Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          wgQF0oWVXXfQg9khlzyEDHVIoG15ejvQzr2mAapXVnI=
Subject key identifier:   74:DD:79:18:74:1C:0C:D9:BD:D0:69:7C:4A:53:2A:04:09:C7:58:32
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       61E30D0171B88FC75D190FDDCFCD9F8CEF15AC3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          07D0
Signing time:             Fri 25 Apr 2025 21:40:59 +0000
Manifest this update:     Fri 25 Apr 2025 21:35:59 +0000
Manifest next update:     Sun 27 Apr 2025 01:17:59 +0000
Files and hashes:         1: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 9pniSLjFRQJ+eqL4yaOaOLJswVTB5vXeN3pUAVMb9/Q=)
                          2: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: SD8eSbNpC+j2ob1Lnp5qYAO0x7aCbcCbnqNr2jZFro0=)
                          3: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: Zp2dLdflPopZRz2wCBvQ323kQWGGkQirp3/oJFp4gtE=)
                          4: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: 96o5E3l8VX2A9M6Mv6rN9cqwbqxcVJnLdu+NXHSrwR0=)
                          5: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: b29zK4U8Mcq+XxDLVK6zeqp99cVMrTm1iEY248+v7GQ=)
                          6: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: MlAIwNvpU9pLqPm5GeqhwAydZcRl+n9fF0MyIYdunng=)
                          7: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: +Pjx51eEXOpxm1J8vexGgphqxhR9IXG5FbXTZK5zJmQ=)
                          8: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: rrISbsCtEnimnofMMvgGj0FxtsaUbnOC5+KJRQbLfHk=)
                          9: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: jHkaVLNAdW9lo8zt42tA5xcsgmOhm7V0BOVpGQA4ieo=)
                          10: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: 2mm1m6Q1iZ3+kukwyxhPE/1ZIdE+eJ3Y1a97MNv75b4=)
                          11: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: Uaez6iZritL8qNb8zashZZRXPOsrbSHSEJJRbEionds=)
                          12: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: cMkudhGNnoQaWldEqhiXs3ru1bCz8/HSbd8wVlIoZ/s=)
                          13: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: 8QFGxo0ziOX84hkhYcQL2uBAbpvLPoPY71QwOCLSfSQ=)
                          14: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: rpG176mq+Hz0ATWW9+e61ZLrSrpzkMO/+wQlXX8v8ZU=)
                          15: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 0WYqo5igyKkDLhLeGNETpW87dUrlfRLrVabhhC6LhW4=)
                          16: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: 57nYp6h/6E+SHSpEE52l7J3TWn+o2NI5EucTi82ES0I=)
                          17: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: wBOqtkvpiOecj4e9IalrDt/1tgnOJOarTPyacCkkRqQ=)
                          18: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: 8WZiiARP34rsVV/fJ1SdzWD+kELbuKRgTXKuVh47r0Y=)
                          19: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: LWed9Rzs/E3FpbUuUHuGcznFEfyy/hMHuF8qh8yj/Jk=)
                          20: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: GxhrfMYbrIorIZx7sAuAdXT2L2AlBHK6bwQj24J+2XM=)
                          21: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: 5bRZUpWmhIQUAhiN95HpRdn7fSN+Ft8oNPypKcjOs0Q=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 01:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e3:0d:01:71:b8:8f:c7:5d:19:0f:dd:cf:cd:9f:8c:ef:15:ac:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Apr 25 21:35:59 2025 GMT
            Not After : Apr 27 01:17:59 2025 GMT
        Subject: CN=74DD7918741C0CD9BDD0697C4A532A0409C75832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:f0:80:86:b7:87:cd:65:fa:e4:68:ca:8d:
                    4b:58:45:82:2b:91:ef:cc:1e:74:9f:42:fb:6e:ea:
                    87:b6:3b:14:fa:73:7e:50:d4:cf:9e:b0:af:f6:2b:
                    ed:d7:cb:6f:d8:a6:6a:5e:2d:f6:6d:93:87:33:0b:
                    cb:61:f3:0d:88:0f:b0:d4:e6:a5:97:0f:8e:b3:19:
                    50:34:4a:da:a9:db:e4:1f:33:9e:00:d9:2f:01:57:
                    a0:a7:03:7b:27:92:1d:10:1e:36:46:1b:ca:76:61:
                    50:a4:dc:49:0d:63:59:0a:18:d6:01:2c:12:48:44:
                    cf:73:2b:1b:dd:92:08:cb:92:3f:25:d5:61:6a:2a:
                    16:9c:be:85:f7:7b:f8:b6:8c:f4:ef:9d:ae:f4:39:
                    bb:7e:b9:d8:82:35:70:cb:7e:e9:dc:52:6c:e5:ee:
                    b0:9f:07:b9:63:ed:d4:0a:38:91:01:d4:f2:ae:bd:
                    94:1f:6f:96:aa:78:e4:b3:27:b4:ed:b7:ca:93:0a:
                    eb:2b:4e:4d:58:d3:86:28:f2:ff:06:a5:fa:79:3d:
                    a6:83:ae:c6:70:4e:63:df:1d:d6:5c:3e:77:3c:72:
                    03:21:8e:99:ce:5d:03:6b:ea:34:6b:7d:20:95:c3:
                    4a:72:e1:bf:12:87:81:ab:12:3d:bb:22:2d:51:bf:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:79:18:74:1C:0C:D9:BD:D0:69:7C:4A:53:2A:04:09:C7:58:32
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:cd:b6:58:ca:5a:3c:86:18:0a:cc:d4:f3:a8:d3:ce:5d:
         27:e1:21:5e:ad:58:06:54:d9:88:9c:9c:a4:51:1f:35:58:38:
         1e:58:6b:0c:21:5d:30:26:62:a9:e7:9a:a8:2e:85:f4:5a:ac:
         22:0e:ca:cc:36:0c:31:c5:e9:e0:74:69:93:88:a8:6c:8e:f1:
         c2:8b:8d:d9:54:29:a6:1b:f6:1d:ee:50:54:21:47:1e:3b:e5:
         23:99:53:79:2a:84:2b:f6:32:fd:5d:0f:79:30:b4:54:20:2b:
         29:a0:2f:a2:02:2d:14:bd:9c:5c:36:f2:24:01:8f:16:77:f9:
         c5:e5:db:f1:8a:a5:96:ec:74:34:44:57:15:5a:9c:0e:f0:df:
         22:d6:a7:96:1c:da:d1:52:51:c3:7b:70:fc:65:9f:73:25:47:
         6c:bf:a4:44:b4:83:f4:4f:af:a2:22:47:a2:6d:71:1d:52:7f:
         28:2e:ec:f7:74:9d:ae:f8:46:72:d3:9e:7c:aa:7a:03:54:ef:
         fe:f3:5c:df:78:b5:ee:47:92:17:6f:23:c8:ca:f9:17:54:44:
         a9:6b:27:2a:dd:52:ae:56:fc:54:8e:8d:70:64:2f:17:b4:9c:
         8e:f5:18:a9:06:72:b0:fb:75:28:e3:45:2a:5c:cd:82:9a:ba:
         ab:ac:95:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:53:58 2025 by rpki-client