Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          Yj38sYthqpXWcsUPsec0beRO9JW/Qr7OlG1tdPN6F+8=
Subject key identifier:   E8:5E:8A:3A:AF:E0:61:DE:7A:EC:63:06:B2:C5:35:B1:7F:2A:4A:64
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       10569E8A0F0851306638812FA1DC4F09C5E2C135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          0A45
Signing time:             Wed 17 Jun 2026 03:58:59 +0000
Manifest this update:     Wed 17 Jun 2026 03:53:59 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:59 +0000
Files and hashes:         1: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
                          2: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
                          3: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
                          4: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: 7U7jmlBc+rBQVeWljKJPTRvkABS2bO5pLdnEIg2cOGM=)
                          5: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
                          6: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: IzYGyBUr1iUqCws6DgtfA1OIfIPTsryxyrR7PL8GwJI=)
                          7: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
                          8: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
                          9: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
                          10: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
                          11: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
                          12: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
                          13: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
                          14: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=)
                          15: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
                          16: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=)
                          17: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
                          18: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=)
                          19: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
                          20: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
                          21: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
                          22: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
                          23: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=)
                          24: 3138352e33372e3235322e302f32322d3234203d3e2033323538.roa (hash: Ud8noFELJBOlRFNHt6Bu5c6/4igIlvOzTLs7z8OalKI=)
                          25: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
                          26: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
                          27: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=)
                          28: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
                          29: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
                          30: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
                          31: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:56:9e:8a:0f:08:51:30:66:38:81:2f:a1:dc:4f:09:c5:e2:c1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jun 17 03:53:59 2026 GMT
            Not After : Jun 18 07:00:59 2026 GMT
        Subject: CN=E85E8A3AAFE061DE7AEC6306B2C535B17F2A4A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:f3:e2:7e:50:b5:c7:d6:24:e7:62:b9:c3:
                    9f:93:76:25:01:67:b9:aa:cb:a5:8c:ac:4a:5a:b2:
                    77:4e:df:3f:e0:bd:89:2e:82:ef:6f:67:8d:71:9c:
                    0e:7f:df:62:5a:94:e8:61:3e:70:09:b3:c1:74:63:
                    8d:4f:ef:00:11:e6:76:62:fd:d7:4b:f0:54:f0:be:
                    cd:f9:af:65:5d:f7:ed:b4:e1:87:85:20:f4:39:14:
                    cd:df:70:c1:a7:1c:70:ca:3f:98:6e:d3:8f:ec:b8:
                    6e:8e:4f:8b:5b:dc:23:3e:66:a5:6b:db:6b:1c:00:
                    a9:03:3f:f3:87:2b:6e:9f:65:8e:ea:12:6e:16:5c:
                    06:30:eb:30:78:0e:88:da:14:06:f6:4e:ff:a9:cc:
                    33:ca:d3:38:14:18:92:bf:67:99:57:44:b0:cc:4d:
                    7b:d5:05:80:46:8c:21:69:97:12:c9:1a:6b:bb:75:
                    f9:af:77:52:e8:a4:e0:71:77:02:ab:35:3a:dd:81:
                    b3:42:ad:19:23:e8:9f:e6:66:b9:1b:99:ff:9f:4d:
                    8f:fc:f3:75:47:62:b9:c3:9b:93:a9:b4:90:cd:79:
                    5e:24:5e:58:d8:36:01:9a:46:d4:61:af:72:fa:49:
                    f9:1f:c3:22:f9:4f:fc:a3:d5:b0:65:11:58:36:d3:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:8A:3A:AF:E0:61:DE:7A:EC:63:06:B2:C5:35:B1:7F:2A:4A:64
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ef:25:7d:3c:d2:0f:52:aa:d1:76:d0:2b:37:7e:ae:c8:77:
         be:d5:14:4d:62:b3:07:8c:2c:aa:7a:30:f3:4c:86:41:ac:ed:
         df:7f:48:40:cc:24:34:df:5d:d5:41:e2:1f:83:5c:95:46:89:
         8e:c1:39:59:27:42:3f:0b:43:ce:74:3f:e8:18:6b:be:f0:67:
         b8:20:19:6a:25:cf:a2:f0:83:14:41:b8:da:46:fe:36:2d:f9:
         36:71:38:88:d7:a3:85:a0:b0:8e:1f:97:5d:9f:a3:91:b3:21:
         b3:95:b3:f8:92:fa:37:06:3f:8e:54:22:73:46:41:e1:13:37:
         27:f5:e1:bd:ad:df:34:02:e2:97:55:81:e9:ab:df:ff:fd:8f:
         08:5f:e1:84:c0:7a:85:0d:cb:d8:9c:9f:78:7d:35:1c:10:3b:
         36:55:3c:23:64:dd:10:fb:ec:6e:af:b8:d1:99:76:6a:b9:5e:
         5c:63:2e:b8:ea:ad:44:d4:c1:f2:0c:f6:b5:db:ef:1a:a6:2b:
         5a:dc:d7:b1:b6:2e:e2:82:90:9f:5c:35:dc:30:e9:6f:ad:ac:
         c2:b8:84:bd:a2:74:ac:ec:68:32:43:0d:25:b0:93:7b:9c:b0:
         9e:42:47:a2:44:e6:a0:25:8e:71:e7:d9:3a:7f:d1:41:87:67:
         9b:ed:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:55:55 2026 by rpki-client