Manifest

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
File:                     D4606AE6F18838E2257D55ABB500636F509236E3.mft (raw, json)
Hash identifier:          YeRV8GlZvH1G4hsqTNLsNwwu45PvDcEoVw2CXXfiGoA=
Subject key identifier:   DA:6A:05:F2:49:89:79:98:48:5A:77:95:04:CE:3F:BA:AF:93:DF:48
Authority key identifier: D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Certificate issuer:       /CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
Certificate serial:       1EC984CC8E0371DB0809502ACAFFC4F9714AA2C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
Manifest number:          4A44
Signing time:             Sun 01 Mar 2026 06:28:04 +0000
Manifest this update:     Sun 01 Mar 2026 06:23:04 +0000
Manifest next update:     Wed 04 Mar 2026 06:35:04 +0000
Files and hashes:         1: 323630323a663833643a3a2f34342d3438203d3e203133353237.roa (hash: vreSxe23JGVV9hTWayEaE24Ugemay16TZ22ajKGPSTQ=)
                          2: D4606AE6F18838E2257D55ABB500636F509236E3.crl (hash: vyhNdnU5I8gRODZPCzQT2znWSAcZz7A2Hzxgx0MdjfU=)
                          3: 323630323a663833643a31303a3a2f34382d3438203d3e203437303635.roa (hash: mriIKguZH2b4avIucPrIqnM1BYi+CW4ftfF9HKJRQPg=)
Validation:               OK
Signature path:           rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl
                          rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c9:84:cc:8e:03:71:db:08:09:50:2a:ca:ff:c4:f9:71:4a:a2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
        Validity
            Not Before: Mar  1 06:23:04 2026 GMT
            Not After : Mar  4 06:35:04 2026 GMT
        Subject: CN=DA6A05F249897998485A779504CE3FBAAF93DF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:90:1d:35:e4:40:a1:a0:79:a9:c0:91:f8:
                    93:9a:18:31:43:b9:f5:02:3a:02:a0:d7:17:09:3c:
                    78:1d:0f:aa:a1:72:8b:9c:36:48:6d:c8:78:a4:79:
                    87:74:ee:92:99:de:ec:2a:79:a4:26:0c:cb:58:08:
                    83:d3:90:a5:0e:5e:f4:2b:f0:b5:ae:ae:f8:74:1f:
                    f2:b7:7d:d7:ba:e7:e8:c0:49:49:8c:b8:3f:94:60:
                    3d:c6:fc:f4:f9:1c:33:44:ab:24:d7:c9:35:22:c6:
                    83:70:61:dd:87:04:dd:1c:8c:b5:44:11:db:39:91:
                    a1:e1:93:2f:22:10:59:1b:0c:00:0f:b4:fa:79:31:
                    49:7d:d1:ce:9d:f1:05:9a:a0:fc:35:e3:b1:d6:26:
                    48:8c:0b:f1:60:66:01:d4:b9:25:8d:63:1e:98:5a:
                    96:7d:53:4c:ec:1d:e9:b5:d3:8f:37:0c:65:43:e3:
                    b9:7a:7e:83:16:b1:41:df:e5:9f:71:72:e2:49:8d:
                    9e:dc:b7:d6:75:4e:da:aa:5b:9d:5f:f7:fd:c4:9f:
                    70:f4:79:bb:1b:72:b6:12:0b:1b:a4:df:d1:8c:78:
                    7e:34:39:e8:77:3b:02:04:26:2c:c9:a4:ef:1c:62:
                    0d:74:28:cd:fb:9a:d0:bc:ba:fa:91:9b:f8:41:ef:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:05:F2:49:89:79:98:48:5A:77:95:04:CE:3F:BA:AF:93:DF:48
            X509v3 Authority Key Identifier:
                keyid:D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:95:65:80:bb:c6:52:d1:fe:75:27:73:9b:84:03:fc:a6:
         d2:7f:cd:69:32:fe:48:c0:11:d2:18:8c:ad:80:6a:bd:13:9d:
         e7:36:a4:2d:1a:22:a8:e3:57:70:25:53:de:92:e7:94:03:89:
         03:15:01:3a:d8:d5:26:61:4a:48:73:1b:3f:d9:15:51:f8:f8:
         47:c7:4e:e6:5e:92:c7:b4:d3:b5:ef:46:2a:11:29:ad:06:35:
         73:a3:46:ed:2a:bb:78:1b:70:53:6f:93:9e:c5:b8:6d:51:ff:
         54:b1:cf:7d:55:9e:ed:4a:8f:7f:2e:fe:c1:37:4a:78:5f:f2:
         e4:54:52:75:f4:17:b5:51:ba:b0:2c:92:50:4b:51:17:20:54:
         81:9d:5e:d9:18:eb:78:e6:a2:da:1c:88:fc:e2:dc:14:9c:d3:
         e1:5b:da:01:83:73:e2:a9:cc:11:4e:62:3f:02:2f:a6:0b:f4:
         f9:1b:79:28:da:75:7f:45:53:04:71:3a:a9:03:92:b3:ab:bc:
         85:f0:ef:08:c3:12:42:a3:c1:45:d2:f7:d1:b3:c7:a5:ff:34:
         43:f6:e8:7c:09:70:2a:57:a6:78:e6:58:38:e2:43:d6:e4:5d:
         1f:4d:a3:59:a0:00:4e:88:3e:e8:73:85:8b:bd:5e:4f:df:f7:
         a2:1a:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:13 2026 by rpki-client