: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
                          2: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
                          3: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
                          4: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
                          5: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
                          6: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
                          7: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
                          8: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
                          9: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
                          10: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
                          11: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
                          12: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
                          13: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
                          14: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
                          15: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
                          16: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: I4OHjpw8BzSb1rme2JgfvnXjgnMzGDMCxZ/49vGbHIs=)
                          17: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
                          18: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
                          19: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
                          20: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
                          21: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 20:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:05:f8:89:4a:76:f9:c1:83:e4:d3:75:98:f8:37:39:ba:37:8b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Sep  4 16:54:58 2026 GMT
            Not After : Sep  5 20:23:58 2026 GMT
        Subject: CN=34E16F3A99FD572AF87AFA155B2A6102E4B12FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:fc:29:de:f6:70:ed:61:5e:8f:68:28:2a:
                    78:15:19:36:91:1a:e1:81:1a:2b:e9:40:85:ce:5e:
                    60:c0:5f:11:ad:9e:9b:d9:41:a7:03:f5:12:44:76:
                    b2:29:0c:23:73:2d:70:72:22:18:76:95:a1:3c:42:
                    f7:2b:82:0f:5e:5c:6c:4f:57:7b:e2:04:ef:1f:3b:
                    8f:ed:97:1b:b1:78:8c:98:b0:de:a4:91:31:55:aa:
                    03:8a:d1:79:a5:e4:67:1e:46:e5:97:9c:4f:87:18:
                    8a:86:6b:d3:91:2a:74:c3:b7:d9:4f:11:36:a7:3a:
                    bb:75:6e:91:9d:d5:c2:4a:7c:73:05:6a:c9:35:2c:
                    3d:ca:06:df:84:e2:9a:35:26:8b:47:ff:27:b2:d0:
                    d6:54:4f:a8:1f:61:4b:e2:7e:59:1a:0a:f0:c0:a7:
                    80:23:20:fb:39:98:19:c8:e6:30:14:f7:21:e0:b9:
                    42:64:b4:f4:c2:a4:8d:c5:2a:da:65:31:b6:e5:1f:
                    e5:79:b3:60:d4:14:51:f6:a1:61:ed:85:3d:3f:a6:
                    e0:dd:52:55:8c:b1:22:02:c0:91:d9:c1:ba:62:76:
                    2d:bf:d3:21:1d:8c:05:78:37:0c:71:b1:31:21:00:
                    b2:26:d0:fc:8e:3c:a2:b3:62:50:e6:e2:be:2a:61:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E1:6F:3A:99:FD:57:2A:F8:7A:FA:15:5B:2A:61:02:E4:B1:2F:AA
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fc:03:b7:a4:9f:d8:66:91:fa:e7:26:a3:81:ac:4c:c4:f4:
         66:13:e7:88:c3:42:f7:a0:df:cd:e3:4f:67:b0:c5:60:2f:0c:
         7b:a0:50:72:fd:dd:65:8c:05:05:a5:e0:62:68:21:d5:5e:41:
         7f:fa:fd:42:82:4c:41:5b:eb:16:bd:88:49:47:4f:e5:da:48:
         03:bf:21:2d:51:4e:28:d3:fb:7c:95:1d:47:7a:03:7c:b0:23:
         e2:ed:8e:e7:9d:48:73:a3:d9:9e:c2:a8:e2:08:fa:62:b8:85:
         a5:58:d0:d2:74:e4:9e:15:91:aa:d9:48:10:f4:72:27:b2:9e:
         bf:43:9c:e1:27:e8:e3:09:a5:3b:e6:ce:63:79:54:a0:87:08:
         fa:20:29:8d:ff:45:d0:a9:ab:6f:e3:a6:ad:5c:4f:dd:8f:be:
         c9:69:3c:a3:95:e8:3f:16:41:27:c7:f7:36:9c:a5:ea:5d:cf:
         cb:8f:2b:93:ae:3c:a3:d5:4f:33:08:4a:7c:7a:90:59:71:e3:
         8b:70:d1:90:c3:af:93:ce:e3:de:e6:30:9c:ce:30:c8:55:99:
         38:20:7b:ac:61:4c:75:ce:ac:50:a3:0a:f6:11:e2:34:47:b0:
         b2:54:e5:eb:c0:53:9b:b1:01:81:78:6a:88:13:a0:1e:15:d3:
         1f:fc:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:11:37 2026 by rpki-client