Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
File:                     DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft (raw, json)
Hash identifier:          JrBssqh9eDl3SR9fQYbC2Tif1ai1XlieM/sY0DIl3eg=
Subject key identifier:   CA:EF:3C:14:5A:EA:28:9D:33:18:25:C4:8C:DF:5E:C5:7E:07:7A:0B
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Certificate issuer:       /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial:       31E656C309124462A02026C12D78FB9DF799BA4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
Manifest number:          09A2
Signing time:             Thu 26 Mar 2026 06:06:31 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 07:17:31 +0000
Files and hashes:         1: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (hash: D0Ow1HD5dL19BD0PK2OSn7PrujexMNUo6oIuSOROZDY=)
                          2: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (hash: BCi+oWVmoqOCXPGYoNN5Gsw3cvawNSr67DTbvpk/4oI=)
                          3: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (hash: VcHnZPXmg+gwqZFeMl1gjuitPawQ201SlIEuoE5gbAc=)
                          4: 3134322e3134372e39332e302f32342d3234203d3e203332373237.roa (hash: S0/99S4SQFCsn7C6fqH1eBp/mlFCWgTAUGYCWQSkqUg=)
                          5: 3134322e3134372e39312e302f32342d3234203d3e203632383035.roa (hash: P2oGoXE9s79xQs+izISwAhc+YwsVs9UuFxcGIqplUcs=)
                          6: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (hash: Ay+2RLs/lGDsNEwPaZB7ph1WGRZxvFl+JiT3aoRyP2Q=)
                          7: 3130342e3234352e382e302f32312d3234203d3e2036323333.roa (hash: toARjDv799USUlmcjzCD9e8PN8NqvuIHXY8whE+ZEs8=)
                          8: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (hash: aT+uZrC8MjUK0f1pXdDj3UAr44FEGYm2Xv5JMP1c4lw=)
                          9: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (hash: CM/1tvvJ+iG3JOaA56LGtrraZV8hJPHF16x5WexD3EA=)
                          10: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (hash: KfWnTMEVQvJybqIim3RIlHFlNK2Vzr7q/aC6EJcgMWk=)
                          11: 3130342e3234352e31302e302f32342d3234203d3e203336333531.roa (hash: Y3K45zh5z8NeSvOqnRV7qo6P/UbiRD3ZVtK0iG3l2t4=)
                          12: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (hash: T8524IkTl53YxIGY4nfQDm1ogpfKBQpuEVKmOtHeDPs=)
                          13: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (hash: XgEQDqckGRfEL8QiTRDOh1+DHEdKK9Jr8bCeRb2IXI8=)
                          14: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (hash: +srvz8C27iXoh4/wHeKT6bnnQhe+kCVRRtOx0VrIsuA=)
                          15: 3130342e3234352e31342e302f32342d3234203d3e2036323333.roa (hash: ZWLxz/UMof5CXOQxQiQYlJX05GocBRX3n7pyJMgwDaw=)
                          16: 3134322e3134372e39322e302f32342d3234203d3e203632383035.roa (hash: 8n+PAt2nTSgexhYzl45tiKTEPLRCJIy6tnkFSvykAhc=)
                          17: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (hash: J2KqAEgEY3NPoq76uN/b3hGzatbGYhM3NPozvwNZlH4=)
                          18: DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl (hash: 4sdkXYTUQH4m6dK55JDWbKF8Ncu1IAEmWXYJJDcyKFk=)
                          19: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (hash: PsaxYaFFNgIVFn8NYLn5iFDo26nPs15VoRUG+gbERz0=)
                          20: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (hash: 7kLebjxjj8bDZhH97mL0NhhYPLU3LGJ6JEojV7/KLOY=)
                          21: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (hash: ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
                          rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e6:56:c3:09:12:44:62:a0:20:26:c1:2d:78:fb:9d:f7:99:ba:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Validity
