Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
File:                     09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json)
Hash identifier:          3/F3savmk2ynOZ/yzZ9aFYA65gHBbKtcByMHqFKa2GM=
Subject key identifier:   AC:77:9F:69:0A:B1:8C:0A:62:67:43:DF:B9:7E:6B:C7:B9:BC:17:68
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       58E8E93A5272F4A99FA3382177DCCC8FE6E5CF4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
Manifest number:          0A45
Signing time:             Mon 09 Nov 2026 01:58:46 +0000
Manifest this update:     Mon 09 Nov 2026 01:53:46 +0000
Manifest next update:     Tue 10 Nov 2026 03:39:46 +0000
Files and hashes:         1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: 9AVqyEcHTnIoj85ljZf3wDmCXLNsBzXUmDyKEp/tnHI=)
                          2: 323630343a656234303a3a2f33322d3438203d3e2039333132.roa (hash: hbaXbNwKUKcoTstYeyInYbBkywUVrefql58zEvu6hTc=)
                          3: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: RV2WT7CidrsEpWqL3Fl+XLXxooyuRb3zFv1+H32O6bI=)
                          4: 323630343a656234303a3a2f33322d3438203d3e2034373835.roa (hash: hkynmaVjSV7Kkxsmh84RfGlcDhTRN3+eHugCXHa7dxQ=)
                          5: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: G0E1tckKT3wR7ducFJEbtmCC/l6pUZa6iMNu+MXfOMs=)
                          6: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: qfofgceCtS4tcApvw8OevZ8VX5fMYImBe9Ot+7ndHPk=)
                          7: 323630343a656234303a3a2f33322d3438203d3e2038383838.roa (hash: vuzbdbY36pIgRieVEFYVXU+9Dax4qL1N8+yQwZEEPLE=)
                          8: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: n6yTN9/ggQ3vkm7l30Hsgu/57B4zsZzw2XWAG9zD9lw=)
                          9: 323630343a656234303a3a2f33322d3438203d3e2033323134.roa (hash: FdNA5pDUCNToAF3wH1NOwDUtwvNXijRkZZpKLNS8HN8=)
                          10: 323630343a656234303a3a2f33322d3438203d3e2033323034.roa (hash: 3pwNews3uMNMCidBav91ANIbsjSMyNfG4jIB5sU0Fq4=)
                          11: 323630343a656234303a3a2f33322d3438203d3e2033323538.roa (hash: woyxCcNJI7fsr34kVoF8NWqcANCeOXTcnZy/yxfcGEw=)
                          12: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: 8zatHT3G4oUxl3buwx301fQuV8U2NBFNclu9rhLr4cg=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 03:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:e9:3a:52:72:f4:a9:9f:a3:38:21:77:dc:cc:8f:e6:e5:cf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Nov  9 01:53:46 2026 GMT
            Not After : Nov 10 03:39:46 2026 GMT
        Subject: CN=AC779F690AB18C0A626743DFB97E6BC7B9BC1768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:c3:33:a6:3d:a5:7a:63:21:22:60:cc:56:
                    ff:63:d4:cb:48:94:13:c3:e2:36:1c:59:87:73:12:
                    96:48:f8:ef:03:ae:91:6c:27:aa:c7:2f:09:4c:88:
                    ad:29:a0:dc:b6:d3:c7:82:7a:c3:0d:32:dd:8a:57:
                    2e:45:b2:84:91:7a:53:fc:01:cf:6a:c3:18:44:0f:
                    4d:85:29:06:3d:55:be:43:70:2a:92:5f:0a:f1:cd:
                    d1:c9:a8:12:d9:87:f2:0e:ec:15:74:db:0f:ce:2f:
                    16:fc:03:56:89:c5:cc:98:5f:fe:01:aa:d9:3e:a4:
                    3e:ff:3b:0f:79:64:65:c1:8b:1f:0b:67:f8:6b:bb:
                    ef:69:d0:e1:cc:02:8e:50:ea:cf:00:88:16:45:c1:
                    48:83:00:fb:e1:88:bd:ee:9d:62:a2:b4:bb:67:9b:
                    3d:c5:c9:2f:a1:55:09:44:0c:9a:21:ca:cd:1e:a7:
                    cd:46:0b:2e:b7:02:c1:85:1c:93:00:df:ec:fc:40:
                    b9:49:3c:ee:f3:1c:50:84:97:98:2c:a2:a5:9b:b0:
                    99:af:4c:2c:2f:04:28:3f:81:89:70:cb:05:8d:20:
                    44:c3:64:24:52:96:30:39:c3:57:cc:f0:6b:c5:72:
                    4c:24:bd:81:cd:73:6a:c6:78:2e:14:dd:2e:93:7f:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:77:9F:69:0A:B1:8C:0A:62:67:43:DF:B9:7E:6B:C7:B9:BC:17:68
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:89:18:ea:c0:a3:a6:fa:23:d0:0e:13:ee:d1:86:2b:be:b8:
         b2:b2:56:e8:b8:42:7b:f6:be:fd:0e:2e:7c:70:a7:21:7d:99:
         71:e7:5f:f2:d4:cb:17:0d:c2:4f:68:1c:b3:51:b1:6a:5a:09:
         d3:7b:f9:a1:f0:ad:aa:e1:29:4a:83:41:6f:f2:c0:81:78:81:
         c1:63:1a:6b:2b:d5:02:94:4f:c6:3d:f1:0b:aa:97:6e:0d:6a:
         1a:16:f3:6e:1d:62:58:b0:a1:2f:be:21:2f:c0:cc:7f:0e:3e:
         c5:dc:13:19:8f:01:e8:28:98:96:e7:53:98:42:83:bf:28:a4:
         f4:b2:39:dd:62:8f:23:6a:e6:d4:9d:ed:00:dd:6a:7b:9b:3e:
         c6:e4:86:d8:9a:75:24:73:f3:85:67:e0:d3:1a:1f:bc:01:70:
         b8:1f:38:c0:a8:3e:13:30:d3:41:65:d5:ce:a5:7b:2b:f8:3f:
         95:8f:e3:91:d7:6e:2c:86:03:ee:74:49:34:87:d4:3c:4a:f6:
         96:be:75:56:1e:99:85:6d:7e:e8:87:b6:3c:85:bc:c3:c8:0d:
         6b:07:0f:9c:99:82:be:d5:7a:d5:b8:08:67:70:0b:3b:1e:7f:
         11:06:2c:55:ad:54:bb:da:31:cb:91:3e:2e:9d:73:7b:4a:dd:
         93:13:2f:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 9 11:39:31 2026 by rpki-client