Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
File:                     E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json)
Hash identifier:          6kuYWGUdzio0SmV4fGEqnyx5Y031A0W0D3vtBAJYxHM=
Subject key identifier:   82:D5:44:8E:30:08:45:05:B6:D8:49:A3:15:C3:E4:72:88:F0:4E:C3
Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90
Certificate issuer:       /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
Certificate serial:       2EC275803BFF99C62B7358411F1B54BA2BA9D322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
Manifest number:          0A11
Signing time:             Wed 17 Jun 2026 03:03:59 +0000
Manifest this update:     Wed 17 Jun 2026 02:58:59 +0000
Manifest next update:     Thu 18 Jun 2026 05:11:59 +0000
Files and hashes:         1: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: pKV/v/JtML9/JxwHb1by4UjJ50QibBTHUg4ET1TmrNg=)
                          2: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=)
                          3: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=)
                          4: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: yc+BSfwyEkyu9U2eON/o8UkKoRDgC7FC5vo9XE9Elgk=)
                          5: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: 5Zcv8dsVj8+aglsqLf1U4loturxfixziY7UkqctRskM=)
                          6: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: z9Q9CGufBAvrvOJB0olivAFu9jmd++uYZyp82jFynZ0=)
                          7: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: inNJaB2NR3Jylp+OlhFBHGwPCE7GRTLkiqHSS3SQAik=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl
                          rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 05:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c2:75:80:3b:ff:99:c6:2b:73:58:41:1f:1b:54:ba:2b:a9:d3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
        Validity
            Not Before: Jun 17 02:58:59 2026 GMT
            Not After : Jun 18 05:11:59 2026 GMT
        Subject: CN=82D5448E30084505B6D849A315C3E47288F04EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:a2:24:b3:12:b1:78:19:22:ed:df:b3:20:
                    76:ea:b4:47:f3:f7:30:37:97:f3:72:4f:fe:22:9c:
                    06:a4:fc:54:64:b5:bf:7f:ea:4c:0e:06:e1:61:f5:
                    dd:7d:10:48:88:c1:d2:23:51:67:25:e5:8b:a0:5a:
                    11:2d:e0:82:d3:e3:f4:b7:3a:d3:bc:04:19:43:75:
                    28:29:66:3c:32:4c:a4:3b:1e:a2:59:d6:3f:8b:3c:
                    29:6b:25:87:f9:dc:96:df:4c:b7:b9:9c:eb:d1:72:
                    14:3c:78:f6:f8:d2:27:27:22:0f:2d:41:e0:58:77:
                    69:2e:01:47:32:89:45:9a:05:7d:d1:e8:41:b7:47:
                    5c:fc:39:00:ea:1b:8b:90:21:9b:0a:64:ce:96:e4:
                    b5:85:9e:82:93:d9:53:c3:fe:cd:66:42:6d:84:6d:
                    77:4b:a9:1d:96:38:17:37:30:43:85:94:17:0c:dc:
                    ef:9d:d1:90:03:b7:58:8e:f2:5b:41:03:0d:fc:37:
                    96:3e:bf:04:b2:fd:85:01:a4:28:28:08:7e:2e:1b:
                    e4:cd:0f:39:8e:4f:ad:60:fd:e7:0a:7b:26:23:4a:
                    53:12:9e:3a:f2:5b:70:40:6e:41:95:24:bc:fc:5e:
                    2f:9d:e8:aa:dd:7d:50:32:6b:1c:59:8b:78:56:8e:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:44:8E:30:08:45:05:B6:D8:49:A3:15:C3:E4:72:88:F0:4E:C3
            X509v3 Authority Key Identifier:
                keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:e5:2e:9d:69:15:70:13:28:28:4c:73:3e:c9:7c:a8:0f:
         44:67:47:7f:35:03:a0:72:b4:68:80:a8:37:22:dd:06:9b:7f:
         de:48:f2:85:da:47:02:76:e5:c5:72:27:4e:3b:6b:b7:ad:e0:
         50:25:e7:84:a4:42:26:69:fc:96:f6:cc:fa:b1:6d:4b:2f:bd:
         f5:4c:f8:25:83:40:5c:d2:cf:ed:64:f5:7d:a8:ac:b9:91:49:
         e7:4d:04:f5:76:2a:da:da:ed:32:bd:26:45:8e:03:8d:9c:89:
         3b:a5:25:84:43:07:f3:f6:ab:10:36:43:6f:0e:c2:f0:4b:f5:
         c3:81:ab:ac:31:56:75:11:22:7c:e8:4b:89:07:0d:81:b9:f6:
         fc:84:ed:2b:89:a6:d4:e3:09:c0:c0:f6:5c:55:3e:44:50:2c:
         1f:ab:61:58:ad:5f:f9:1d:56:10:24:e5:54:95:35:25:c8:80:
         22:5c:f3:fd:69:1a:f5:ec:70:7a:61:ad:57:25:00:2f:5e:13:
         ee:51:7d:4a:31:09:bf:f1:33:bc:a5:5f:d7:ac:a4:c2:9f:24:
         e4:18:88:c3:69:78:22:19:9d:7a:5e:df:7c:70:94:10:41:af:
         4c:ba:4e:06:d6:1c:ff:f9:1f:e3:47:8b:23:9d:19:ef:a4:4d:
         8b:f2:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:59:07 2026 by rpki-client