            Not Before: Mar 26 06:01:31 2026 GMT
            Not After : Mar 27 07:17:31 2026 GMT
        Subject: CN=CAEF3C145AEA289D331825C48CDF5EC57E077A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:e7:96:b1:22:df:cf:a2:bb:30:8c:86:ac:
                    39:c1:e1:9b:c2:24:c3:69:a4:45:d1:2b:c4:26:5a:
                    1e:11:3e:e0:6e:65:09:41:ae:1e:51:34:b9:3c:21:
                    60:b1:1f:81:0f:25:3b:ac:59:63:b6:a9:82:0d:69:
                    a0:7d:38:c2:d5:a8:c8:49:17:76:00:35:de:7b:cb:
                    de:80:7b:a4:ae:13:19:ba:49:5a:53:25:92:b8:42:
                    66:c3:17:8c:ec:21:05:e8:f7:51:a0:5f:26:10:5f:
                    57:49:b6:89:c7:34:09:1b:b8:bc:0d:37:4b:4d:29:
                    08:64:f6:73:a5:53:9b:33:a4:65:33:64:9f:1b:50:
                    fd:e0:ea:17:74:80:bd:58:85:b1:8c:b5:fd:ea:a2:
                    51:3e:74:0a:52:99:ff:4d:7c:6c:44:61:b1:c5:ef:
                    99:ec:0c:1a:81:19:62:7d:3c:74:72:36:3f:a3:62:
                    75:4d:52:1d:30:91:08:8c:e6:7d:48:b9:4f:64:d4:
                    a4:bd:d6:48:85:f7:c2:2f:a9:c9:3a:35:0f:22:20:
                    3e:b4:c8:bf:0d:38:b9:ed:17:91:8b:f3:9c:3a:64:
                    98:e1:9b:ad:ff:d8:5e:61:f2:32:53:56:92:b8:3a:
                    2c:f2:f2:f0:e5:15:81:cf:f4:37:54:03:f8:d0:34:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:3C:14:5A:EA:28:9D:33:18:25:C4:8C:DF:5E:C5:7E:07:7A:0B
            X509v3 Authority Key Identifier:
                keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:6e:8e:21:66:e3:8f:e7:3f:47:52:33:04:08:a0:f5:53:
         10:d1:11:2f:d5:31:c5:8d:17:8e:96:f3:70:60:26:f2:24:9f:
         7f:fd:0f:73:ed:b8:ad:7f:4c:36:89:ea:75:1f:24:56:e5:0f:
         f0:54:21:fd:99:99:8e:82:4e:c3:dc:12:49:2a:11:80:fb:44:
         03:c8:27:7e:56:9d:96:3b:95:c1:73:33:28:80:44:a7:2c:d4:
         3e:5c:cf:14:09:3e:58:93:e8:3c:42:bd:ec:eb:52:32:00:f0:
         89:a6:5f:74:bb:fc:ce:e8:bb:dc:47:d9:cd:dd:14:dd:2c:de:
         25:fd:86:7c:8e:f0:56:3b:35:6b:b2:1b:e6:2d:e9:57:7a:ed:
         c0:d3:e0:63:e2:fd:8b:c1:eb:5f:f1:3e:a5:5e:fe:90:7d:d1:
         04:f0:7f:ec:7e:a8:72:c6:69:6b:e7:23:57:d9:ce:58:4e:37:
         88:36:ae:d6:7c:e5:c7:bf:3e:ad:6a:db:b3:ab:7c:4b:dd:48:
         6a:38:3d:d2:83:8f:43:14:d5:83:63:37:47:32:5e:6d:f0:4c:
         1c:ff:b8:8b:72:c7:30:c9:f3:ec:18:ec:58:00:5f:0d:61:2a:
         c0:e3:99:80:04:2f:93:8f:2f:6c:0c:5a:33:99:ef:60:36:63:
         32:a6:7d:b3
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIUMeZWwwkSRGKgICbBLXj7nfeZukowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwMzI2MDYwMTMxWhcNMjYwMzI3MDcxNzMx
WjAzMTEwLwYDVQQDEyhDQUVGM0MxNDVBRUEyODlEMzMxODI1QzQ4Q0RGNUVDNTdF
MDc3QTBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73nlrEi38+i
uzCMhqw5weGbwiTDaaRF0SvEJloeET7gbmUJQa4eUTS5PCFgsR+BDyU7rFljtqmC
DWmgfTjC1ajISRd2ADXee8vegHukrhMZuklaUyWSuEJmwxeM7CEF6PdRoF8mEF9X
SbaJxzQJG7i8DTdLTSkIZPZzpVObM6RlM2SfG1D94OoXdIC9WIWxjLX96qJRPnQK
Upn/TXxsRGGxxe+Z7AwagRlifTx0cjY/o2J1TVIdMJEIjOZ9SLlPZNSkvdZIhffC
L6nJOjUPIiA+tMi/DTi57ReRi/OcOmSY4Zut/9heYfIyU1aSuDos8vLw5RWBz/Q3
VAP40DR5KwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFMrvPBRa6iidMxglxIzfXsV+
B3oLMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNG
REEyQkNGNzNDMTlBNjI0OEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAKybo4hZuOP5z9HUjMECKD1
UxDRES/VMcWNF46W83BgJvIkn3/9D3PtuK1/TDaJ6nUfJFblD/BUIf2ZmY6CTsPc
EkkqEYD7RAPIJ35WnZY7lcFzMyiARKcs1D5czxQJPliT6DxCvezrUjIA8ImmX3S7
/M7ou9xH2c3dFN0s3iX9hnyO8FY7NWuyG+Yt6Vd67cDT4GPi/YvB61/xPqVe/pB9
0QTwf+x+qHLGaWvnI1fZzlhON4g2rtZ85ce/Pq1q27OrfEvdSGo4PdKDj0MU1YNj
N0cyXm3wTBz/uItyxzDJ8+wY7FgAXw1hKsDjmYAEL5OPL2wMWjOZ72A2YzKmfbM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:20 2026 by rpki-client