Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          ioSGUW5E7P9EQIR4byYQ+ECgAZo65YGAJXTcEN9CoZI=
Subject key identifier:   F7:BF:66:A6:A2:BE:E1:9E:DB:10:E8:24:6A:BB:91:98:38:4B:5B:23
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       643EE71E64935F8ED7FD612D7E8D234C11AD14D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          0874
Signing time:             Sat 23 Aug 2025 20:10:28 +0000
Manifest this update:     Sat 23 Aug 2025 20:05:28 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:28 +0000
Files and hashes:         1: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: T8524IkTl53YxIGY4nfQDm1ogpfKBQpuEVKmOtHeDPs=)
                          2: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: Y3K45zh5z8NeSvOqnRV7qo6P/UbiRD3ZVtK0iG3l2t4=)
                          3: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: XgEQDqckGRfEL8QiTRDOh1+DHEdKK9Jr8bCeRb2IXI8=)
                          4: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: PsaxYaFFNgIVFn8NYLn5iFDo26nPs15VoRUG+gbERz0=)
                          5: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: KfWnTMEVQvJybqIim3RIlHFlNK2Vzr7q/aC6EJcgMWk=)
                          6: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: J2KqAEgEY3NPoq76uN/b3hGzatbGYhM3NPozvwNZlH4=)
                          7: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: Ay+2RLs/lGDsNEwPaZB7ph1WGRZxvFl+JiT3aoRyP2Q=)
                          8: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: D0Ow1HD5dL19BD0PK2OSn7PrujexMNUo6oIuSOROZDY=)
                          9: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: aT+uZrC8MjUK0f1pXdDj3UAr44FEGYm2Xv5JMP1c4lw=)
                          10: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: +srvz8C27iXoh4/wHeKT6bnnQhe+kCVRRtOx0VrIsuA=)
                          11: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: S0/99S4SQFCsn7C6fqH1eBp/mlFCWgTAUGYCWQSkqUg=)
                          12: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 7kLebjxjj8bDZhH97mL0NhhYPLU3LGJ6JEojV7/KLOY=)
                          13: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 8n+PAt2nTSgexhYzl45tiKTEPLRCJIy6tnkFSvykAhc=)
                          14: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: 0G6Y3H7mrNmOuV95GJ5F8jMJolIMtx19vApbQMBnlX8=)
                          15: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: P2oGoXE9s79xQs+izISwAhc+YwsVs9UuFxcGIqplUcs=)
                          16: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: toARjDv799USUlmcjzCD9e8PN8NqvuIHXY8whE+ZEs8=)
                          17: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: ZWLxz/UMof5CXOQxQiQYlJX05GocBRX3n7pyJMgwDaw=)
                          18: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: CM/1tvvJ+iG3JOaA56LGtrraZV8hJPHF16x5WexD3EA=)
                          19: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=)
                          20: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: BCi+oWVmoqOCXPGYoNN5Gsw3cvawNSr67DTbvpk/4oI=)
                          21: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: VcHnZPXmg+gwqZFeMl1gjuitPawQ201SlIEuoE5gbAc=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3e:e7:1e:64:93:5f:8e:d7:fd:61:2d:7e:8d:23:4c:11:ad:14:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Aug 23 20:05:28 2025 GMT
            Not After : Aug 25 00:00:28 2025 GMT
        Subject: CN=F7BF66A6A2BEE19EDB10E8246ABB9198384B5B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:44:26:62:f5:07:94:a9:fb:7c:75:21:47:
                    7b:c2:01:52:b0:69:9f:bc:76:6f:59:8a:31:43:77:
                    cf:44:fa:a7:dc:63:02:56:ec:54:0c:d2:7f:01:ab:
                    e3:e3:6f:0e:92:1f:ed:e8:1a:d7:c8:a5:cc:b1:83:
                    52:be:3a:1a:f0:a6:08:81:14:65:08:2d:ea:ad:de:
                    0c:44:fc:2c:35:6b:34:0a:43:52:1d:47:aa:a8:e4:
                    d4:35:ae:1e:45:90:3b:07:30:83:fe:61:53:c7:26:
                    56:ad:09:6f:1a:65:88:97:ab:4d:be:58:de:3c:37:
                    4c:4c:00:70:75:fc:ff:23:b7:5a:9c:9d:bf:93:bb:
                    4f:f3:10:0b:77:37:0d:a4:9f:b4:4f:7f:a5:fd:4f:
                    e1:70:be:59:3f:78:dd:06:f9:3a:4f:4b:1d:b6:56:
                    c3:ab:96:5b:b8:7b:71:49:bc:95:3e:e4:99:25:10:
                    ed:c2:9b:90:06:96:80:a8:83:6b:fa:df:4e:01:66:
                    33:65:95:22:05:3a:c6:07:f5:dd:34:37:ad:f3:f0:
                    92:9c:25:2f:d5:2f:5b:9e:91:57:c2:5e:40:74:d6:
                    88:b9:76:26:aa:98:a4:ad:a7:7f:f6:9d:8b:74:3e:
                    48:bb:75:4b:2e:fa:df:8b:6f:2f:c9:14:b5:a6:30:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BF:66:A6:A2:BE:E1:9E:DB:10:E8:24:6A:BB:91:98:38:4B:5B:23
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:be:7a:66:88:85:4d:c5:2c:1d:21:a7:63:c0:de:34:97:
         a7:8b:8d:49:ad:48:38:ab:d3:b0:61:57:9d:5f:fe:b8:5e:2c:
         bf:80:d5:b8:15:7d:de:9f:fe:99:ca:7c:81:da:d1:51:e0:d5:
         45:9d:1e:2e:7d:30:24:7a:e4:a7:29:0f:b4:4e:22:dc:73:6d:
         92:02:54:19:3c:54:c2:ae:09:94:f8:87:ba:a8:0f:dd:a8:40:
         8c:9b:dd:74:7a:7d:ef:42:52:e4:86:2f:29:7c:be:20:4a:b5:
         81:ef:35:11:e1:16:81:67:ea:90:16:5d:8b:4a:3f:bc:66:07:
         ad:f7:7c:a3:d4:05:cc:06:95:85:41:89:3a:22:c3:de:0b:ed:
         35:c5:04:4f:09:0b:25:83:5d:44:13:46:88:9d:98:0b:76:90:
         67:ee:01:ec:01:dc:66:88:44:e9:59:01:5f:9d:7b:d7:ee:54:
         93:b2:45:47:ed:b6:fb:0c:fb:c6:25:20:f8:b4:b2:ab:65:d1:
         08:70:92:07:19:9f:b8:22:cc:cf:2d:5a:4c:6e:07:c6:82:b0:
         4c:7e:e7:f3:ba:73:ce:cb:f7:8c:85:ed:2b:bf:f7:1f:7e:d5:
         93:c5:03:10:97:b7:30:9d:de:b9:0a:08:53:8c:39:cf:4e:44:
         97:59:18:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:02:36 2025 by rpki-client