Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
File:                     E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft (raw, json)
Hash identifier:          qjtJiXylk68A9lFJfJnuxvfirLaCP2KqozUoA7aAhZc=
Subject key identifier:   1E:CE:FC:8A:7A:05:A7:69:73:22:17:31:CD:2E:8E:1A:83:DD:87:53
Authority key identifier: E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90
Certificate issuer:       /CN=A913FFE90000/serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
Certificate serial:       5E524037A75E3A3B12AD1944A6812541A0606C18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
Manifest number:          0A5B
Signing time:             Thu 23 Jul 2026 22:19:57 +0000
Manifest this update:     Thu 23 Jul 2026 22:14:57 +0000
Manifest next update:     Sat 25 Jul 2026 00:26:57 +0000
Files and hashes:         1: 3130332e3135352e3233322e302f32332d3234203d3e2038383838.roa (hash: dpUCu3eB5P8MA9xv2iZc+RYJk1W4LSLGzYy+Snk4Jgw=)
                          2: 3130332e3135352e3233322e302f32332d3234203d3e2033323538.roa (hash: jiLNzaw7iBtcFJxEv9OfaOgZBrm9RcqwuCcH4jUB7QA=)
                          3: 323030313a6466343a646438303a3a2f34382d3438203d3e2038383838.roa (hash: KFvnslCPL4X/LQ69pCWBq5qDUjXjtppzmmhIraVeEMM=)
                          4: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323034.roa (hash: Sct428YozHYxwSzzijejfY4VQuK7q1QPuNYpBC2I2tk=)
                          5: 3130332e3135352e3233322e302f32332d3234203d3e203433393539.roa (hash: ynOny1uJUNDJNLQfaFn9KT+EKSkm3BPUARRqhnmeOW8=)
                          6: 323030313a6466343a646438303a3a2f34382d3438203d3e2039333132.roa (hash: sOqxixjklaWO40uc9Yh3uSerFS1KO2El68KsQLHv5XU=)
                          7: 323030313a6466343a646438303a3a2f34382d3438203d3e20393439.roa (hash: wp3ums3gGQiHSeOASzDuZJLMnB77wkX449JJWXCY9dk=)
                          8: E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl (hash: WNbtsMtlg9to/4mmaY1XSldxU5exg7cWb3iw17XuqIY=)
                          9: 323030313a6466343a646438303a3a2f34382d3438203d3e2036323333.roa (hash: P+DRN1x6WrCoJ1/bJW3ozMaF6OfEUO23SN1Y8pMwFHY=)
                          10: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323134.roa (hash: PLRJaVF0Jd4MzsBLSWEvQcF65VlQI4URu4pK/WVh1RA=)
                          11: 323030313a6466343a646438303a3a2f34382d3438203d3e2034373835.roa (hash: E4Vla9mTVyy4cCQ80hyemXilIWR1XzkNFgiTj+0GXmo=)
                          12: 3130332e3135352e3233322e302f32332d3234203d3e203233393539.roa (hash: uJpbUW4JrPXqpwkMTMWdVzPekrlj0XntAcL3muKs+sE=)
                          13: 323030313a6466343a646438303a3a2f34382d3438203d3e2033323538.roa (hash: N/0jPEvGNb25DvrH55KAo4wT1xlr30VbD4rmDHGaE0c=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl
                          rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 00:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:52:40:37:a7:5e:3a:3b:12:ad:19:44:a6:81:25:41:a0:60:6c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FFE90000, serialNumber=E9BFE0215B84F449D0BB55F37B2D6160D464C190
