Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          y8U6AnK11IVAPErgqhGuuu3k9jRJO7d1AOTq+6YbDek=
Subject key identifier:   88:D1:83:E9:D6:95:C5:EF:95:D4:E8:66:D6:76:2E:E9:93:87:4E:7B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       53988F89F32FA3DFFC97C44E0A8277AAC9021E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          0823
Signing time:             Sat 07 Jun 2025 05:37:53 +0000
Manifest this update:     Sat 07 Jun 2025 05:32:53 +0000
Manifest next update:     Sun 08 Jun 2025 07:07:53 +0000
Files and hashes:         1: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=)
                          2: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=)
                          3: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=)
                          4: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=)
                          5: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=)
                          6: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=)
                          7: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=)
                          8: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=)
                          9: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=)
                          10: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          11: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=)
                          12: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=)
                          13: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=)
                          14: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=)
                          15: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=)
                          16: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=)
                          17: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=)
                          18: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=)
                          19: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=)
                          20: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=)
                          21: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=)
                          22: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=)
                          23: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=)
                          24: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: e5eckKqrjWUWtA8gavSPuVt8qwmUjTa/z67+kYCMniY=)
                          25: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=)
                          26: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          27: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=)
                          28: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=)
                          29: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=)
                          30: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:8f:89:f3:2f:a3:df:fc:97:c4:4e:0a:82:77:aa:c9:02:1e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jun  7 05:32:53 2025 GMT
            Not After : Jun  8 07:07:53 2025 GMT
        Subject: CN=88D183E9D695C5EF95D4E866D6762EE993874E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:67:3c:2d:24:53:60:2b:b4:51:35:31:5c:
                    78:f7:95:77:00:37:7f:fb:90:73:a4:86:c5:13:ea:
                    05:7e:44:96:f4:3c:29:c8:55:7f:ba:bc:27:f7:6d:
                    e6:9b:50:34:2f:d2:1c:44:c5:9c:9e:f0:7f:6c:00:
                    fd:82:5c:bb:be:0f:a4:9c:89:2e:bf:0c:c1:4a:04:
                    91:99:22:37:09:3a:75:3c:3b:78:ae:51:4e:5e:7e:
                    bc:04:ea:d2:6a:ba:81:94:b2:ab:2e:9f:e5:23:dd:
                    dc:54:2f:ab:02:6f:19:64:f6:70:1b:1a:3b:76:c6:
                    05:40:90:a9:32:b7:2f:a4:f4:6e:e5:05:29:42:09:
                    a4:9d:25:7d:9f:ab:6e:9a:19:48:21:44:61:bf:76:
                    7f:76:b6:9f:4a:9f:b5:0e:a7:fa:16:ba:70:8d:63:
                    7e:19:ca:4e:67:6e:62:0d:f0:20:8b:e7:b7:c4:7f:
                    71:8d:8d:3c:73:3e:14:92:0c:67:83:b9:05:47:b6:
                    5c:9f:ec:53:24:a7:79:4e:ed:25:86:6c:01:1b:28:
                    6f:97:d0:66:41:34:ac:ae:7b:f1:ab:d5:57:b0:df:
                    c0:38:54:c1:8b:5f:74:66:fc:f4:b1:47:a8:4d:c4:
                    c4:9e:de:b0:70:3c:c5:8a:55:c7:25:1c:f7:c1:55:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D1:83:E9:D6:95:C5:EF:95:D4:E8:66:D6:76:2E:E9:93:87:4E:7B
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:3c:5d:b7:63:fd:ef:39:ba:c3:f2:d7:03:fe:f2:f8:7b:
         03:ac:a8:ba:80:f1:ee:dc:61:dd:fa:97:a1:46:53:36:e4:6e:
         6b:f2:9d:42:3e:a6:3b:15:d2:d9:0c:9d:97:9e:ce:bc:1f:2d:
         c9:71:55:47:52:d9:c8:49:dc:e9:6f:80:51:86:c3:4f:f7:1b:
         a6:2c:7c:75:93:d0:d7:7f:31:ef:60:17:fa:fb:41:7c:e2:6d:
         b4:00:5f:8e:95:81:47:92:ac:51:51:10:b4:65:6d:29:c1:c0:
         15:f1:61:7d:02:5e:52:7b:05:4b:26:52:5b:03:b5:53:78:e5:
         35:6a:13:e1:6e:62:2c:2f:bd:ea:91:fb:5b:84:3e:45:9e:00:
         62:18:9c:c7:a4:95:83:93:9e:5a:0a:9f:df:ab:d2:ed:e8:67:
         2e:18:03:a2:24:e3:b5:cb:e8:8f:48:2a:6a:f8:e4:4e:ca:e4:
         36:f7:a8:30:f9:bb:90:a0:7a:a5:c4:45:66:29:67:52:d8:52:
         d4:ab:db:85:1d:43:45:7a:79:c4:6b:08:3d:12:62:eb:1b:48:
         8f:09:1c:ab:16:45:05:9f:e8:7e:2b:ca:43:3d:98:ef:f1:38:
         f1:82:e7:fe:84:b9:f2:b8:ee:91:71:07:6f:27:a5:1c:e5:93:
         b3:a4:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:16 2025 by rpki-client