Manifest

$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
File:                     0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json)
Hash identifier:          i2bbOxIp8c9KU7t4OQZUkIJRjcQgnwJ8OMQw7tSMoCY=
Subject key identifier:   31:04:70:3F:5F:B8:2E:AE:E5:C0:84:54:F2:92:53:0E:F3:86:7B:70
Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Certificate issuer:       /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
Certificate serial:       7B53C325D8DA552DCE39B248991443AD6E6B8731
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
Subject info access:      rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
Manifest number:          AF
Signing time:             Sun 19 Oct 2025 17:44:28 +0000
Manifest this update:     Sun 19 Oct 2025 17:39:28 +0000
Manifest next update:     Mon 20 Oct 2025 18:33:28 +0000
Files and hashes:         1: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=)
                          2: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=)
                          3: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: oJrLkPKGbOUHEovFs7yJrpOpp0sN3HDY4CbvWTUqWo8=)
                          4: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=)
                          5: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=)
Validation:               OK
Signature path:           rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl
                          rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:53:c3:25:d8:da:55:2d:ce:39:b2:48:99:14:43:ad:6e:6b:87:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Validity
            Not Before: Oct 19 17:39:28 2025 GMT
            Not After : Oct 20 18:33:28 2025 GMT
        Subject: CN=3104703F5FB82EAEE5C08454F292530EF3867B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:57:d9:85:01:3e:d6:b5:a9:9a:03:24:ed:
                    f3:71:9b:bd:82:13:1e:0d:a6:0c:67:6d:41:04:ca:
                    e5:bd:6d:13:d8:08:02:15:bd:6f:4f:19:df:f5:70:
                    fe:38:b0:11:28:b3:2c:90:41:8c:3b:f1:d9:5e:bc:
                    7e:dc:be:ec:a7:e6:83:d7:26:0f:18:a6:e5:69:d7:
                    f0:82:c3:94:6b:fa:18:ca:56:e2:17:06:02:6d:96:
                    21:27:c3:02:00:87:f8:0c:81:1d:d6:b7:1f:a0:dc:
                    78:38:e8:a4:f1:b7:9e:2b:77:81:94:e2:b7:9b:fe:
                    50:71:33:e5:d3:fc:cf:c4:7e:b4:42:b2:19:0d:03:
                    79:14:65:14:b4:e2:6d:cb:21:72:b5:bf:7c:6a:42:
                    fc:2c:55:9d:59:4a:d3:34:cb:b0:c8:e3:29:fe:85:
                    53:c4:35:1e:44:8e:3a:7c:aa:03:33:77:26:89:a7:
                    b9:5c:bb:24:53:f2:64:57:ac:94:ef:a4:0a:9b:01:
                    dc:3b:38:a0:ff:ad:bc:eb:da:7c:c5:c5:d7:38:dc:
                    01:4c:27:7f:1e:a2:fe:3f:aa:d9:57:6b:9d:93:a4:
                    83:77:eb:4d:50:c8:87:7c:cd:f3:17:6f:03:af:e8:
                    3e:ad:f3:c2:a4:4d:dd:ff:ce:2f:2c:68:a7:0c:bd:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:70:3F:5F:B8:2E:AE:E5:C0:84:54:F2:92:53:0E:F3:86:7B:70
            X509v3 Authority Key Identifier:
                keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:44:39:92:9e:ec:e8:70:d3:8d:41:58:d3:a3:65:e6:61:
         68:20:c9:16:79:48:cd:0a:e9:cb:aa:9d:34:70:04:9b:d8:76:
         39:ae:dd:d0:0b:31:30:59:99:2e:99:f3:f0:f3:7a:df:63:e9:
         88:69:17:93:2c:6b:dd:e3:8c:ff:a5:ba:6c:0b:87:0c:6c:78:
         9d:50:0b:f0:04:75:0e:aa:2a:55:81:62:3f:3d:bd:e9:5e:a9:
         58:4f:60:cd:92:63:b6:9b:31:21:2a:2c:f7:9d:29:b7:e4:eb:
         e2:75:73:06:96:6c:2b:f9:80:ae:de:41:8d:9a:27:d5:c2:09:
         d1:01:f4:b9:20:e4:00:3c:df:48:2d:c8:bc:80:79:d4:5a:a2:
         dd:57:78:8d:2e:f5:59:2b:3a:33:3d:53:47:ff:33:b3:de:6c:
         e2:71:eb:c8:b9:72:2c:7a:cd:66:8a:2f:85:5a:2e:be:30:b2:
         1d:41:78:88:cf:22:6a:3f:41:56:7a:b6:e0:51:02:51:a9:70:
         b8:2b:12:91:91:fb:3d:4d:c8:13:c6:32:d9:9d:4e:48:e9:dd:
         69:e1:dd:d1:de:ef:09:72:c8:56:ad:af:71:b3:71:3d:01:1b:
         7f:81:0e:7e:9c:fd:73:c5:47:f9:e2:47:62:4c:82:f7:01:72:
         8b:6f:f1:b7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUe1PDJdjaVS3OObJImRRDrW5rhzEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk
NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUxMDE5MTczOTI4WhcNMjUxMDIwMTgzMzI4
WjAzMTEwLwYDVQQDEygzMTA0NzAzRjVGQjgyRUFFRTVDMDg0NTRGMjkyNTMwRUYz
ODY3QjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlpX2YUBPta1
qZoDJO3zcZu9ghMeDaYMZ21BBMrlvW0T2AgCFb1vTxnf9XD+OLARKLMskEGMO/HZ
Xrx+3L7sp+aD1yYPGKbladfwgsOUa/oYylbiFwYCbZYhJ8MCAIf4DIEd1rcfoNx4
OOik8beeK3eBlOK3m/5QcTPl0/zPxH60QrIZDQN5FGUUtOJtyyFytb98akL8LFWd
WUrTNMuwyOMp/oVTxDUeRI46fKoDM3cmiae5XLskU/JkV6yU76QKmwHcOzig/628
69p8xcXXONwBTCd/HqL+P6rZV2udk6SDd+tNUMiHfM3zF28Dr+g+rfPCpE3d/84v
LGinDL3juQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFDEEcD9fuC6u5cCEVPKSUw7z
hntwMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE
AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu
b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy
REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF
BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp
LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy
OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx
LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh
NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB
BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt
UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAHD0Q5kp7s6HDTjUFY06Nl5mFoIMkWeUjNCunLqp00cASb2HY5
rt3QCzEwWZkumfPw83rfY+mIaReTLGvd44z/pbpsC4cMbHidUAvwBHUOqipVgWI/
Pb3pXqlYT2DNkmO2mzEhKiz3nSm35OvidXMGlmwr+YCu3kGNmifVwgnRAfS5IOQA
PN9ILci8gHnUWqLdV3iNLvVZKzozPVNH/zOz3mzicevIuXIses1mii+FWi6+MLId
QXiIzyJqP0FWerbgUQJRqXC4KxKRkfs9TcgTxjLZnU5I6d1p4d3R3u8JcshWra9x
s3E9ARt/gQ5+nP1zxUf54kdiTIL3AXKLb/G3
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:54 2025 by rpki-client