Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          AnLsaOg8l4Mot0gnB6VXg5WPpK7+g7iDJS5s3zrhT84=
Subject key identifier:   30:17:C9:35:06:DD:E1:9D:E2:0B:43:79:48:2E:DD:D0:D4:B0:AB:E7
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       36C1196667112435DEDE2F8B010F41682811AFD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          08AF
Signing time:             Tue 12 May 2026 10:11:33 +0000
Manifest this update:     Tue 12 May 2026 10:06:33 +0000
Manifest next update:     Wed 13 May 2026 13:48:33 +0000
Files and hashes:         1: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
                          2: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
                          3: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
                          4: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
                          5: 3130332e31392e302e302f32322d3234203d3e2038383838.roa (hash: OdkPxJ/egLNYvt3ZKZFs00x32CRh57zZD7kdTb64n48=)
                          6: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
                          7: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
                          8: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
                          9: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
                          10: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
                          11: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
                          12: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
                          13: 3130332e31392e302e302f32322d3234203d3e2033323538.roa (hash: 7phVEmX0NGZNTERU01hd3o38S5hH/ZGyooQwdvUsQ1Y=)
                          14: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
                          15: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
                          16: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
                          17: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: qvBJAD/DVol2WqJ9XOD6ODdWx/5/8PSPCZKSdcYpkdc=)
                          18: 3230332e39362e3233362e302f32322d3234203d3e2038383838.roa (hash: llvx1nJPqemZ0rvO4OJjQbyJXb71XdenxrhQ2TIzXXs=)
                          19: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
                          20: 3230332e39362e3233362e302f32322d3234203d3e2033323538.roa (hash: JMaRsQ48zGb4xncBKzQEEQ2heSEKed6SCwNzvViFnYI=)
                          21: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c1:19:66:67:11:24:35:de:de:2f:8b:01:0f:41:68:28:11:af:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: May 12 10:06:33 2026 GMT
            Not After : May 13 13:48:33 2026 GMT
        Subject: CN=3017C93506DDE19DE20B4379482EDDD0D4B0ABE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:46:48:1e:2d:8a:4c:b7:c5:a2:36:d5:ab:
                    37:21:f2:9a:bd:9d:13:b2:d9:0b:d8:e5:59:73:1d:
                    8a:06:1d:32:cd:58:d1:a3:59:51:f1:b9:9f:d7:e6:
                    1e:3b:9e:de:9a:dc:3c:69:fb:98:a3:dc:7e:29:42:
                    b6:1f:90:37:f4:15:71:4b:08:51:09:cc:6b:44:28:
                    6f:f5:08:1d:2b:e4:f9:a5:90:9c:bf:75:2b:1b:2c:
                    d9:23:67:4f:52:27:8b:73:ae:ca:12:67:42:ca:d4:
                    be:f4:48:5c:0d:31:05:e5:8d:22:c9:2d:f5:98:05:
                    26:98:3b:f6:55:7d:4c:e7:9d:7b:08:43:ef:a0:fa:
                    f6:e9:ca:26:6b:40:d7:77:2d:33:ef:3b:a9:a1:1c:
                    9e:6f:03:ba:84:f4:69:53:96:9e:e6:f7:9b:68:44:
                    52:88:ba:b0:74:05:8f:c1:dd:04:66:21:98:63:00:
                    66:5e:85:51:4f:94:e2:d5:f1:fe:0c:27:ed:5f:9b:
                    19:65:e2:b3:52:07:10:a8:18:d4:8e:45:00:e8:aa:
                    22:c4:b3:27:6b:1d:b0:fc:0e:39:28:57:a1:ea:57:
                    fd:5c:82:d2:38:51:e1:54:12:79:2d:f7:12:99:9e:
                    af:96:05:7c:11:de:a3:4e:c2:00:08:77:60:16:e8:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:C9:35:06:DD:E1:9D:E2:0B:43:79:48:2E:DD:D0:D4:B0:AB:E7
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:02:b9:9e:ab:c1:c8:23:0a:a8:73:da:bd:92:1d:df:fc:
         a2:69:1f:d1:87:14:da:32:77:26:14:b1:9d:92:5c:f5:e3:1c:
         57:24:7b:9d:7a:4d:37:d5:de:b5:97:0e:72:63:d2:d6:fe:d8:
         8a:91:3d:24:68:74:8b:5f:c2:a5:fa:0e:ec:0b:e0:ba:a8:c0:
         a6:03:62:b9:33:da:c4:20:40:a2:61:a0:16:57:ef:ce:7a:23:
         55:2d:ed:25:4b:9f:f4:aa:1e:3c:79:0c:4d:19:5d:3e:2b:34:
         e0:4e:54:e6:e0:2d:21:f2:f4:3c:15:75:6f:35:00:14:65:fb:
         f4:2d:2e:6e:53:ce:0b:1d:31:ab:2b:17:15:08:61:02:97:da:
         79:03:f3:05:f8:19:97:bd:10:df:3b:32:3b:45:ef:d0:0e:bd:
         9c:fe:ed:61:85:d8:db:1c:09:b2:dd:d3:44:58:1b:f6:6e:c7:
         db:cc:97:43:e8:52:98:d7:5a:66:91:60:5e:96:f4:89:11:ba:
         96:f9:89:98:98:7e:54:bd:45:f6:fa:4e:58:7c:a8:88:a0:f0:
         22:71:43:2f:2e:ff:17:1a:43:13:44:6d:9a:ee:12:01:57:e1:
         8c:ac:14:7c:89:a0:ec:cd:c0:71:80:f4:a6:be:5d:f7:36:b5:
         3c:3f:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:02 2026 by rpki-client