Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
File:                     09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft (raw, json)
Hash identifier:          qpvf3L24Soci47EnUHjrLAGq4t1D5GKWsnzVDCZB8c0=
Subject key identifier:   99:B4:42:26:97:B1:7C:2E:CE:6F:EB:62:E6:48:21:8A:36:7E:F1:7F
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       22B7A57DCD410A0C3CBFE4BCE69295CE0AE68EDE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
Manifest number:          07F8
Signing time:             Mon 20 Oct 2025 05:13:56 +0000
Manifest this update:     Mon 20 Oct 2025 05:08:56 +0000
Manifest next update:     Tue 21 Oct 2025 06:32:56 +0000
Files and hashes:         1: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (hash: lxNMXhJ8PunKxGuPGw3R8gcSCkFgqwiA/ZtMzbITXpo=)
                          2: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (hash: OYdmJbmvYOajzS/4jIkl1VnoVntRakYkyR5U+69qNDY=)
                          3: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (hash: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc=)
                          4: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (hash: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU=)
                          5: 32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (hash: nv/mLyX2nVsa88Sfp2kWm57EuBorNnCenO2pgz5r36o=)
                          6: 09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl (hash: QpcMRx53EAIFmkk//+vmiQplKAw0eDwuFfjwYowjH58=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b7:a5:7d:cd:41:0a:0c:3c:bf:e4:bc:e6:92:95:ce:0a:e6:8e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Oct 20 05:08:56 2025 GMT
            Not After : Oct 21 06:32:56 2025 GMT
        Subject: CN=99B4422697B17C2ECE6FEB62E648218A367EF17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:dd:b8:36:c2:81:00:2d:bf:a7:b9:ce:29:
                    d8:b0:31:db:63:1b:41:6c:56:5d:8c:f3:d5:ef:5e:
                    db:4e:b4:58:9a:c4:89:f2:9e:70:e9:be:f6:5d:eb:
                    91:ca:ef:cd:54:10:00:03:23:ae:35:5c:84:a9:9a:
                    55:ea:7d:6f:fe:e7:c6:56:81:ec:d2:4b:64:96:e7:
                    fc:38:aa:dc:64:e7:2b:ee:8b:6d:39:40:5e:e7:9b:
                    f4:2a:d4:73:a3:2e:a8:a4:8a:d9:19:20:d8:05:b4:
                    cb:7d:35:25:bd:f3:79:39:50:cf:9a:82:59:f2:89:
                    d9:cc:9c:2a:83:14:b2:68:fa:dd:b0:e7:dc:b0:d5:
                    c4:11:00:3a:77:f2:45:66:54:32:8c:a0:42:49:90:
                    c9:75:4e:b7:24:bd:a4:ba:a6:30:1d:b7:98:c3:08:
                    d5:fe:0f:28:3f:38:67:cc:c9:3b:d4:38:33:ce:fc:
                    8d:d5:72:65:56:43:95:cb:52:ae:a5:77:cb:3d:6c:
                    2a:a7:e8:f5:2d:d1:c6:62:a3:20:84:80:3d:b3:60:
                    28:98:6c:19:98:20:e5:ae:f3:33:ff:91:9c:d1:14:
                    83:e3:00:5e:91:4c:07:e0:82:98:67:4b:7d:3a:ea:
                    85:7e:dd:fc:19:f1:9a:5d:04:40:d7:d2:a0:3d:f3:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:42:26:97:B1:7C:2E:CE:6F:EB:62:E6:48:21:8A:36:7E:F1:7F
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:70:5e:ba:93:b5:02:4f:eb:12:68:b5:49:32:8a:f3:04:57:
         7d:a8:b4:a7:ca:bf:43:a0:bc:db:e6:8d:1d:0f:89:1e:d1:fe:
         ed:b1:d5:48:d1:b7:cc:17:59:38:df:ba:a9:80:35:e8:db:f0:
         3b:f8:0d:d4:22:e7:fe:f2:c9:55:18:88:a2:76:bc:e5:5c:24:
         84:d5:21:bf:e0:63:9e:02:99:7a:0a:b9:b6:ab:e0:bf:7d:ee:
         58:7b:f9:b2:07:86:59:09:13:3b:15:8d:ba:65:45:c2:f6:b0:
         b6:ea:1f:45:b8:3b:2a:bc:ec:35:2a:31:74:f0:e8:98:e1:09:
         14:ec:0f:af:1a:ef:f4:45:11:cb:37:fc:f2:a5:d7:56:f9:0e:
         80:67:66:a4:26:49:d7:75:d0:0b:6d:d0:45:91:9b:5c:50:4c:
         58:35:b9:ab:1f:de:3a:83:a6:70:ab:df:1d:ea:8d:d0:0e:f9:
         c5:56:78:1e:c9:10:fe:75:6d:a8:ae:ee:e8:93:2d:95:4c:32:
         67:60:5c:ba:fa:15:95:4c:d7:b6:fb:86:1a:d4:71:4a:50:db:
         88:ea:6a:4f:5c:fd:8b:18:c5:d2:ba:f2:90:44:89:6a:49:2c:
         bf:5a:6a:10:93:4e:54:13:ef:76:b2:04:05:3f:ea:d0:70:a3:
         3a:83:4b:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:36 2025 by rpki-client