$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: g3V0l888MLwB39ZHyEidGB/b+7JLPFLhmPg7HT34FqM= Subject key identifier: 3E:10:9E:E4:D4:CE:AF:73:EF:AD:F8:20:52:0B:71:01:95:AA:CB:3E Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 32F9695C6793FB230A3EC1F254586D3EB30429F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 0861 Signing time: Wed 23 Jul 2025 04:30:31 +0000 Manifest this update: Wed 23 Jul 2025 04:25:31 +0000 Manifest next update: Thu 24 Jul 2025 05:01:31 +0000 Files and hashes: 1: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: YmksUKjvaZSd+cXOJR+TVmKWnZzY5vPBOYmVBA+X+8g=) 2: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=) 3: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=) 4: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 5: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=) 6: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=) 7: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=) 8: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=) 9: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=) 10: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=) 11: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=) 12: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=) 13: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=) 14: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=) 15: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=) 16: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=) 17: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=) 18: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=) 19: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=) 20: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 21: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=) 22: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=) 23: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=) 24: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 25: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=) 26: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=) 27: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=) 28: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 29: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=) 30: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 05:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f9:69:5c:67:93:fb:23:0a:3e:c1:f2:54:58:6d:3e:b3:04:29:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Jul 23 04:25:31 2025 GMT Not After : Jul 24 05:01:31 2025 GMT Subject: CN=3E109EE4D4CEAF73EFADF820520B710195AACB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:d7:07:a0:ab:3e:b3:b4:b9:5f:b5:9a:0b: d9:3e:b1:5a:f6:04:d8:15:b8:b3:d1:f6:38:6e:39: 7e:05:59:51:d2:cc:e5:ac:0e:a5:0d:31:eb:57:ca: b7:c4:8a:bc:31:08:ca:77:7d:ff:5e:d1:dd:08:f4: d5:9e:23:62:1f:17:c5:02:bc:bb:f4:cc:f3:8c:b7: 8f:6b:ab:b2:03:64:5e:1d:72:36:17:b4:5a:da:52: 09:8f:76:9d:5c:0c:b8:9e:0e:f9:17:75:ca:d1:fc: 7d:6b:92:be:d6:ec:45:73:69:9e:c1:dc:85:e7:cc: fc:a9:8e:87:19:86:70:07:a4:a6:18:bd:1b:74:57: d7:81:4e:2c:83:f8:bc:49:8d:41:83:f7:01:7d:62: 85:0f:f2:72:a2:1c:aa:d4:31:35:80:05:dd:20:c5: 26:ca:da:28:b1:7a:f6:56:f9:d3:c1:f6:d5:8b:95: 49:47:44:b2:77:5e:51:5d:0d:77:7a:dc:92:41:f3: ec:3a:f3:f7:04:14:96:42:ae:12:d5:72:84:74:5b: 7b:17:b2:a6:8e:9c:ae:6e:7e:3f:c1:74:35:5a:33: fe:c5:16:58:07:ef:8b:7e:d5:9f:f8:a2:5c:96:5c: 10:7a:52:e9:ca:4c:a3:41:46:25:dc:dd:bd:65:74: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:9E:E4:D4:CE:AF:73:EF:AD:F8:20:52:0B:71:01:95:AA:CB:3E X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2b:c1:cd:13:02:69:03:11:39:11:a1:d5:44:80:0c:49:03: ca:90:a5:b8:c6:2e:e5:f5:5f:b2:7e:c1:f7:59:3e:cb:c0:15: 73:5f:1a:5c:09:22:a5:21:18:dd:d4:fd:18:be:28:e1:bb:22: 07:dd:55:87:40:3f:15:7e:de:58:b9:a0:31:e5:91:4b:58:50: e4:cf:52:cf:5a:ce:08:61:50:35:d2:d9:ca:aa:63:36:e7:fa: 40:75:09:46:2d:5a:3d:bc:ab:bd:73:d5:f2:31:cb:e2:0f:a3: c1:c8:dd:5c:87:3b:82:fd:7a:de:42:f5:c3:6d:4a:46:56:83: 08:be:e1:f9:cf:95:48:91:89:94:00:1f:49:99:ea:ba:0d:9f: 02:01:17:73:66:07:58:2f:51:43:f7:43:80:38:3d:89:1a:75: 8c:a0:53:b9:b9:b3:90:4b:b0:9c:5d:fb:36:3b:58:f4:23:e2: 0a:69:d7:ca:66:04:72:bd:7d:2d:b6:76:19:0c:db:44:84:15: f3:94:9d:cd:2c:da:49:af:03:db:4a:d2:4b:b6:e4:b7:e7:46: c6:88:e2:52:14:1e:ba:59:0b:a3:e5:14:ea:18:f0:50:e0:35: c3:9b:6b:d5:ea:01:df:3a:67:27:aa:50:bb:1f:25:4d:cb:7c: c3:22:f9:cb -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUMvlpXGeT+yMKPsHyVFhtPrMEKfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTA3MjMwNDI1MzFaFw0yNTA3MjQwNTAxMzFaMDMxMTAvBgNV BAMTKDNFMTA5RUU0RDRDRUFGNzNFRkFERjgyMDUyMEI3MTAxOTVBQUNCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXNcHoKs+s7S5X7WaC9k+sVr2 BNgVuLPR9jhuOX4FWVHSzOWsDqUNMetXyrfEirwxCMp3ff9e0d0I9NWeI2IfF8UC vLv0zPOMt49rq7IDZF4dcjYXtFraUgmPdp1cDLieDvkXdcrR/H1rkr7W7EVzaZ7B 3IXnzPypjocZhnAHpKYYvRt0V9eBTiyD+LxJjUGD9wF9YoUP8nKiHKrUMTWABd0g xSbK2iixevZW+dPB9tWLlUlHRLJ3XlFdDXd63JJB8+w68/cEFJZCrhLVcoR0W3sX sqaOnK5ufj/BdDVaM/7FFlgH74t+1Z/4olyWXBB6UunKTKNBRiXc3b1ldJN9AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUPhCe5NTOr3PvrfggUgtxAZWqyz4wHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAnSvBzRMCaQMRORGh1USADEkDypCluMYu5fVf sn7B91k+y8AVc18aXAkipSEY3dT9GL4o4bsiB91Vh0A/FX7eWLmgMeWRS1hQ5M9S z1rOCGFQNdLZyqpjNuf6QHUJRi1aPbyrvXPV8jHL4g+jwcjdXIc7gv163kL1w21K RlaDCL7h+c+VSJGJlAAfSZnqug2fAgEXc2YHWC9RQ/dDgDg9iRp1jKBTubmzkEuw nF37NjtY9CPiCmnXymYEcr19LbZ2GQzbRIQV85SdzSzaSa8D20rSS7bkt+dGxoji UhQeulkLo+UU6hjwUOA1w5tr1eoB3zpnJ6pQux8lTct8wyL5yw== -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:43 2025 by rpki-client