Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File:                     5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier:          DINq7un1hhQbDQJOhk0CCxFWZefyGq2nTh9dGxW7tfc=
Subject key identifier:   61:F8:6F:1C:2D:54:C1:11:20:8F:DB:E7:5D:FE:E4:E7:FD:CB:7E:E4
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer:       /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial:       6BD6A7AB4C7A279C0033C75CF80837302F2E5650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number:          6A
Signing time:             Fri 12 Jun 2026 15:08:59 +0000
Manifest this update:     Fri 12 Jun 2026 15:03:59 +0000
Manifest next update:     Sat 13 Jun 2026 17:37:59 +0000
Files and hashes:         1: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
                          2: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
                          3: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: HFrwQu6FQEEZUT46oeaTDVebeImG9S9MYY6cxdQN/WI=)
                          4: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
                          rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 17:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d6:a7:ab:4c:7a:27:9c:00:33:c7:5c:f8:08:37:30:2f:2e:56:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
        Validity
            Not Before: Jun 12 15:03:59 2026 GMT
            Not After : Jun 13 17:37:59 2026 GMT
        Subject: CN=61F86F1C2D54C111208FDBE75DFEE4E7FDCB7EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:81:7d:6b:67:b6:25:58:9f:7e:ff:b6:76:
                    77:db:04:59:5c:72:5c:e3:06:e7:6b:55:fe:51:63:
                    a7:0d:9b:55:c5:ce:f4:64:05:cf:f0:a5:fb:5e:f7:
                    4b:d0:14:32:d9:b8:34:48:0f:98:3a:1c:03:75:ee:
                    20:e9:ff:c6:23:c5:d0:a1:76:cd:2f:4a:bc:78:5d:
                    62:c7:d7:c8:58:9e:af:b2:31:ec:3d:06:5e:aa:2e:
                    c4:0b:7c:d1:1d:39:ff:48:74:ec:c5:58:0f:3d:5f:
                    db:3d:07:1e:82:b3:52:91:bf:ce:4c:7d:c6:8e:ea:
                    13:51:1c:8a:92:f1:a4:f1:93:5d:fb:4f:cb:2e:5b:
                    10:9f:f9:c0:85:9b:de:35:b9:5c:7d:ff:98:0d:2d:
                    47:07:e4:53:af:a3:6b:d2:11:76:c1:08:c8:b8:fb:
                    13:78:56:21:f2:73:6f:79:10:8c:fc:43:04:27:22:
                    01:de:c9:34:30:25:f1:75:71:6f:23:59:49:5e:df:
                    7a:52:95:7f:38:b0:41:27:dd:c4:ed:92:11:0f:39:
                    ec:e2:30:1b:8a:8d:95:3a:67:a9:2a:a8:fe:85:79:
                    43:9b:76:f2:49:ae:d9:b3:98:3d:60:f5:5e:e9:12:
                    d0:af:e4:a1:e6:03:a9:0d:6b:fd:0c:01:84:c5:7a:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F8:6F:1C:2D:54:C1:11:20:8F:DB:E7:5D:FE:E4:E7:FD:CB:7E:E4
            X509v3 Authority Key Identifier:
                keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:3c:b7:c6:ce:ee:b6:0f:da:a4:3d:f7:3b:aa:37:17:fe:
         31:38:d4:2e:ea:15:54:af:53:6c:6f:05:54:97:4a:5f:09:ce:
         2f:24:7a:db:81:5c:88:6f:39:d3:ee:78:ba:94:39:63:f0:93:
         b6:b0:e0:77:84:9e:8c:6b:7b:b9:0a:5a:63:f3:de:d1:ae:d1:
         4c:6b:e6:30:7e:39:b0:df:45:1e:11:30:7c:6b:41:a5:28:f5:
         bf:a4:e5:47:f4:a4:8a:d2:08:7b:52:36:a0:11:d8:1f:a6:e2:
         52:04:ac:7b:6d:f9:f3:be:b6:f4:9e:2d:6e:63:0f:67:b3:de:
         29:24:dd:4d:aa:2a:a2:b6:5b:64:2d:6e:1f:e7:d3:39:0e:7d:
         f1:7b:c1:10:99:c8:01:1e:ce:30:3c:8a:61:37:ed:ee:f8:7e:
         4a:65:2a:90:7c:39:0b:70:9a:3e:23:d5:7c:8c:8a:7e:41:0e:
         c0:4f:4b:1f:a5:dd:0a:d4:f8:70:6f:c8:ee:89:15:88:a5:72:
         6e:f1:40:99:bc:55:bc:a0:9c:1f:25:a9:a6:c5:27:18:2a:f4:
         81:f8:93:38:0f:8a:2a:06:2c:68:25:73:fa:4c:0b:ea:e9:23:
         c4:19:12:ce:7b:b1:28:a9:fa:55:75:9b:43:29:8d:9b:5d:c9:
         d0:1c:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:20 2026 by rpki-client