$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: xmcvaYW9HstOIiMTYfYfAWDsEKA+Y1TqdF7cJY7HTC8= Subject key identifier: 49:97:58:75:2D:CC:C4:D0:2A:7A:2A:8D:F6:EA:2F:2D:63:7B:66:D3 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 7025667858E584A6111F3F9F7B65D661BE2ACF66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 08F3 Signing time: Tue 04 Nov 2025 17:48:34 +0000 Manifest this update: Tue 04 Nov 2025 17:43:34 +0000 Manifest next update: Wed 05 Nov 2025 19:17:34 +0000 Files and hashes: 1: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 2: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 3: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 4: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 5: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: bF7Ku473izv90A5zdscJo3WUDuiHhX18JOysmRJB6fg=) 6: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 7: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 8: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 9: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 10: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 11: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 12: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 13: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 14: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 15: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 16: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 17: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 18: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 19: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 20: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 21: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 22: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 23: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 24: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 25: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 26: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 27: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 28: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 29: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 30: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:25:66:78:58:e5:84:a6:11:1f:3f:9f:7b:65:d6:61:be:2a:cf:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Nov 4 17:43:34 2025 GMT Not After : Nov 5 19:17:34 2025 GMT Subject: CN=499758752DCCC4D02A7A2A8DF6EA2F2D637B66D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:51:e7:74:b7:75:f5:31:60:a7:7f:25:f6: 65:a5:48:5a:c8:71:58:03:b8:e9:c2:6e:a0:4f:80: cf:40:92:4a:eb:93:80:1e:c4:0c:57:86:56:37:15: 1a:e8:df:97:c5:e6:ae:99:c3:94:7b:c6:fb:93:69: 58:18:08:01:ec:0e:62:40:75:cb:3e:6f:5a:c3:11: 0d:6d:1d:de:95:99:fc:e4:0c:2c:f4:3a:29:96:91: 0e:44:00:af:39:b1:21:42:56:e2:db:00:c4:25:02: 06:c1:90:9d:42:1c:29:37:81:92:97:52:c3:d3:2a: 25:1a:0a:87:08:ab:f6:5b:1d:a4:07:36:db:fd:e5: 59:4d:be:d2:ac:e4:e7:b8:97:94:a7:87:dd:5b:97: 38:ef:14:e0:75:80:2f:7d:91:1e:a6:98:83:b0:23: 54:de:e3:77:6d:fa:74:dd:6c:a4:b8:cb:84:a8:4f: 03:57:d3:ca:19:67:91:f6:8c:ff:2c:34:c5:af:6d: d1:9e:be:39:95:03:15:85:4b:05:d0:80:29:8c:1f: 64:be:91:d5:ec:64:4c:2f:3a:fb:81:dd:4d:bb:40: 76:c9:f2:92:3e:14:f0:1d:41:6c:52:6e:86:39:2e: 94:7f:95:6a:b0:6e:a9:98:45:3d:77:0a:a5:6f:b9: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:97:58:75:2D:CC:C4:D0:2A:7A:2A:8D:F6:EA:2F:2D:63:7B:66:D3 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:78:6c:cf:c0:22:3f:3a:e7:fc:9f:bf:56:5f:41:57:75: 56:ab:a9:6c:4a:a1:ba:e9:e0:cc:81:7c:f9:44:41:c0:d9:70: 1e:ee:92:90:07:3b:0a:a6:63:06:79:76:10:91:64:a4:f5:f1: 38:56:1e:24:dc:7c:6d:18:b2:70:94:f5:6e:1f:0e:e0:2d:34: df:3e:68:4e:2a:ba:e3:a2:de:49:c2:c0:24:56:5c:db:2c:11: 06:55:c8:40:29:96:38:eb:b5:48:28:2b:01:2b:35:45:a2:d8: 35:21:ac:36:b1:47:94:5c:f4:aa:f7:e5:b6:95:be:99:53:30: 11:5c:c2:cd:2b:72:94:51:57:11:0a:f8:62:fb:33:bd:e4:b5: 6a:af:57:14:d9:96:66:d5:87:be:d9:9c:55:6c:35:2a:b8:ec: d5:27:8e:46:87:5d:9e:7a:09:58:7b:3f:0c:9d:75:a7:c8:b2: 8b:4a:bc:cf:d5:79:f6:8b:1c:dd:73:02:b9:21:61:12:9e:3a: 72:ef:87:36:f6:6c:d5:d0:8f:f0:ec:39:7c:56:16:0a:dc:ba: 3a:2f:44:79:6e:85:90:c6:67:3d:66:76:fc:9c:63:a6:79:16: 37:0f:10:1f:13:ec:b0:db:8c:36:b5:1d:1d:35:bc:82:c6:74: 45:d8:5c:fc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUcCVmeFjlhKYRHz+fe2XWYb4qz2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTExMDQxNzQzMzRaFw0yNTExMDUxOTE3MzRaMDMxMTAvBgNV BAMTKDQ5OTc1ODc1MkRDQ0M0RDAyQTdBMkE4REY2RUEyRjJENjM3QjY2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvlHndLd19TFgp38l9mWlSFrI cVgDuOnCbqBPgM9Akkrrk4AexAxXhlY3FRro35fF5q6Zw5R7xvuTaVgYCAHsDmJA dcs+b1rDEQ1tHd6VmfzkDCz0OimWkQ5EAK85sSFCVuLbAMQlAgbBkJ1CHCk3gZKX UsPTKiUaCocIq/ZbHaQHNtv95VlNvtKs5Oe4l5Snh91blzjvFOB1gC99kR6mmIOw I1Te43dt+nTdbKS4y4SoTwNX08oZZ5H2jP8sNMWvbdGevjmVAxWFSwXQgCmMH2S+ kdXsZEwvOvuB3U27QHbJ8pI+FPAdQWxSboY5LpR/lWqwbqmYRT13CqVvuUijAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUSZdYdS3MxNAqeiqN9uovLWN7ZtMwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEALbx4bM/AIj865/yfv1ZfQVd1VqupbEqhuung zIF8+URBwNlwHu6SkAc7CqZjBnl2EJFkpPXxOFYeJNx8bRiycJT1bh8O4C003z5o Tiq646LeScLAJFZc2ywRBlXIQCmWOOu1SCgrASs1RaLYNSGsNrFHlFz0qvfltpW+ mVMwEVzCzStylFFXEQr4YvszveS1aq9XFNmWZtWHvtmcVWw1Krjs1SeORoddnnoJ WHs/DJ11p8iyi0q8z9V59osc3XMCuSFhEp46cu+HNvZs1dCP8Ow5fFYWCty6Oi9E eW6FkMZnPWZ2/JxjpnkWNw8QHxPssNuMNrUdHTW8gsZ0Rdhc/A== -----END CERTIFICATE-----Generated at Tue Nov 4 20:27:25 2025 by rpki-client