Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          QT47cMuS7JeAI8RlPVdzTvxpOvg6VrOC6hdBxY54pq8=
Subject key identifier:   A5:49:21:AF:EB:61:26:7F:CB:B9:B5:FB:90:41:72:94:71:09:44:70
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       09B79BC76142D29F19E35FC0021EB50031AF1327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          09AD
Signing time:             Fri 13 Mar 2026 08:56:13 +0000
Manifest this update:     Fri 13 Mar 2026 08:51:13 +0000
Manifest next update:     Sat 14 Mar 2026 12:54:13 +0000
Files and hashes:         1: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
                          2: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
                          3: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
                          4: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
                          5: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
                          6: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
                          7: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          8: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
                          9: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: 8I158fL92DAWve0L1ynDIvsm3OhlQ7g7VE5JMQaF3M0=)
                          10: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=)
                          11: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
                          12: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
                          13: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
                          14: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
                          15: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
                          16: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
                          17: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          18: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
                          19: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
                          20: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
                          21: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=)
                          22: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=)
                          23: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
                          24: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=)
                          25: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
                          26: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
                          27: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
                          28: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
                          29: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
                          30: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:9b:c7:61:42:d2:9f:19:e3:5f:c0:02:1e:b5:00:31:af:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Mar 13 08:51:13 2026 GMT
            Not After : Mar 14 12:54:13 2026 GMT
        Subject: CN=A54921AFEB61267FCBB9B5FB9041729471094470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:8f:10:f5:1b:d5:f6:e8:a9:3c:8a:4d:be:
                    0b:e6:3b:2f:e8:97:b3:29:12:f8:e4:54:d6:ed:95:
                    36:69:98:99:8e:2b:28:03:a5:6c:b1:36:6c:eb:b1:
                    ad:0a:f4:66:da:02:f6:ec:19:57:93:38:72:f0:23:
                    85:86:53:ce:95:15:8b:d3:dc:71:34:28:1f:3d:4b:
                    35:dd:a0:d1:07:7b:91:9c:23:49:15:a3:8d:89:11:
                    28:3f:39:2b:28:84:2e:cf:38:78:c8:55:a4:37:9a:
                    43:63:67:0a:6d:18:be:8c:28:af:ab:af:a6:91:72:
                    4c:97:17:d3:f4:30:cd:36:18:5c:7e:5c:3e:a3:ff:
                    eb:2e:ae:b1:11:e6:a2:8a:a0:f6:5d:30:ad:b9:39:
                    16:90:94:1f:2f:42:07:71:5e:30:99:f2:73:3e:b4:
                    86:4b:39:16:76:7e:3b:b4:91:ef:dc:e6:cb:2e:6d:
                    fa:f6:9f:10:6b:04:49:c9:a2:d5:2d:43:c5:1f:89:
                    63:6e:f5:79:74:80:b9:0f:b6:90:0a:13:48:e6:9a:
                    60:73:dd:b5:74:14:a8:82:16:31:48:5b:b7:8c:8f:
                    dc:b4:4e:82:43:d9:53:6b:27:23:30:b5:18:db:dc:
                    8e:30:f9:78:6e:19:36:e6:f1:c5:a1:56:20:2b:57:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:49:21:AF:EB:61:26:7F:CB:B9:B5:FB:90:41:72:94:71:09:44:70
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:91:c6:55:f9:95:4d:b6:1a:71:68:5d:b4:e1:98:07:c6:
         02:a9:58:97:3f:dd:4b:21:cf:e5:99:a2:60:15:fe:49:cd:f8:
         9e:f6:d6:f5:7c:5b:dc:c8:06:55:e8:d0:e4:3b:68:6b:05:cf:
         e7:54:b3:64:bb:55:ba:76:cb:68:7c:6d:2a:27:79:31:5e:fe:
         01:91:2b:6c:a4:cb:67:da:f5:03:7a:37:98:cb:4e:ea:4d:a1:
         62:b5:03:25:de:95:e7:9a:ed:0f:7b:a5:c7:32:ff:81:b7:29:
         94:88:30:de:9a:b1:7a:83:32:4d:eb:b9:a0:e2:b8:8a:75:ba:
         c7:56:1f:77:86:18:26:41:20:85:3c:7f:55:51:42:d9:9b:8c:
         7b:fd:bf:9d:65:69:ec:2a:1d:c3:4f:8c:f8:92:54:ff:dc:66:
         39:97:cc:51:35:59:7f:3d:b4:38:6b:d4:2e:65:ac:5b:cd:42:
         de:81:77:3f:d9:d9:ae:5c:a8:27:84:09:b2:99:8e:68:a1:3d:
         43:4e:36:e7:f8:32:1a:36:d5:16:35:6d:ef:e2:cc:9c:e4:2b:
         0b:21:c5:e6:21:7f:85:bb:fc:ef:df:bf:f4:b3:0c:cb:85:6b:
         4d:8e:79:49:f9:d9:07:5e:4c:09:d8:c5:02:34:3b:93:82:05:
         bf:9b:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:10:03 2026 by rpki-client