Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File:                     74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier:          MUrVZh/z6o2Xe16DsPU1JkMlSppDRc/5x6iB/1Mm2uI=
Subject key identifier:   99:87:49:41:3B:09:0A:0C:87:EF:8B:FB:D5:1E:0D:60:37:A8:DA:59
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       66F1BBDDB531F201B514F8114F71A1F53E1CE376
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number:          08BC
Signing time:             Sun 01 Mar 2026 20:11:30 +0000
Manifest this update:     Sun 01 Mar 2026 20:06:30 +0000
Manifest next update:     Mon 02 Mar 2026 20:55:30 +0000
Files and hashes:         1: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: nqj+36+MiaNurPPfzLikkjQ9ANGwXnMgOV/BYAsUZi0=)
                          2: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI=)
                          3: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY=)
                          4: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: X+n+9BW5dGn0h5LCF8hG/Gv31hQkuAOBeQ2hADAvUNo=)
                          5: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (hash: MAcUd7vtatZgpEGuA7z6UCD0p+I66UWvJlHDJgyQ3Us=)
                          6: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: +k+mOUkZP8WH8MqH7BjPHZPTzUxFl+ZCEwarJomGTe0=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f1:bb:dd:b5:31:f2:01:b5:14:f8:11:4f:71:a1:f5:3e:1c:e3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Mar  1 20:06:30 2026 GMT
            Not After : Mar  2 20:55:30 2026 GMT
        Subject: CN=998749413B090A0C87EF8BFBD51E0D6037A8DA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:98:7b:00:a3:5f:78:97:44:00:b9:0a:2c:
                    9e:d3:2c:4a:c3:30:d0:28:de:50:e5:e3:5b:ea:c4:
                    cd:93:8f:f3:56:4a:4e:8f:62:a8:8b:92:4f:56:2b:
                    af:3a:f6:43:5b:7b:b0:2a:e9:ba:8e:f2:c3:25:64:
                    15:97:dd:9c:a5:e7:53:73:f0:a5:21:d2:ad:9f:8a:
                    e0:c2:31:c5:8e:6a:38:1b:c2:0e:2c:0c:b9:19:e9:
                    94:76:b6:91:64:a3:28:87:5c:ac:31:34:cf:5d:9a:
                    a9:c5:63:c7:e1:bf:c2:88:b4:90:0d:47:48:79:41:
                    1e:50:60:75:9c:0f:3b:40:32:2e:88:91:22:ef:91:
                    22:d9:b8:c1:a4:8a:28:38:76:1b:af:fb:09:94:ad:
                    05:52:2d:1f:29:ed:4d:b8:93:cd:cd:69:9d:93:d8:
                    bd:72:5e:88:bc:75:37:39:4b:6a:d3:8f:2d:35:bf:
                    20:cc:d4:54:60:46:b1:8a:ee:cb:67:af:39:9c:40:
                    31:23:db:a3:f6:55:5f:c2:5e:b4:a3:1b:54:1e:29:
                    af:96:1d:c1:48:ec:0b:5e:43:da:c4:c7:f4:32:74:
                    f2:e7:cc:11:01:e2:af:24:06:10:25:69:67:55:bf:
                    53:d3:79:a5:e1:22:89:e3:f8:dd:f6:f9:32:d2:4a:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:87:49:41:3B:09:0A:0C:87:EF:8B:FB:D5:1E:0D:60:37:A8:DA:59
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:07:0a:f7:d6:48:8b:49:64:fa:a7:1d:33:50:43:ae:e9:
         7a:4f:a4:ab:1e:33:5f:b5:66:ef:45:a2:df:3a:12:f7:51:60:
         b7:b1:a0:2f:f2:fa:03:e9:4d:b7:c3:e0:fc:df:99:54:6e:2d:
         39:46:93:c6:a8:cd:90:a3:a1:fb:be:ac:6a:48:16:2e:c8:1c:
         8c:eb:77:ce:0f:63:db:67:e7:cd:99:5e:d0:ad:82:14:81:7c:
         c2:df:fc:74:51:86:e9:62:38:64:c6:12:37:31:dc:e0:3d:37:
         0c:88:5a:ba:75:6e:53:61:aa:67:3b:33:77:61:28:7a:cd:43:
         3f:ef:21:67:78:77:7c:e6:12:fe:f4:7f:ed:15:28:99:c6:b7:
         8a:7b:75:fd:5a:14:ec:20:b7:db:17:51:ba:0f:9e:55:d6:4c:
         8f:65:92:9f:98:5a:75:9a:fd:6f:26:e5:32:33:dc:61:2c:d4:
         f2:a2:57:ab:4b:fd:9e:da:ae:89:f4:fb:59:cf:5e:8f:fc:a3:
         65:ae:79:dd:07:70:15:b6:0b:b3:26:b3:e7:40:ee:fa:a0:9a:
         bb:bd:b8:95:84:ae:df:e2:52:ce:dc:a0:e8:83:6c:43:d4:4e:
         7d:f7:0f:fe:62:ea:a9:8a:12:d9:dc:43:d5:24:2e:1f:60:3e:
         3e:3e:02:17
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUZvG73bUx8gG1FPgRT3Gh9T4c43YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh
N2NmZjE3MzliMDI3YzY0MGIwHhcNMjYwMzAxMjAwNjMwWhcNMjYwMzAyMjA1NTMw
WjAzMTEwLwYDVQQDEyg5OTg3NDk0MTNCMDkwQTBDODdFRjhCRkJENTFFMEQ2MDM3
QThEQTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusiYewCjX3iX
RAC5Ciye0yxKwzDQKN5Q5eNb6sTNk4/zVkpOj2Koi5JPViuvOvZDW3uwKum6jvLD
JWQVl92cpedTc/ClIdKtn4rgwjHFjmo4G8IOLAy5GemUdraRZKMoh1ysMTTPXZqp
xWPH4b/CiLSQDUdIeUEeUGB1nA87QDIuiJEi75Ei2bjBpIooOHYbr/sJlK0FUi0f
Ke1NuJPNzWmdk9i9cl6IvHU3OUtq048tNb8gzNRUYEaxiu7LZ685nEAxI9uj9lVf
wl60oxtUHimvlh3BSOwLXkPaxMf0MnTy58wRAeKvJAYQJWlnVb9T03ml4SKJ4/jd
9vky0kqb+wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFJmHSUE7CQoMh++L+9UeDWA3
qNpZMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4
MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw
MjdjNjQwYi5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlB
REI1QTczMURERTJENUVBRTk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJp2Bwr31kiLSWT6px0zUEOu
6XpPpKseM1+1Zu9Fot86EvdRYLexoC/y+gPpTbfD4PzfmVRuLTlGk8aozZCjofu+
rGpIFi7IHIzrd84PY9tn582ZXtCtghSBfMLf/HRRhuliOGTGEjcx3OA9NwyIWrp1
blNhqmc7M3dhKHrNQz/vIWd4d3zmEv70f+0VKJnGt4p7df1aFOwgt9sXUboPnlXW
TI9lkp+YWnWa/W8m5TIz3GEs1PKiV6tL/Z7aron0+1nPXo/8o2Wued0HcBW2C7Mm
s+dA7vqgmru9uJWErt/iUs7coOiDbEPUTn33D/5i6qmKEtncQ9UkLh9gPj4+Ahc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:07 2026 by rpki-client