Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File:                     5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier:          ZQsMsMmgOuG3etPPqNVRowI2GOWeGqRBsGr9AKXSIzs=
Subject key identifier:   04:F3:88:E0:29:E5:28:AE:E0:AA:B6:AF:AF:B7:57:5B:C2:80:51:32
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer:       /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial:       4499A8BB7E0C9B32F4428EE539B7F7A20D5866D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number:          61
Signing time:             Fri 05 Jun 2026 21:28:59 +0000
Manifest this update:     Fri 05 Jun 2026 21:23:59 +0000
Manifest next update:     Sun 07 Jun 2026 01:19:59 +0000
Files and hashes:         1: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: XE3Qm2A51ueOzrQ+TNWHhfzGzVR5/hSj2jmfp9JThCY=)
                          2: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
                          3: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
                          4: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
                          rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 01:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:a8:bb:7e:0c:9b:32:f4:42:8e:e5:39:b7:f7:a2:0d:58:66:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
        Validity
            Not Before: Jun  5 21:23:59 2026 GMT
            Not After : Jun  7 01:19:59 2026 GMT
        Subject: CN=04F388E029E528AEE0AAB6AFAFB7575BC2805132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0e:17:aa:f6:69:1d:05:c6:f3:da:d3:35:8e:
                    92:36:76:2f:52:87:2c:36:49:a4:8e:0f:c0:5d:70:
                    f5:e4:5e:58:db:d9:bb:6a:8f:82:1d:68:75:56:22:
                    66:9a:51:97:56:07:f9:85:87:7b:50:ed:5a:86:d6:
                    42:44:a7:b7:a0:b2:99:b9:08:59:2a:3f:5d:0e:f7:
                    1a:02:b1:16:5d:4c:c4:6f:03:3c:7f:93:c0:3e:06:
                    61:9e:2e:d2:11:d0:c2:be:54:40:97:04:d8:c1:f8:
                    28:23:11:db:0e:06:08:b7:5b:bf:38:ac:49:27:d7:
                    bd:d4:89:1c:63:23:b8:a2:29:20:f1:49:87:1d:c4:
                    85:57:0f:4b:20:03:41:1b:b7:a2:f3:9a:58:3e:66:
                    09:cb:42:35:ca:df:a2:68:13:af:45:11:43:72:47:
                    d2:2a:9f:7b:88:46:a1:30:68:09:c1:74:7f:e2:59:
                    15:59:01:be:8c:29:6a:bc:b3:b9:15:d9:bf:f8:72:
                    e7:03:87:9e:3e:3a:81:ca:b6:97:a6:4b:a4:36:b2:
                    45:c4:c0:68:a1:11:b4:f1:8d:e9:e3:52:78:88:5c:
                    08:ad:7c:7a:4f:92:0c:ef:ee:5e:b5:81:92:4d:42:
                    c7:17:c6:2c:1f:fb:98:7b:1d:ad:d3:ea:bb:31:a6:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F3:88:E0:29:E5:28:AE:E0:AA:B6:AF:AF:B7:57:5B:C2:80:51:32
            X509v3 Authority Key Identifier:
                keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:53:8b:ba:2d:de:6f:59:28:50:bf:26:bf:f5:40:59:84:f3:
         b5:b4:11:fd:c8:ff:06:9a:e0:92:9b:08:4b:36:96:3f:33:db:
         12:96:3c:c2:47:e7:39:35:f0:74:e4:b4:13:27:40:7d:11:19:
         27:99:cb:4a:f9:97:74:9b:65:67:87:29:da:b4:ed:02:d4:9d:
         93:c3:34:da:3f:c4:be:01:19:94:93:dd:38:41:ba:a6:c0:8b:
         fb:ba:eb:ac:79:2c:4a:15:40:e6:5f:c4:9c:10:4a:92:a0:58:
         da:d6:e1:d1:76:10:c0:22:ef:e9:92:46:8b:04:a4:b7:81:fd:
         d2:4c:7e:33:19:f7:de:9c:24:fb:04:ec:3f:63:19:61:0e:ac:
         e8:46:8e:1c:a6:82:6b:d8:3b:a8:41:39:34:6d:e5:aa:de:04:
         83:6e:55:ee:03:e3:43:12:d3:3a:25:59:27:42:fd:a5:1f:f3:
         1a:5e:9f:e8:61:cb:18:c4:14:87:f5:26:1d:2b:1c:a5:80:d3:
         21:82:bb:98:e9:4d:cf:bf:fb:7d:5e:2a:57:31:bc:d4:b6:da:
         09:11:61:a0:1e:3d:32:35:bc:40:a0:c8:7a:fb:ab:00:e1:45:
         fd:05:02:93:27:cf:d0:77:42:8c:1e:81:f1:11:60:35:98:e2:
         9b:4b:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:57:37 2026 by rpki-client