Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          cRwMsalhuTm71xVzrhUT1NwLWhSAaffMkg5qF5FfyZ0=
Subject key identifier:   95:F4:DF:27:B8:40:2E:3E:75:1F:F3:A1:E0:0C:9A:06:14:F3:59:E8
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       25977CC72CDDEA45CCF060E387EFA0E977312764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          082D
Signing time:             Sat 14 Jun 2025 16:33:35 +0000
Manifest this update:     Sat 14 Jun 2025 16:28:35 +0000
Manifest next update:     Sun 15 Jun 2025 19:38:35 +0000
Files and hashes:         1: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=)
                          2: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=)
                          3: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          4: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=)
                          5: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=)
                          6: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=)
                          7: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=)
                          8: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=)
                          9: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=)
                          10: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=)
                          11: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=)
                          12: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=)
                          13: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=)
                          14: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=)
                          15: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=)
                          16: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          17: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=)
                          18: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=)
                          19: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=)
                          20: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=)
                          21: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=)
                          22: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=)
                          23: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=)
                          24: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=)
                          25: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=)
                          26: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=)
                          27: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: XUz55QVP/AX/5uyEIxZqISvR/d8RVAYGqKUfq5fmg7s=)
                          28: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=)
                          29: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=)
                          30: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:97:7c:c7:2c:dd:ea:45:cc:f0:60:e3:87:ef:a0:e9:77:31:27:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jun 14 16:28:35 2025 GMT
            Not After : Jun 15 19:38:35 2025 GMT
        Subject: CN=95F4DF27B8402E3E751FF3A1E00C9A0614F359E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:4f:78:69:bf:30:6e:2b:14:9c:ae:60:b7:
                    1a:fc:8a:b0:40:35:e7:4d:80:03:69:97:14:57:cf:
                    bd:a5:3f:8c:f6:dc:c7:02:b0:d6:90:5f:19:95:52:
                    46:dd:eb:42:53:75:76:81:ee:48:db:c3:62:3d:a3:
                    56:1a:4c:99:53:55:f6:0e:b0:64:40:cd:62:aa:3f:
                    01:91:8a:b0:12:09:79:55:75:23:7f:65:ad:8e:f1:
                    70:0b:77:3f:30:a8:b5:a2:43:32:ce:18:0a:f4:9c:
                    48:f0:73:38:e7:d6:79:2c:f2:d2:84:b5:d5:6c:d4:
                    c8:4a:79:12:13:1c:b2:3f:d0:0c:70:31:40:92:37:
                    f2:9d:c2:0d:19:00:1e:c6:c9:aa:87:46:2a:1a:58:
                    39:5b:d5:4e:1f:26:82:6b:f6:bb:1b:19:c5:d8:60:
                    dd:2d:0b:2e:9f:36:49:6a:03:f4:2b:4c:18:3d:42:
                    23:3d:95:31:10:bc:56:57:73:b1:1b:5b:fe:c0:8e:
                    6a:f0:f9:ac:52:31:30:6a:10:29:a1:f0:f4:32:02:
                    e3:54:36:6f:86:2a:ab:d9:d3:91:60:e9:31:ec:1d:
                    46:6f:69:35:98:e2:fc:26:84:e5:e2:5d:7a:42:70:
                    e8:f9:d0:46:75:20:42:3e:3f:45:d5:1c:a2:25:a6:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:DF:27:B8:40:2E:3E:75:1F:F3:A1:E0:0C:9A:06:14:F3:59:E8
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:fe:b5:f6:58:bb:b8:57:3d:78:cd:8f:d6:31:bc:7a:3b:bf:
         62:d4:50:70:48:f2:dd:0c:5d:cc:e9:c6:2a:16:55:8c:9d:ee:
         88:c3:d0:6c:b4:6d:c4:31:4f:d4:61:fe:bf:7e:7c:b9:75:8f:
         48:8d:9b:db:9f:b0:4a:0e:56:36:fe:af:25:a3:90:25:1e:e4:
         97:d1:79:36:e9:45:9b:50:9d:bb:bd:22:6a:d7:69:29:b7:be:
         f5:a0:ce:1a:86:8a:95:53:9f:ef:8c:4f:f1:56:a6:a1:4d:80:
         bc:e5:b5:73:c3:ba:e7:97:53:6b:2c:6a:e2:fb:71:2e:c6:98:
         4f:23:24:79:67:1c:b4:f1:fc:9c:26:95:7f:e9:af:c4:e6:54:
         03:1e:b4:51:c5:91:4e:ea:d3:18:9b:cf:9b:97:d9:34:34:80:
         06:70:33:43:a3:dd:c2:6c:bb:6b:56:69:4f:d2:2f:fe:0a:6e:
         69:fc:97:cb:26:b1:18:2b:bf:6c:da:c1:84:2d:ed:5f:6a:3c:
         f4:51:d0:76:36:b9:77:ba:63:5c:a0:d1:9a:f5:4d:51:d2:05:
         7a:d9:c9:12:ac:44:89:bd:f8:56:6d:b9:c6:90:e4:65:f1:4d:
         e3:48:15:70:1b:d7:a2:2c:d2:fc:e6:5c:72:02:16:89:98:ac:
         f5:c0:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:06:16 2025 by rpki-client