Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
File:                     8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json)
Hash identifier:          VE+CYraKQk126U8FrUIvPdIHagS4UEwZ0KIOqb7HtzY=
Subject key identifier:   F4:F1:51:11:96:74:8E:1A:9F:C7:ED:62:C6:75:74:1A:AD:75:9D:AB
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       289C9E9CE227360B1922F5B0A9CA8EC40AEC3901
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
Manifest number:          0ABC
Signing time:             Tue 22 Sep 2026 17:49:58 +0000
Manifest this update:     Tue 22 Sep 2026 17:44:58 +0000
Manifest next update:     Wed 23 Sep 2026 21:37:58 +0000
Files and hashes:         1: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: URjxs2pYXMgSsRubS4bTPCGcSFCNZx3JFBExBL8gEVU=)
                          2: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: vT1Bi1E42esOqDhk6jaaZaT7b++scr5Ql7nsLVhnpFw=)
                          3: 323630343a653863303a3a2f33322d3438203d3e2038383838.roa (hash: glekDeUgXWlI8WExfCgOlnFZXkLmuhBsXXbJb/HS10Q=)
                          4: 323630343a653863303a3a2f33322d3438203d3e2039333132.roa (hash: Gx4JSdXhsb3t6cRlU5pcEof2tSSnaoYVAUmDF07dqWM=)
                          5: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 1L3r9dAb4ArTs+JwVFqTc6fBNWbhuqIUWzPbtIV0XLM=)
                          6: 323630343a653863303a3a2f33322d3438203d3e2033323034.roa (hash: 6Pp54gQT3IByeqo+WuS3or3CblQUutD2QvvflyjOfCo=)
                          7: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: wElBQ2J8Npd+aQ0+qgvvzRNMA0Gs9g0abGDOi6K8G/c=)
                          8: 323630343a653863303a3a2f33322d3438203d3e2034373835.roa (hash: t6Lqf90fM+B1Alaz+AUSvgl8z7na7/3WnB/tp3E/5LA=)
                          9: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: aPcairJzpYP/EQ9G2E+s+69rjrG2KaX8vdqp0ISsIkA=)
                          10: 323630343a653863303a3a2f33322d3438203d3e2033323538.roa (hash: tihNcymQDG5rLDuTNdu8vKzzLueFMEP6ix9PxPTPBPo=)
                          11: 323630343a653863303a3a2f33322d3438203d3e2033323134.roa (hash: wB7fCIOvBoo2CFeKFSOnjURbXONS2wJ8mbqMhBnRDL8=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9c:9e:9c:e2:27:36:0b:19:22:f5:b0:a9:ca:8e:c4:0a:ec:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Sep 22 17:44:58 2026 GMT
            Not After : Sep 23 21:37:58 2026 GMT
        Subject: CN=F4F1511196748E1A9FC7ED62C675741AAD759DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:99:53:7c:66:2d:34:36:2c:c2:6c:d3:f5:
                    67:3b:fc:ac:9d:79:bd:7b:fe:0f:8c:79:26:fc:d6:
                    c6:44:5e:bc:d1:a3:79:2b:9f:b6:6e:99:7b:a7:6a:
                    2a:01:d0:1b:9a:8e:b7:65:78:0f:53:bc:0e:82:94:
                    50:94:35:39:f0:27:f0:de:f3:86:62:f2:0a:47:e7:
                    e2:b6:15:31:dc:fd:ea:69:03:cf:2b:5c:2f:23:87:
                    c1:8f:70:de:da:2e:27:8d:d7:5a:64:67:02:1b:70:
                    1a:e7:47:54:61:56:95:47:f6:0e:9a:cc:a3:56:42:
                    69:17:70:d4:a6:6a:f2:02:22:a4:01:a4:1e:83:29:
