Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          9/Q2bZTznhGgDkG+BAGAT7n84mw4Ye2ZS8VU/PCkbj0=
Subject key identifier:   D3:E0:2C:9F:69:C8:CD:E6:B6:9B:77:51:6E:C6:6C:C1:BF:F8:A5:B5
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       04B4E5D80DEF959730B554C48A226749F4D48169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          070B
Signing time:             Mon 25 Nov 2024 07:56:09 +0000
Manifest this update:     Mon 25 Nov 2024 07:51:09 +0000
Manifest next update:     Tue 26 Nov 2024 10:19:09 +0000
Files and hashes:         1: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: BAb7hWNMhXpZp+0vnVyRiFl/HrUl9SGTSyV5G7W5GT4=)
                          2: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=)
                          3: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=)
                          4: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=)
                          5: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=)
                          6: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: x5isy64xGYdjZMpSzWO0XRvyXtS7KB6OkPd5AAI8uoY=)
                          7: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=)
                          8: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=)
                          9: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=)
                          10: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=)
                          11: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=)
                          12: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=)
                          13: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=)
                          14: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=)
                          15: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=)
                          16: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=)
                          17: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=)
                          18: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: VHKk+4CbrwQS2mf6K0Hyfet/x+zlDZ4mzhT5e7cfl8E=)
                          19: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=)
                          20: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=)
                          21: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=)
                          22: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=)
                          23: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=)
                          24: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=)
                          25: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: yayr80b2pVGm37gfY6eM4OxfsNk5hocxIMW2ZgHjO0E=)
                          26: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=)
                          27: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=)
                          28: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=)
                          29: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=)

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b4:e5:d8:0d:ef:95:97:30:b5:54:c4:8a:22:67:49:f4:d4:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Nov 25 07:51:09 2024 GMT
            Not After : Nov 26 10:19:09 2024 GMT
        Subject: CN=D3E02C9F69C8CDE6B69B77516EC66CC1BFF8A5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:67:ba:25:00:3f:b6:a6:73:b4:58:0d:be:
