$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: 7Y76zyd2Axsn0ZUb2092FBATYJIHZQLYrU6mYPgQ3Qk= Subject key identifier: 45:26:2F:C3:3D:F7:A2:DA:BA:85:39:C0:A9:92:D2:E4:09:6F:AA:D5 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 1CC2A76359215A7B5CB7A91A62DD0F169C29D630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 0A3E Signing time: Thu 11 Jun 2026 21:58:59 +0000 Manifest this update: Thu 11 Jun 2026 21:53:59 +0000 Manifest next update: Fri 12 Jun 2026 22:16:59 +0000 Files and hashes: 1: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 2: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: m+1ZBxNd8AZscw/yxlGIMO8+xAMttQ4MWngudCSp5b8=) 3: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 4: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 5: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=) 6: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 7: 3138352e33372e3235322e302f32322d3234203d3e2033323538.roa (hash: Ud8noFELJBOlRFNHt6Bu5c6/4igIlvOzTLs7z8OalKI=) 8: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 9: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 10: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=) 11: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 12: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 13: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 14: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 15: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 16: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 17: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 18: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 19: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 20: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 21: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 22: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 23: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 24: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=) 25: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 26: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 27: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 28: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 29: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: IzYGyBUr1iUqCws6DgtfA1OIfIPTsryxyrR7PL8GwJI=) 30: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 31: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c2:a7:63:59:21:5a:7b:5c:b7:a9:1a:62:dd:0f:16:9c:29:d6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Jun 11 21:53:59 2026 GMT Not After : Jun 12 22:16:59 2026 GMT Subject: CN=45262FC33DF7A2DABA8539C0A992D2E4096FAAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:84:1b:35:00:5a:9d:73:13:38:e8:8c:87: d8:07:fd:89:06:8e:78:a9:f2:12:24:19:5c:75:a0: 80:28:4b:a2:95:e1:ef:0e:15:36:16:7c:ae:e3:90: 34:4a:6b:00:ac:3b:79:69:a7:dc:c8:8c:9f:4a:8c: e4:ff:da:e1:62:fe:7e:5d:5c:d8:a6:a9:90:45:23: e3:79:d9:99:bc:7d:9a:d5:5c:81:3e:c7:27:02:74: c7:76:1c:52:fa:57:0b:6a:f4:95:61:1a:e3:1a:ee: 04:5b:be:3b:18:54:02:45:fd:6c:0a:3e:f9:da:64: 4e:40:d2:34:24:4c:a5:b8:6b:e9:5c:03:30:ef:d7: 25:13:72:cf:32:8c:25:c8:0b:d8:4f:d1:fa:ce:0a: 3c:40:0a:83:61:53:b1:97:c6:49:20:86:28:8d:bf: 27:b2:dd:ad:98:7b:47:e1:c0:47:01:f6:8f:1c:e5: 1c:8b:30:31:5a:10:77:36:9b:c9:30:06:d5:bb:c3: 09:2d:9d:41:f9:a5:d7:3f:03:ff:87:eb:ff:f4:3d: a4:a9:cd:06:fd:10:dc:3a:18:d7:13:47:a2:a6:53: 48:4f:f5:7c:fc:0b:6c:5f:8a:18:48:36:b1:54:ff: 1c:7a:da:6a:5a:8c:9a:7d:0f:02:41:d6:13:0f:de: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:26:2F:C3:3D:F7:A2:DA:BA:85:39:C0:A9:92:D2:E4:09:6F:AA:D5 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:34:b5:24:10:6f:dc:5e:34:ff:c6:1d:24:de:4d:d9:43:9d: d7:66:95:6e:2c:1d:dd:2a:ae:2f:49:f6:83:9f:84:54:e5:b4: 97:68:59:56:78:33:d7:ba:f0:67:17:96:2b:17:89:98:77:b5: 9c:68:3f:9e:ec:e0:08:23:87:f3:0b:88:15:d7:48:26:09:2c: eb:dd:da:d0:c9:df:3f:11:4b:f0:90:30:e1:b4:c7:7e:2a:26: 48:af:00:2a:00:bd:ac:e0:23:af:59:2b:ad:39:5c:36:63:b2: 70:0a:44:66:33:07:75:d8:b2:b6:7a:eb:0b:d6:34:1f:f1:c7: e4:70:bb:ba:fb:67:91:ee:b7:83:71:16:58:6f:1a:38:73:be: a7:28:ff:10:9c:f3:a0:24:10:cb:1f:7b:de:74:f0:d0:36:8d: 9d:4f:27:ad:6d:23:83:2c:f7:34:70:99:d6:fd:77:c7:92:36: 79:fa:08:cc:a7:a3:ce:7f:cf:19:88:1a:f9:51:56:c9:d1:77: b1:6f:0f:9e:57:4c:7f:3b:62:98:15:22:54:37:7a:17:ac:c1: 5a:a8:99:15:5b:0c:27:d3:2a:ed:6c:ff:ec:3e:85:2e:8a:a1: 97:28:fa:eb:39:5e:c5:6e:82:f6:15:6f:e7:d1:0e:99:0b:2a: 90:2a:02:cb -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUHMKnY1khWntct6kaYt0PFpwp1jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNjA2MTEyMTUzNTlaFw0yNjA2MTIyMjE2NTlaMDMxMTAvBgNV BAMTKDQ1MjYyRkMzM0RGN0EyREFCQTg1MzlDMEE5OTJEMkU0MDk2RkFBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nYQbNQBanXMTOOiMh9gH/YkG jnip8hIkGVx1oIAoS6KV4e8OFTYWfK7jkDRKawCsO3lpp9zIjJ9KjOT/2uFi/n5d XNimqZBFI+N52Zm8fZrVXIE+xycCdMd2HFL6Vwtq9JVhGuMa7gRbvjsYVAJF/WwK PvnaZE5A0jQkTKW4a+lcAzDv1yUTcs8yjCXIC9hP0frOCjxACoNhU7GXxkkghiiN vyey3a2Ye0fhwEcB9o8c5RyLMDFaEHc2m8kwBtW7wwktnUH5pdc/A/+H6//0PaSp zQb9ENw6GNcTR6KmU0hP9Xz8C2xfihhINrFU/xx62mpajJp9DwJB1hMP3mE/AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQURSYvwz33otq6hTnAqZLS5AlvqtUwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAcDS1JBBv3F40/8YdJN5N2UOd12aVbiwd3Squ L0n2g5+EVOW0l2hZVngz17rwZxeWKxeJmHe1nGg/nuzgCCOH8wuIFddIJgks693a 0MnfPxFL8JAw4bTHfiomSK8AKgC9rOAjr1krrTlcNmOycApEZjMHddiytnrrC9Y0 H/HH5HC7uvtnke63g3EWWG8aOHO+pyj/EJzzoCQQyx973nTw0DaNnU8nrW0jgyz3 NHCZ1v13x5I2efoIzKejzn/PGYga+VFWydF3sW8PnldMfztimBUiVDd6F6zBWqiZ FVsMJ9Mq7Wz/7D6FLoqhlyj66zlexW6C9hVv59EOmQsqkCoCyw== -----END CERTIFICATE-----Generated at Fri Jun 12 01:04:34 2026 by rpki-client