                    68:e8:62:5a:8c:ce:5e:06:18:0b:36:9e:fa:9f:4a:
                    f2:dd:78:f2:79:17:cf:12:e5:8f:81:24:f7:f6:c9:
                    4f:fc:48:bb:25:03:01:31:9c:94:0f:ff:07:8b:2c:
                    1d:5b:64:6b:db:83:20:70:cc:db:13:c1:79:48:54:
                    02:96:a9:a6:0e:fe:6a:28:4a:2a:b3:12:78:55:c6:
                    0d:44:5c:be:c4:72:13:6c:15:61:1e:8b:7e:76:a9:
                    bc:f0:00:c4:dd:b5:5e:32:f9:fb:c5:bb:ba:60:b4:
                    8b:79:a9:dc:7d:8a:7f:2f:6c:13:22:df:fa:d1:9f:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:51:11:96:74:8E:1A:9F:C7:ED:62:C6:75:74:1A:AD:75:9D:AB
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:ca:30:0e:61:9e:fa:67:c4:a8:71:0a:17:29:ff:b2:9d:
         a7:f6:81:89:f6:56:71:29:9c:f9:59:5d:42:b6:8e:4e:41:b1:
         a9:e1:6a:c6:64:3a:be:ac:25:6c:83:34:73:ac:0d:8f:8b:57:
         3e:08:2e:e7:b8:3e:bf:91:1a:fc:b0:3e:06:79:87:7e:bf:bf:
         e5:1e:69:0f:32:ce:49:79:02:75:a7:4b:9b:d9:be:2a:29:3e:
         36:3a:b7:c5:c1:08:41:42:47:83:d3:bd:29:37:d2:ba:0d:6a:
         d2:20:23:65:af:7d:3d:82:96:a4:7f:21:4d:e1:4b:c7:09:97:
         79:1f:3d:31:60:ac:13:06:14:bd:f6:a0:aa:4c:4e:d6:0c:05:
         a0:19:95:fd:e6:d4:2c:83:08:ba:11:00:f6:5f:87:12:df:16:
         5c:34:77:7a:39:ed:4e:0f:72:3e:24:0e:43:eb:d1:c4:ff:25:
         e3:06:d2:94:8e:a8:c0:cc:ee:4d:0e:b3:77:bd:40:cf:d4:1c:
         9f:f5:68:c6:89:5e:81:4b:78:ec:25:df:8f:78:ee:cc:0c:e4:
         a5:d2:b5:e0:ca:5e:7c:4e:55:35:3c:a8:1e:05:f4:d1:16:5a:
         12:b5:61:9a:2f:19:98:6f:a8:2b:87:ee:af:d1:f9:94:4d:0b:
         20:88:b4:cc
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUKJyenOInNgsZIvWwqcqOxArsOQEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2
ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwOTIyMTc0NDU4WhcNMjYwOTIzMjEzNzU4
WjAzMTEwLwYDVQQDEyhGNEYxNTExMTk2NzQ4RTFBOUZDN0VENjJDNjc1NzQxQUFE
NzU5REFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYKZU3xmLTQ2
LMJs0/VnO/ysnXm9e/4PjHkm/NbGRF680aN5K5+2bpl7p2oqAdAbmo63ZXgPU7wO
gpRQlDU58Cfw3vOGYvIKR+fithUx3P3qaQPPK1wvI4fBj3De2i4njddaZGcCG3Aa
50dUYVaVR/YOmsyjVkJpF3DUpmryAiKkAaQegylo6GJajM5eBhgLNp76n0ry3Xjy
eRfPEuWPgST39slP/Ei7JQMBMZyUD/8HiywdW2Rr24MgcMzbE8F5SFQClqmmDv5q
KEoqsxJ4VcYNRFy+xHITbBVhHot+dqm88ADE3bVeMvn7xbu6YLSLeancfYp/L2wT
It/60Z8IPQIDAQABo4ICazCCAmcwHQYDVR0OBBYEFPTxURGWdI4an8ftYsZ1dBqt
dZ2rMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw
Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz
YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4
MzNkNjRlNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5
NTMxMEZBQzM3NDc0QzBFODkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHq8yjAOYZ76Z8SocQoXKf+y
naf2gYn2VnEpnPlZXUK2jk5BsanhasZkOr6sJWyDNHOsDY+LVz4ILue4Pr+RGvyw
PgZ5h36/v+UeaQ8yzkl5AnWnS5vZviopPjY6t8XBCEFCR4PTvSk30roNatIgI2Wv
fT2ClqR/IU3hS8cJl3kfPTFgrBMGFL32oKpMTtYMBaAZlf3m1CyDCLoRAPZfhxLf
Flw0d3o57U4Pcj4kDkPr0cT/JeMG0pSOqMDM7k0Os3e9QM/UHJ/1aMaJXoFLeOwl
34947swM5KXSteDKXnxOVTU8qB4F9NEWWhK1YZovGZhvqCuH7q/R+ZRNCyCItMw=
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:34:48 2026 by rpki-client