Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
File:                     09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json)
Hash identifier:          bdnaXvPqvliTVQi2ccv5OA50HT/FBmHbWBQ4aHUw7Vc=
Subject key identifier:   7D:A6:01:CA:B8:83:62:11:D6:29:61:AB:66:9B:22:E7:99:04:39:28
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       667E55E48144DA1142644513E3A582D00A95AC34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
Manifest number:          0960
Signing time:             Wed 17 Jun 2026 00:33:59 +0000
Manifest this update:     Wed 17 Jun 2026 00:28:59 +0000
Manifest next update:     Thu 18 Jun 2026 01:15:59 +0000
Files and hashes:         1: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=)
                          2: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=)
                          3: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=)
                          4: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: e1g27xfJCAVP0tyDFOu9rddi9TssdkE0MzDBHihQRrc=)
                          5: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=)
                          6: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 01:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7e:55:e4:81:44:da:11:42:64:45:13:e3:a5:82:d0:0a:95:ac:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Jun 17 00:28:59 2026 GMT
            Not After : Jun 18 01:15:59 2026 GMT
        Subject: CN=7DA601CAB8836211D62961AB669B22E799043928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:92:aa:85:c4:d2:cb:e5:54:39:2f:2e:47:
                    a1:40:6f:cc:77:00:12:d2:5e:c3:4a:92:6d:d9:21:
                    d5:ef:de:82:97:38:03:a8:15:b0:65:e0:57:34:a8:
                    8e:4f:2d:d5:b0:f4:a7:3b:e0:8e:50:1b:c9:5f:d9:
                    f3:8d:af:ed:02:97:1d:cd:12:48:f1:85:77:b8:9e:
                    c7:f7:d3:bc:18:d5:5b:80:e8:ba:9a:29:4f:11:52:
                    bd:f2:43:77:c9:03:fa:17:aa:cc:65:bb:ef:10:d6:
                    5b:9e:ad:ac:de:57:68:c0:fd:b6:20:f1:f1:1d:01:
                    9c:65:1c:76:d8:74:25:64:cd:5c:28:e0:c6:0d:6d:
                    b7:c3:79:2f:d5:75:17:3e:81:04:59:df:9d:91:d0:
                    82:f9:0c:38:23:d5:14:7e:5d:27:35:58:bb:36:ff:
                    e9:c4:ad:5d:a8:36:20:b8:d1:4f:23:a2:d7:e3:21:
                    bc:c9:60:48:23:a1:38:8e:15:d2:de:c2:dc:f1:43:
                    c9:10:4d:ae:05:0f:cb:8b:d8:6f:60:08:b9:0c:f7:
                    9b:8e:90:a9:dd:15:a2:12:49:30:3b:a1:46:fd:6c:
                    f6:e1:ae:cd:01:23:b0:b4:a0:49:59:c6:96:7e:ff:
                    81:5a:6a:58:ef:f1:95:cb:ae:a6:b5:30:41:e6:57:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A6:01:CA:B8:83:62:11:D6:29:61:AB:66:9B:22:E7:99:04:39:28
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7c:ca:c9:5c:b6:50:3d:24:1c:48:eb:4d:17:00:d2:86:e9:
         76:48:c3:28:78:c5:d0:07:18:16:3a:c5:40:0e:ea:18:fa:d4:
         b0:00:b0:63:38:92:32:09:bd:33:bb:54:c6:5b:2e:2d:7e:aa:
         98:d6:f2:71:cd:c2:c1:ea:d2:13:84:33:04:3f:c7:e6:2c:10:
         67:21:28:6b:a2:90:03:64:12:e2:2c:70:10:88:44:48:e4:a7:
         35:92:73:c9:7a:50:30:13:a9:0a:7b:a5:ec:ef:27:fe:06:dd:
         19:83:cb:c3:c5:2d:86:3b:53:18:53:2a:c5:64:59:26:11:b9:
         39:0f:a5:1c:57:4e:e4:78:94:42:cd:95:66:3b:f5:2f:ea:ff:
         af:bc:bc:7b:dc:9b:b1:39:ef:21:e2:14:99:ca:d6:79:b3:9a:
         b4:d1:1d:70:bb:7b:94:52:4d:5c:02:a9:eb:b5:12:2b:9e:74:
         10:40:2b:7a:5a:89:aa:d3:81:31:88:54:8c:0a:a7:db:f5:f5:
         5f:d0:ad:f3:82:72:cc:be:4e:47:58:50:d4:35:51:37:45:8e:
         c0:c1:5e:03:a6:6d:99:8b:a7:0d:f3:64:fd:27:1d:71:19:2c:
         b8:72:cf:20:f8:a6:ae:f8:ff:cc:13:19:4d:54:74:f4:78:4a:
         79:4c:ca:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:28:52 2026 by rpki-client