                    46:1d:8b:87:62:1f:ed:f5:7e:2f:ac:53:12:48:83:
                    46:da:f7:5d:e3:12:c4:1c:5d:92:13:e8:ba:b9:b4:
                    cd:37:79:77:6f:70:4c:42:71:32:d2:e7:97:9d:36:
                    e6:86:79:80:32:95:6e:2d:61:17:a6:14:00:e9:9b:
                    78:d7:5e:23:03:a2:64:78:b2:90:ec:9f:65:e1:b6:
                    8c:89:c4:42:5f:65:d2:df:c0:0d:f0:ce:52:a1:10:
                    8a:e6:98:8d:1b:ea:2f:5f:d9:b7:76:d9:fe:29:4c:
                    f9:c6:64:43:ff:3e:93:76:5b:c1:51:a1:26:a1:b6:
                    39:d4:6c:4d:31:ed:0d:a1:64:61:e6:28:91:5d:c4:
                    43:f9:6f:94:0a:79:c9:fb:43:95:2f:76:33:d3:2f:
                    29:1c:2c:81:60:92:17:e5:1d:a4:80:d0:42:ec:f7:
                    5b:29:fd:39:57:91:25:66:19:81:4e:8c:50:23:fe:
                    ab:3e:dc:04:2a:10:ce:11:1c:de:5a:76:8f:ed:c8:
                    98:5a:d2:f1:38:d5:c2:c9:5c:5b:72:cf:7b:13:f0:
                    ab:0e:0e:4a:86:e5:5c:4b:e5:8c:d2:ef:72:7d:79:
                    73:60:25:98:33:36:a0:77:8f:42:9b:db:b2:83:f2:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:2C:9F:69:C8:CD:E6:B6:9B:77:51:6E:C6:6C:C1:BF:F8:A5:B5
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:56:0d:d6:00:51:3e:7f:d9:c8:78:24:86:eb:a9:0d:60:a9:
         cc:0f:a0:2a:dd:cc:82:3b:29:b4:9f:41:84:ec:b9:0b:88:e3:
         c3:59:92:67:f2:e1:cd:c8:e7:36:3b:79:b0:2e:5b:ab:f8:4f:
         13:19:81:b1:2d:99:ef:2e:f4:57:05:84:36:87:9a:e0:a1:59:
         c8:9e:38:46:25:94:ad:f3:e7:26:ae:ac:73:9d:53:7e:46:86:
         8d:90:3c:ef:e3:ed:75:72:4d:99:d6:ae:30:8a:c5:61:b2:47:
         35:06:96:6b:5d:e0:da:62:43:16:d7:5c:6c:2b:c3:80:83:ac:
         3a:c6:20:8b:57:95:e2:24:98:1a:ca:8e:2f:14:24:01:31:a2:
         66:41:fd:fa:b0:97:08:e3:8d:e5:00:dd:f1:e8:9f:70:ba:c2:
         2a:9a:6a:62:4d:ca:69:70:ce:c8:25:3e:a4:7f:1c:ec:0c:d1:
         29:81:96:0a:9c:4f:cc:7b:c3:7f:3a:7e:02:d6:89:82:1f:33:
         48:be:fc:20:ce:a6:99:63:87:5a:85:61:79:21:de:ec:d2:4d:
         fb:4d:90:0f:c7:3a:1a:d3:fb:b2:f6:e2:43:c7:40:53:f7:a9:
         25:b5:b2:b7:8f:be:76:56:79:12:0a:b1:66:36:58:7e:5d:44:
         0e:57:52:d0
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUBLTl2A3vlZcwtVTEiiJnSfTUgWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx
MTRiNzBiYjAeFw0yNDExMjUwNzUxMDlaFw0yNDExMjYxMDE5MDlaMDMxMTAvBgNV
BAMTKEQzRTAyQzlGNjlDOENERTZCNjlCNzc1MTZFQzY2Q0MxQkZGOEE1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCome6JQA/tqZztFgNvkYdi4di
H+31fi+sUxJIg0ba913jEsQcXZIT6Lq5tM03eXdvcExCcTLS55edNuaGeYAylW4t
YRemFADpm3jXXiMDomR4spDsn2XhtoyJxEJfZdLfwA3wzlKhEIrmmI0b6i9f2bd2
2f4pTPnGZEP/PpN2W8FRoSahtjnUbE0x7Q2hZGHmKJFdxEP5b5QKecn7Q5UvdjPT
LykcLIFgkhflHaSA0ELs91sp/TlXkSVmGYFOjFAj/qs+3AQqEM4RHN5ado/tyJha
0vE41cLJXFtyz3sT8KsODkqG5VxL5YzS73J9eXNgJZgzNqB3j0Kb27KD8tYVAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQU0+Asn2nIzea2m3dRbsZswb/4pbUwHwYDVR0j
BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z
OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl
cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw
MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEATVYN1gBRPn/ZyHgkhuupDWCpzA+gKt3Mgjsp
tJ9BhOy5C4jjw1mSZ/LhzcjnNjt5sC5bq/hPExmBsS2Z7y70VwWENoea4KFZyJ44
RiWUrfPnJq6sc51TfkaGjZA87+PtdXJNmdauMIrFYbJHNQaWa13g2mJDFtdcbCvD
gIOsOsYgi1eV4iSYGsqOLxQkATGiZkH9+rCXCOON5QDd8eifcLrCKppqYk3KaXDO
yCU+pH8c7AzRKYGWCpxPzHvDfzp+AtaJgh8zSL78IM6mmWOHWoVheSHe7NJN+02Q
D8c6GtP7svbiQ8dAU/epJbWyt4++dlZ5EgqxZjZYfl1EDldS0A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:40:54 2024 by rpki-client on console-ams.rpki-client.org