$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: 2NQ9fvSfZ0nw4jvk3p5EMcbJBbT+19O+Pr/3hzmnJP0= Subject key identifier: B6:37:63:5F:3E:61:00:38:49:78:08:37:26:44:8A:49:C2:EF:C5:33 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 576341382B282B7347A1C7D589E745EE3B177453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 08E3 Signing time: Thu 23 Oct 2025 13:51:30 +0000 Manifest this update: Thu 23 Oct 2025 13:46:30 +0000 Manifest next update: Fri 24 Oct 2025 16:58:30 +0000 Files and hashes: 1: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 2: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 3: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 4: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 5: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 6: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 7: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 8: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 9: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 10: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 11: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 12: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: BNX920kzpRk4IdxDvrdbnsVJRq0aq9sS8E7YhVPu164=) 13: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 14: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 15: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 16: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 17: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 18: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 19: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 20: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 21: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 22: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 23: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 24: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 25: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 26: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 27: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 28: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 29: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 30: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 16:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:63:41:38:2b:28:2b:73:47:a1:c7:d5:89:e7:45:ee:3b:17:74:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Oct 23 13:46:30 2025 GMT Not After : Oct 24 16:58:30 2025 GMT Subject: CN=B637635F3E6100384978083726448A49C2EFC533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:1b:6c:fa:1f:83:37:62:d9:b3:7d:7e:5a: 79:00:85:1d:2d:4f:31:7d:8e:40:ee:3a:0c:b6:4d: 31:1f:0c:9d:6d:20:1a:07:49:a9:24:90:50:0a:6c: 97:e4:30:d4:4f:bc:53:28:5b:0c:35:b4:7e:0d:07: 0b:d0:b7:ba:03:26:47:17:05:44:4c:fa:46:3f:e7: 3c:c8:4e:4b:45:a3:f3:44:32:ac:bc:52:86:db:95: 34:98:83:4a:3b:d7:6b:6e:a0:e9:10:c3:ad:ce:75: a3:12:16:49:bf:91:f5:c1:3e:a3:f4:2f:13:83:98: 4a:4d:ff:ef:5b:ef:ca:44:4c:10:98:3b:34:ad:11: ee:a8:ae:99:ea:64:d8:a1:1d:5e:c1:ad:b1:3d:71: fb:90:e7:97:81:1c:a0:bd:a3:54:6a:c1:97:c2:68: 3d:2b:7d:7a:5d:db:c3:8c:b2:6d:a5:d5:8b:e7:be: 57:1a:ca:41:de:72:71:1e:5e:b8:75:f4:55:7a:a0: 1c:06:78:c7:87:20:f9:8f:27:76:e8:9a:18:a4:1d: 03:ca:da:78:45:4f:bd:e2:6a:0d:57:05:8c:0a:d2: 0d:ea:b2:5e:ee:28:16:9a:22:31:35:5c:13:c4:ba: f7:8c:a0:87:f2:66:ad:7d:ae:49:ad:37:75:15:91: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:37:63:5F:3E:61:00:38:49:78:08:37:26:44:8A:49:C2:EF:C5:33 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c5:a5:7c:ab:b9:95:08:59:e1:49:7d:00:ec:6e:1f:93:fa: e3:a0:fd:34:e7:ad:d4:fc:b6:d8:85:dd:e9:d3:a2:e4:90:75: 72:03:12:b5:bf:f4:bc:2a:19:f6:70:96:30:da:da:0a:44:3a: 4a:ca:e4:eb:03:8a:40:e7:75:a4:72:83:47:64:1f:55:c5:08: 39:0d:3c:7d:37:17:78:a1:d1:bd:f9:0c:2d:8e:e3:57:2e:0e: 1c:86:0c:36:7c:aa:86:1a:49:67:c2:1a:57:b4:4d:6c:11:c4: df:54:49:bc:31:b4:c0:cb:92:9d:c3:35:d7:2c:8a:43:94:21: 37:52:c8:dc:cc:4d:94:82:b0:67:76:2c:a2:ec:56:df:03:37: ba:ea:d1:2a:2a:5b:4e:a4:e5:a8:c7:55:98:f7:53:66:fc:23: a8:6c:f5:6e:ac:ed:64:71:6d:b7:51:19:fb:72:42:0a:da:e4: 70:28:54:fe:a4:2d:29:03:5d:53:59:42:5f:75:c8:3e:7d:3f: 3a:5a:e4:4a:43:78:94:03:f6:de:80:7e:90:10:91:00:28:28: 5e:c6:5b:19:62:25:b6:bc:41:64:cf:6a:46:f5:bd:c1:a3:39: 73:91:7c:99:75:38:f3:6c:9a:82:4f:80:8e:50:f5:e8:bd:41: 31:06:55:f8 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUV2NBOCsoK3NHocfViedF7jsXdFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTEwMjMxMzQ2MzBaFw0yNTEwMjQxNjU4MzBaMDMxMTAvBgNV BAMTKEI2Mzc2MzVGM0U2MTAwMzg0OTc4MDgzNzI2NDQ4QTQ5QzJFRkM1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BBts+h+DN2LZs31+WnkAhR0t TzF9jkDuOgy2TTEfDJ1tIBoHSakkkFAKbJfkMNRPvFMoWww1tH4NBwvQt7oDJkcX BURM+kY/5zzITktFo/NEMqy8UobblTSYg0o712tuoOkQw63OdaMSFkm/kfXBPqP0 LxODmEpN/+9b78pETBCYOzStEe6orpnqZNihHV7BrbE9cfuQ55eBHKC9o1RqwZfC aD0rfXpd28OMsm2l1YvnvlcaykHecnEeXrh19FV6oBwGeMeHIPmPJ3bomhikHQPK 2nhFT73iag1XBYwK0g3qsl7uKBaaIjE1XBPEuveMoIfyZq19rkmtN3UVkRwXAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUtjdjXz5hADhJeAg3JkSKScLvxTMwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEANsWlfKu5lQhZ4Ul9AOxuH5P646D9NOet1Py2 2IXd6dOi5JB1cgMStb/0vCoZ9nCWMNraCkQ6Ssrk6wOKQOd1pHKDR2QfVcUIOQ08 fTcXeKHRvfkMLY7jVy4OHIYMNnyqhhpJZ8IaV7RNbBHE31RJvDG0wMuSncM11yyK Q5QhN1LI3MxNlIKwZ3YsouxW3wM3uurRKipbTqTlqMdVmPdTZvwjqGz1bqztZHFt t1EZ+3JCCtrkcChU/qQtKQNdU1lCX3XIPn0/OlrkSkN4lAP23oB+kBCRACgoXsZb GWIltrxBZM9qRvW9waM5c5F8mXU482yagk+AjlD16L1BMQZV+A== -----END CERTIFICATE-----Generated at Fri Oct 24 00:11:12 2025 by rpki-client