$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: vdmTlfIlpM9O26S4RBDtcruHesSaMuYnDnenyRuITEg= Subject key identifier: D3:C4:5F:0B:6B:5A:25:E8:C4:46:31:8E:35:D9:5C:B8:81:DE:0A:41 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 4533B9860039373A2C15A0BA80F7EB14E0A01CAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 08A5 Signing time: Mon 08 Sep 2025 13:12:21 +0000 Manifest this update: Mon 08 Sep 2025 13:07:21 +0000 Manifest next update: Tue 09 Sep 2025 16:11:21 +0000 Files and hashes: 1: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 2: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 3: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 4: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 5: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 6: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 7: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 8: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=) 9: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 10: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 11: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 12: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 13: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 14: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: dsIsNdd0j2G12DeHSXItJtksfznVHr0yINejpY5tELg=) 15: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 16: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 17: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 18: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 19: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 20: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 21: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 22: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 23: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 24: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 25: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 26: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 27: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 28: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 29: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 30: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:33:b9:86:00:39:37:3a:2c:15:a0:ba:80:f7:eb:14:e0:a0:1c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Sep 8 13:07:21 2025 GMT Not After : Sep 9 16:11:21 2025 GMT Subject: CN=D3C45F0B6B5A25E8C446318E35D95CB881DE0A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:64:12:11:f1:a3:9c:55:c5:7d:b6:93:e3: e5:f8:e4:0c:30:b6:f4:a0:a2:d8:d2:d8:3d:6e:9e: 0d:4a:06:28:34:82:cb:16:8b:e2:92:bb:33:8a:c9: cc:0e:73:e9:52:47:3f:72:f5:fe:96:58:a6:08:f0: e6:8b:52:4c:5c:19:26:2f:88:fc:ba:4c:05:45:f9: 03:b1:cc:4b:ed:1a:bc:3e:b9:d7:08:be:03:8f:ca: 02:1f:50:68:48:30:cc:44:cc:49:5d:92:a6:36:2f: ce:00:a1:22:8b:6c:44:1e:cf:e9:8d:a3:08:90:f5: 12:4f:5f:52:c6:a9:e1:c2:bd:b3:4f:78:76:82:83: 4d:29:da:d5:8d:ae:64:06:27:ba:bd:b9:57:57:4f: 59:70:ed:03:84:cc:4e:1f:4a:bd:98:2c:3b:cb:11: e2:cf:13:f5:94:95:b0:07:2e:3b:75:86:0e:65:dc: 45:e2:09:80:b2:a6:7e:4e:70:af:49:6a:98:00:c5: 7d:48:f9:24:1a:5a:ce:34:2e:e9:06:a0:da:c6:74: 5e:4d:8f:35:b0:17:bc:fc:7a:b7:1f:1b:1d:cd:c1: 11:40:aa:5d:68:88:d2:2a:28:e7:a9:1f:7f:56:de: 5f:87:e7:b7:0a:08:81:e2:b6:23:81:d4:3a:57:d3: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C4:5F:0B:6B:5A:25:E8:C4:46:31:8E:35:D9:5C:B8:81:DE:0A:41 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:eb:a6:89:8e:29:56:78:e0:a1:ce:d3:5a:a6:37:bc:e5:e5: 4e:74:21:a1:74:3b:a5:3a:26:80:44:c5:93:2a:33:a2:6d:56: cc:87:eb:a6:35:32:9c:6f:28:c3:1a:c2:2c:75:38:28:e3:27: 04:76:2b:90:e2:9a:84:39:b7:99:11:25:02:de:71:c4:b9:92: 5d:79:ac:39:57:ac:e5:af:4d:33:2f:ed:8a:3d:34:9e:ff:30: 78:91:1f:0b:80:03:d7:40:ef:5b:32:e6:a9:a9:38:b1:9e:92: 1f:28:dc:48:60:6a:26:69:da:3c:31:1c:07:89:ae:69:ad:e8: 94:bf:59:ab:84:38:42:c1:1d:e4:af:9b:08:2a:31:70:ce:b4: cd:a7:40:40:51:0d:55:f7:c2:27:a7:8e:fd:bd:48:02:6a:37: 9a:1f:8b:4b:87:5e:44:5a:c8:e0:e1:35:5b:52:86:ae:16:01: e8:15:f5:77:a3:2c:70:ac:d2:3a:be:24:19:b9:e3:e2:08:3f: 29:10:23:35:c0:79:ff:f6:65:6a:65:4c:40:22:31:88:12:27: 0f:42:2d:f6:58:f9:b0:a4:f5:b8:41:85:16:cc:9f:1a:ad:29: 35:26:f6:2a:8e:4f:0b:f8:66:07:ee:2d:f1:b0:a3:41:cb:28: 73:28:90:65 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIURTO5hgA5NzosFaC6gPfrFOCgHKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTA5MDgxMzA3MjFaFw0yNTA5MDkxNjExMjFaMDMxMTAvBgNV BAMTKEQzQzQ1RjBCNkI1QTI1RThDNDQ2MzE4RTM1RDk1Q0I4ODFERTBBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1umQSEfGjnFXFfbaT4+X45Aww tvSgotjS2D1ung1KBig0gssWi+KSuzOKycwOc+lSRz9y9f6WWKYI8OaLUkxcGSYv iPy6TAVF+QOxzEvtGrw+udcIvgOPygIfUGhIMMxEzEldkqY2L84AoSKLbEQez+mN owiQ9RJPX1LGqeHCvbNPeHaCg00p2tWNrmQGJ7q9uVdXT1lw7QOEzE4fSr2YLDvL EeLPE/WUlbAHLjt1hg5l3EXiCYCypn5OcK9JapgAxX1I+SQaWs40LukGoNrGdF5N jzWwF7z8ercfGx3NwRFAql1oiNIqKOepH39W3l+H57cKCIHitiOB1DpX05UjAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQU08RfC2taJejERjGONdlcuIHeCkEwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAIeumiY4pVnjgoc7TWqY3vOXlTnQhoXQ7pTom gETFkyozom1WzIfrpjUynG8owxrCLHU4KOMnBHYrkOKahDm3mRElAt5xxLmSXXms OVes5a9NMy/tij00nv8weJEfC4AD10DvWzLmqak4sZ6SHyjcSGBqJmnaPDEcB4mu aa3olL9Zq4Q4QsEd5K+bCCoxcM60zadAQFENVffCJ6eO/b1IAmo3mh+LS4deRFrI 4OE1W1KGrhYB6BX1d6MscKzSOr4kGbnj4gg/KRAjNcB5//ZlamVMQCIxiBInD0It 9lj5sKT1uEGFFsyfGq0pNSb2Ko5PC/hmB+4t8bCjQcsocyiQZQ== -----END CERTIFICATE-----Generated at Mon Sep 8 20:22:15 2025 by rpki-client