$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: Y14OxEh8EQfpI9AXBMpfMVs7hqTcZoDdbgJqA5uzLRs= Subject key identifier: D5:BE:81:12:B3:33:86:DB:E9:4A:A9:A7:BB:CB:AB:6E:5C:F4:4E:1E Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 5346ECB900C1A7A7AFC930B40130A1556B7BBAF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 09EF Signing time: Mon 27 Apr 2026 15:26:32 +0000 Manifest this update: Mon 27 Apr 2026 15:21:32 +0000 Manifest next update: Tue 28 Apr 2026 18:32:32 +0000 Files and hashes: 1: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 2: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 3: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 4: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 5: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 6: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 7: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 8: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 9: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=) 10: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 11: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 12: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 13: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 14: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 15: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 16: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 17: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 18: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 19: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 20: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 21: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=) 22: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 23: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 24: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: 2cqWtuOtXmR0LvrFw57mfGIukbY52eRvQvBlcbr+nbw=) 25: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 26: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=) 27: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 28: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 29: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 30: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:46:ec:b9:00:c1:a7:a7:af:c9:30:b4:01:30:a1:55:6b:7b:ba:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Apr 27 15:21:32 2026 GMT Not After : Apr 28 18:32:32 2026 GMT Subject: CN=D5BE8112B33386DBE94AA9A7BBCBAB6E5CF44E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:e2:16:31:6b:c9:1e:33:b2:42:89:d6:fe: 12:e1:10:56:cd:55:1a:1e:56:97:8d:31:8b:ec:6b: 96:fb:eb:22:88:56:10:04:2c:b1:d9:f7:04:23:26: 54:9b:7a:c5:00:64:09:46:36:50:a2:c5:4c:01:d1: fd:30:5a:40:21:ab:e7:24:e3:71:db:db:7f:98:7f: 90:59:dc:05:c9:7b:95:3e:45:c3:0b:b2:cc:2c:68: d4:0c:95:d6:41:94:42:a0:09:f0:8c:52:db:57:2e: da:8d:43:0a:71:22:bb:9f:76:64:7e:4d:a6:fc:98: 02:83:c7:6a:dd:f4:ac:b2:7f:4c:65:e4:4c:9f:4c: 0a:ad:76:4d:e7:d9:6c:45:ed:3a:82:17:58:ac:29: bd:ac:02:5a:43:be:c1:1e:31:cb:23:02:1e:89:56: 3a:9d:ac:23:01:c2:71:ef:34:55:4a:42:a0:50:75: b0:7f:f1:e9:5f:99:04:f9:3b:6b:b3:0f:c7:2c:7e: f9:ce:d0:1f:07:63:1d:b4:4c:03:71:50:05:6d:dd: e2:18:1e:82:b6:0b:25:47:26:eb:0a:a3:c3:e7:a9: 0f:e9:81:58:c0:16:e5:4e:dc:02:08:1e:b3:6d:07: 17:e3:62:8b:28:32:3b:32:a3:e5:af:c5:fc:52:27: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:81:12:B3:33:86:DB:E9:4A:A9:A7:BB:CB:AB:6E:5C:F4:4E:1E X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:42:c3:5b:f7:02:3d:02:c2:80:7c:c4:8b:3f:b8:47:e1:f9: fd:0f:89:fd:33:fc:dd:f3:ca:d8:62:ad:75:0b:a7:fe:60:46: d1:86:f5:06:f9:44:0b:b6:05:2e:fc:ea:d8:75:1b:d5:5a:bf: 6d:d1:13:12:0f:51:28:f6:bb:59:38:0f:c7:b7:6d:cb:0a:55: 42:96:99:33:8c:4a:de:5d:73:c5:40:e5:3e:38:eb:58:4b:46: 57:14:b1:5d:ca:1f:d9:ca:a4:6e:69:97:48:12:14:53:24:81: a2:db:c5:92:d5:be:3e:a9:c8:1d:0a:31:75:1a:47:7f:2f:02: 2e:ba:50:6b:54:de:d7:66:4b:7a:30:ce:74:0a:5f:41:71:fa: f8:b6:f9:16:53:87:bd:a5:06:89:17:4d:ff:0a:bc:72:cc:68: f1:81:50:0b:c4:b4:f4:d9:ff:c7:a8:51:40:45:75:14:06:7c: 93:16:a3:c8:53:74:01:85:d9:30:8d:85:b4:e7:59:cc:63:3d: 05:91:2c:2a:a7:00:40:f1:dc:05:f5:ee:1f:05:ec:7c:f9:e5: 45:8d:08:f5:8a:0c:18:ce:27:ea:51:1a:17:f9:ae:e6:38:9f: 6f:2b:1f:23:4b:35:f5:1a:38:a9:0d:03:22:b5:df:2d:9d:3c: e7:99:a5:7b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUU0bsuQDBp6evyTC0ATChVWt7uvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNjA0MjcxNTIxMzJaFw0yNjA0MjgxODMyMzJaMDMxMTAvBgNV BAMTKEQ1QkU4MTEyQjMzMzg2REJFOTRBQTlBN0JCQ0JBQjZFNUNGNDRFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/OIWMWvJHjOyQonW/hLhEFbN VRoeVpeNMYvsa5b76yKIVhAELLHZ9wQjJlSbesUAZAlGNlCixUwB0f0wWkAhq+ck 43Hb23+Yf5BZ3AXJe5U+RcMLsswsaNQMldZBlEKgCfCMUttXLtqNQwpxIrufdmR+ Tab8mAKDx2rd9Kyyf0xl5EyfTAqtdk3n2WxF7TqCF1isKb2sAlpDvsEeMcsjAh6J VjqdrCMBwnHvNFVKQqBQdbB/8elfmQT5O2uzD8csfvnO0B8HYx20TANxUAVt3eIY HoK2CyVHJusKo8PnqQ/pgVjAFuVO3AIIHrNtBxfjYosoMjsyo+WvxfxSJxO/AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQU1b6BErMzhtvpSqmnu8urblz0Th4wHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAS0LDW/cCPQLCgHzEiz+4R+H5/Q+J/TP83fPK 2GKtdQun/mBG0Yb1BvlEC7YFLvzq2HUb1Vq/bdETEg9RKPa7WTgPx7dtywpVQpaZ M4xK3l1zxUDlPjjrWEtGVxSxXcof2cqkbmmXSBIUUySBotvFktW+PqnIHQoxdRpH fy8CLrpQa1Te12ZLejDOdApfQXH6+Lb5FlOHvaUGiRdN/wq8csxo8YFQC8S09Nn/ x6hRQEV1FAZ8kxajyFN0AYXZMI2FtOdZzGM9BZEsKqcAQPHcBfXuHwXsfPnlRY0I 9YoMGM4n6lEaF/mu5jifbysfI0s19Ro4qQ0DIrXfLZ0855mlew== -----END CERTIFICATE-----Generated at Mon Apr 27 22:07:16 2026 by rpki-client