$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: +38zFDQ2exfzLM1/UJf9f1sx/uh353lMCrMHSJHd4Ls= Subject key identifier: E3:84:90:68:D7:AB:8A:93:CB:16:8C:97:42:34:11:53:35:49:BF:A7 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 392AFDE321983BDC4AB0F07D413C0E3105174E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 099C Signing time: Sun 01 Mar 2026 15:41:30 +0000 Manifest this update: Sun 01 Mar 2026 15:36:30 +0000 Manifest next update: Mon 02 Mar 2026 17:48:30 +0000 Files and hashes: 1: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 2: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 3: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 4: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 5: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 6: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 7: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 8: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 9: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 10: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 11: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 12: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 13: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 14: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=) 15: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 16: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 17: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 18: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 19: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: tdFC9nIZcryxFZT3aNdB7x42QpesMUGVLo7MtTdl5tA=) 20: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 21: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 22: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 23: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 24: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 25: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 26: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 27: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 28: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 29: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 30: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2a:fd:e3:21:98:3b:dc:4a:b0:f0:7d:41:3c:0e:31:05:17:4e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Mar 1 15:36:30 2026 GMT Not After : Mar 2 17:48:30 2026 GMT Subject: CN=E3849068D7AB8A93CB168C97423411533549BFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:f1:bb:f1:5b:b8:78:8d:92:d7:d1:97:02: 72:09:59:ac:fe:71:f4:66:a0:fc:3a:19:aa:ab:99: da:e7:a0:79:5b:99:69:14:61:cd:de:db:9d:ce:11: bd:6b:f8:91:79:4b:70:09:ed:ef:02:e4:1e:1a:da: 52:44:c6:b7:97:65:db:c5:02:f7:54:14:f3:b8:08: 2c:c5:70:4d:1a:04:68:83:52:12:2e:8d:c9:52:93: 40:d5:c2:c5:ad:1b:07:b7:6a:6c:93:e5:4b:1d:a6: d9:d5:95:13:bb:ff:92:5c:15:4c:e5:87:e5:b8:a1: dc:ae:b7:3e:fa:52:a3:52:32:60:ee:11:d8:6b:54: b5:a6:f3:e8:ce:98:59:b5:a7:4d:90:d0:0d:f2:80: 9c:ec:17:f9:23:da:63:36:b8:b9:3e:a6:f2:00:b1: c5:1f:17:9b:09:a0:16:1b:58:2d:c1:d8:ea:7c:51: 5b:d1:70:61:74:d5:a7:f1:b5:32:ec:7f:4b:26:e2: 0c:49:39:5e:dc:dd:29:85:f0:84:2e:f6:1a:84:75: 3c:1e:e3:1c:6b:ff:66:ee:69:31:45:e0:09:83:b7: 9d:88:d5:20:d7:e3:ec:5c:38:65:b5:e2:b5:17:ff: 07:5f:0f:23:3b:c7:6f:75:2d:c5:00:59:b1:b5:a9: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:84:90:68:D7:AB:8A:93:CB:16:8C:97:42:34:11:53:35:49:BF:A7 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c8:2e:2a:a0:bd:43:bb:ad:1c:22:23:bd:76:31:8a:22:8b: 75:ae:3a:aa:3f:11:a7:59:9c:47:80:93:3a:b7:48:8f:f2:46: b6:d3:ec:d8:5a:41:9d:09:cc:b4:a1:ef:64:0d:7b:00:23:cf: 49:db:e5:11:b3:a4:c2:08:23:d1:3c:cf:b7:75:0b:e1:d6:11: 64:ea:45:5a:a5:fe:9d:cf:63:8b:ef:9a:85:31:40:e7:9a:d2: 13:4b:fb:16:9a:36:2a:94:81:65:52:ef:3c:e8:5f:4e:c2:d4: ba:50:76:42:1b:8e:00:79:77:32:3c:e4:75:7e:c1:23:79:1f: 62:5e:01:f9:a6:b7:90:c1:4a:88:c3:61:30:43:b7:96:c8:34: dd:27:2b:88:5d:da:1f:eb:28:e5:02:d6:23:54:2b:49:41:9b: 37:36:30:10:ae:82:44:ba:6b:cb:ef:76:95:77:c0:c9:1f:19: eb:de:b5:34:49:1e:82:b0:56:91:3a:8e:1b:ad:1f:93:48:30: e6:5d:23:37:d6:2e:6a:3b:c2:f9:3f:cb:92:21:4a:1e:32:c3: 9f:43:44:84:27:4f:a7:c5:71:a1:6e:b0:66:a5:fa:e6:4b:1f: 53:c8:6e:62:d3:7a:3f:dc:12:d4:01:36:1f:95:00:3c:bb:fa: 91:24:e5:77 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUOSr94yGYO9xKsPB9QTwOMQUXTjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNjAzMDExNTM2MzBaFw0yNjAzMDIxNzQ4MzBaMDMxMTAvBgNV BAMTKEUzODQ5MDY4RDdBQjhBOTNDQjE2OEM5NzQyMzQxMTUzMzU0OUJGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVfG78Vu4eI2S19GXAnIJWaz+ cfRmoPw6GaqrmdrnoHlbmWkUYc3e253OEb1r+JF5S3AJ7e8C5B4a2lJExreXZdvF AvdUFPO4CCzFcE0aBGiDUhIujclSk0DVwsWtGwe3amyT5UsdptnVlRO7/5JcFUzl h+W4odyutz76UqNSMmDuEdhrVLWm8+jOmFm1p02Q0A3ygJzsF/kj2mM2uLk+pvIA scUfF5sJoBYbWC3B2Op8UVvRcGF01afxtTLsf0sm4gxJOV7c3SmF8IQu9hqEdTwe 4xxr/2buaTFF4AmDt52I1SDX4+xcOGW14rUX/wdfDyM7x291LcUAWbG1qcNHAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQU44SQaNeripPLFoyXQjQRUzVJv6cwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAksguKqC9Q7utHCIjvXYxiiKLda46qj8Rp1mc R4CTOrdIj/JGttPs2FpBnQnMtKHvZA17ACPPSdvlEbOkwggj0TzPt3UL4dYRZOpF WqX+nc9ji++ahTFA55rSE0v7Fpo2KpSBZVLvPOhfTsLUulB2QhuOAHl3MjzkdX7B I3kfYl4B+aa3kMFKiMNhMEO3lsg03ScriF3aH+so5QLWI1QrSUGbNzYwEK6CRLpr y+92lXfAyR8Z6961NEkegrBWkTqOG60fk0gw5l0jN9YuajvC+T/LkiFKHjLDn0NE hCdPp8VxoW6wZqX65ksfU8huYtN6P9wS1AE2H5UAPLv6kSTldw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:14:17 2026 by rpki-client