        Validity
            Not Before: Jul 23 22:14:57 2026 GMT
            Not After : Jul 25 00:26:57 2026 GMT
        Subject: CN=1ECEFC8A7A05A76973221731CD2E8E1A83DD8753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:02:ba:2a:b4:35:3e:ed:be:cf:c7:3b:52:
                    70:42:cf:45:74:51:24:90:7b:67:b6:a1:b7:a3:02:
                    d2:41:39:b0:9e:8d:fe:6e:8d:e9:ae:0f:36:c4:b9:
                    a0:f8:dc:ea:9a:1a:a4:5f:a6:c6:a5:4b:e4:23:a8:
                    eb:d9:76:a8:5e:6f:9f:28:eb:6c:0f:77:af:32:83:
                    f2:78:bb:12:35:6a:e9:93:be:57:ce:27:3d:83:ff:
                    c7:d4:7a:11:0c:a1:ec:b1:0e:dc:12:19:25:4b:86:
                    91:75:9f:d6:89:f8:86:6c:63:0a:d4:f3:85:5f:97:
                    d3:38:a3:27:bc:f3:9f:d0:35:f6:42:a7:fd:9d:e2:
                    29:7c:94:c1:70:bc:da:30:15:ad:81:9c:98:2f:c7:
                    ce:19:00:57:5c:82:73:4c:56:54:bc:c5:d4:75:d4:
                    b7:c9:21:47:ba:af:b1:bb:fe:2f:8c:55:eb:1b:5e:
                    4b:1f:39:1d:7f:c6:20:33:f5:62:0c:68:45:b6:b8:
                    dc:05:2b:84:c0:a9:87:2a:8c:71:41:e7:a7:51:b2:
                    e2:bf:b2:89:15:e5:a8:e1:a8:ef:dd:93:e5:1b:88:
                    50:45:53:76:15:6d:ae:08:d8:33:36:ce:63:bd:9d:
                    84:9d:9c:6d:25:4f:2b:27:d6:12:b7:91:38:49:bd:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CE:FC:8A:7A:05:A7:69:73:22:17:31:CD:2E:8E:1A:83:DD:87:53
            X509v3 Authority Key Identifier:
                keyid:E9:BF:E0:21:5B:84:F4:49:D0:BB:55:F3:7B:2D:61:60:D4:64:C1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6b_gIVuE9EnQu1Xzey1hYNRkwZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/43/E9BFE0215B84F449D0BB55F37B2D6160D464C190.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:e7:4f:a8:3e:86:a1:5e:9f:06:66:2d:90:08:f4:ea:71:
         7f:5b:a0:e1:66:be:6d:95:e0:31:28:af:24:8c:e4:9f:9d:b8:
         b4:6b:71:6e:13:16:58:0c:03:8e:4a:38:ac:0d:98:6b:af:50:
         7f:1c:59:c6:a6:36:36:0a:18:8c:ed:00:6b:67:93:cb:0a:f6:
         22:6d:e8:62:02:8a:6c:68:85:bb:62:b6:da:10:3d:1d:99:83:
         68:25:30:36:ff:e6:a4:9e:f1:ec:f0:ee:0a:11:73:3f:20:8a:
         78:08:16:7f:6f:b7:2b:af:10:e9:4b:1b:cd:03:b3:bc:96:ec:
         ec:44:2e:b3:e2:5d:93:da:11:85:3d:58:b3:5b:a4:5f:bd:a0:
         31:f1:63:47:6e:4e:0d:bd:6f:49:4a:6a:1a:98:60:b9:2e:a0:
         61:88:5d:1d:14:4f:92:1e:87:e9:1b:31:88:c0:2f:b3:b0:59:
         35:d0:1e:07:b3:8e:fe:09:de:e2:ee:33:4b:01:3b:a0:8f:c5:
         52:50:46:37:1f:0e:f1:8f:f8:68:08:d0:22:d1:2a:92:98:1c:
         77:ed:22:a2:95:bd:fa:1e:11:69:74:63:53:94:a6:60:76:ca:
         74:89:b1:2f:a7:26:7b:41:c4:51:fc:1e:d7:9e:fd:41:47:d2:
         bc:fb:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:16 2026 by rpki-client