Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File:                     5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier:          uEi70Gzb94ZnJOH2mOsamMWuyk3S64FLp93RSe5yqkw=
Subject key identifier:   42:AB:F7:F8:FF:D5:4B:22:41:F1:B1:1F:D9:1B:1D:E2:F8:E8:74:70
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer:       /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial:       242A45CDDFBB7862E07AF36248BF90E2886A5BA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number:          BA
Signing time:             Thu 23 Jul 2026 09:24:57 +0000
Manifest this update:     Thu 23 Jul 2026 09:19:57 +0000
Manifest next update:     Fri 24 Jul 2026 12:39:57 +0000
Files and hashes:         1: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
                          2: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
                          3: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
                          4: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
                          5: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: kqFGSoW652P8vErpPgAquD96E2t/6BShqlP5sHNJwGM=)
                          6: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
                          7: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
                          8: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
                          9: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
                          10: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
                          11: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
                          rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 12:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:45:cd:df:bb:78:62:e0:7a:f3:62:48:bf:90:e2:88:6a:5b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
        Validity
            Not Before: Jul 23 09:19:57 2026 GMT
            Not After : Jul 24 12:39:57 2026 GMT
        Subject: CN=42ABF7F8FFD54B2241F1B11FD91B1DE2F8E87470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:de:f4:7f:b3:74:5d:d9:65:58:fb:8b:f6:
                    bd:cc:9e:53:a0:76:17:6e:11:02:31:5b:0b:9f:49:
                    c0:62:27:65:e2:29:10:9f:ac:26:c5:e4:7b:ae:4e:
                    29:cc:fd:10:c3:f7:aa:96:19:f3:2a:76:34:dc:d0:
                    f4:02:63:fb:cd:03:02:e4:32:a4:cd:a8:71:c8:3e:
                    63:50:78:d8:9f:21:35:03:cc:dd:00:33:02:2b:43:
                    08:a6:ec:f5:8d:f3:e8:07:53:43:fa:15:b6:ad:01:
                    37:1b:c9:ed:0c:96:17:c7:db:d8:69:17:6c:0e:45:
                    82:fb:a7:bd:7b:d9:59:36:67:e2:15:68:8d:c9:23:
                    95:00:12:0e:ae:80:12:5d:5e:e9:69:ea:35:a8:73:
                    a1:2e:ed:72:ff:7e:28:0a:1d:f1:20:5f:18:7d:c2:
                    c7:ec:e6:6b:db:76:49:31:14:13:23:5b:aa:07:cb:
                    28:98:87:2c:98:68:86:64:63:fa:da:76:84:32:15:
                    44:bf:9d:1c:1f:60:00:d2:4b:c5:34:3e:bc:bf:2d:
                    f6:ff:de:f0:b9:61:ff:8c:cd:47:ba:9b:ab:5e:47:
                    56:c4:45:1b:88:9e:05:75:70:60:95:54:0d:20:20:
                    03:5c:57:f5:07:bc:46:fd:de:25:bc:b5:02:53:ac:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AB:F7:F8:FF:D5:4B:22:41:F1:B1:1F:D9:1B:1D:E2:F8:E8:74:70
            X509v3 Authority Key Identifier:
                keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:90:ef:e8:e7:ce:c8:99:b7:ba:5b:59:01:f0:42:9f:9a:
         cd:bb:0e:13:45:5a:3f:ab:75:1b:76:6a:a5:0e:c9:c6:01:b0:
         63:47:77:b1:e2:23:ef:7d:40:13:14:e9:97:81:dd:c4:77:38:
         5b:2f:e5:fa:1a:c9:26:47:21:04:80:b3:2a:0a:e9:35:2b:d9:
         0a:74:0c:e9:3c:14:77:41:d0:65:36:01:84:67:22:c0:bc:9d:
         c0:52:a3:ba:9a:80:0d:b4:9b:6a:f0:1d:95:dd:54:e2:45:b6:
         27:b7:5a:a8:b1:db:f5:f1:41:43:55:82:5c:80:7f:0c:0a:ab:
         24:6f:a3:22:9a:0b:d0:e7:d0:46:3c:79:f0:b7:34:29:df:67:
         ea:60:aa:68:ce:1f:da:fb:fa:4a:29:6f:f4:4a:d8:22:48:04:
         32:da:70:a0:58:99:ce:fc:c3:ac:ce:a8:8c:9d:b1:0b:05:52:
         74:8f:f9:0d:b2:42:95:77:13:50:f2:cd:28:06:4a:b9:74:ca:
         89:59:8d:b2:55:fa:76:b6:36:e7:96:89:75:5d:11:87:3d:fd:
         e2:af:f2:bc:f0:68:e3:04:a1:2c:52:43:86:e6:42:f6:1a:10:
         ed:37:b5:26:21:2d:08:67:44:cb:c3:74:8b:c8:50:54:15:54:
         ae:15:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:01:46 2026 by rpki-client