Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          anzD2mMYy8oAb5dIOpG8VctkATFNoi1HIpGxHKsTvrg=
Subject key identifier:   DB:01:65:06:69:A0:C2:8B:3A:CC:C6:56:CD:05:FD:61:78:82:55:8B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       513EB03A0735128211E624B8CB6DC87CC9377661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          09E0
Signing time:             Thu 16 Apr 2026 15:16:32 +0000
Manifest this update:     Thu 16 Apr 2026 15:11:32 +0000
Manifest next update:     Fri 17 Apr 2026 17:31:32 +0000
Files and hashes:         1: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=)
                          2: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
                          3: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
                          4: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
                          5: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
                          6: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
                          7: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
                          8: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
                          9: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
                          10: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
                          11: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=)
                          12: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
                          13: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
                          14: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
                          15: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=)
                          16: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
                          17: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
                          18: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
                          19: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
                          20: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: bOFhNOGWao7ghslldbnrfJkMqFJb0j7XqW9+dHyCdug=)
                          21: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
                          22: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          23: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=)
                          24: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
                          25: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
                          26: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
                          27: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=)
                          28: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
                          29: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
                          30: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 17:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:b0:3a:07:35:12:82:11:e6:24:b8:cb:6d:c8:7c:c9:37:76:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Apr 16 15:11:32 2026 GMT
            Not After : Apr 17 17:31:32 2026 GMT
        Subject: CN=DB01650669A0C28B3ACCC656CD05FD617882558B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:6b:37:8e:ef:25:12:d8:68:9e:60:ce:b6:
                    af:ad:7d:ee:12:3e:78:70:ea:45:c0:9a:be:4a:23:
                    06:51:b1:b4:f4:5d:2d:6d:31:c3:e7:af:0d:08:4c:
                    a8:ad:10:db:89:a0:fd:04:54:98:6b:2b:5f:7d:65:
                    77:84:f0:c7:6c:c9:4e:b3:2c:5f:d7:fc:14:63:c3:
                    cb:bf:2d:37:c2:d3:8a:ee:5f:65:46:33:3d:f8:6f:
                    46:7d:a5:06:0c:7e:2b:4b:6c:e1:1c:3d:f8:95:7f:
                    ea:8d:09:a9:82:cc:de:d3:66:f7:a5:d6:d7:a4:2e:
                    ad:8c:99:ea:84:c6:8e:f2:69:60:24:1f:3f:6c:2d:
                    51:86:d2:06:7d:ca:dd:0d:a7:41:50:e9:55:50:97:
                    a0:3a:36:ca:07:94:e4:17:a5:78:b2:71:05:de:ba:
                    63:47:87:f2:43:c4:bb:af:f8:46:db:14:c0:a9:40:
                    3b:84:78:eb:12:36:ad:06:fb:2c:e3:d7:e5:99:a5:
                    11:81:dc:8e:de:c0:c3:c9:01:3f:e2:86:f1:aa:54:
                    cb:87:1c:0d:aa:d1:a9:16:af:88:89:39:9f:3f:0d:
                    b1:a7:40:58:91:41:67:9e:58:dd:39:ff:a9:58:60:
                    8b:89:44:f2:6e:63:d8:3e:39:c3:69:b6:e6:76:c9:
                    25:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:65:06:69:A0:C2:8B:3A:CC:C6:56:CD:05:FD:61:78:82:55:8B
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:01:1c:2a:38:cd:54:77:8e:76:67:d2:10:0f:87:36:9e:
         cc:e4:87:8e:ca:72:4b:9f:d1:30:47:97:56:59:26:b7:9a:95:
         b8:f5:af:d6:96:1f:0c:b4:4b:aa:07:45:e0:e3:a9:c5:ea:ca:
         4e:8b:df:cc:6d:4d:f5:de:b2:6e:f4:7e:87:f8:bb:8a:6b:4e:
         be:6c:41:b2:8c:81:00:89:18:48:b9:d2:c6:0e:87:16:fb:ef:
         98:eb:d3:2f:48:88:33:26:c8:b7:c3:8b:8e:71:08:ae:86:e1:
         dd:af:9f:b2:ef:d0:79:b4:1f:76:84:99:fc:d3:e5:ec:43:8b:
         8f:63:b7:9c:45:6f:93:a9:0b:3a:86:58:b4:c3:dd:72:f2:ed:
         01:48:9e:c8:2a:7c:14:53:48:97:b6:e7:66:50:2b:b5:89:59:
         85:c7:6e:33:0d:7a:54:90:03:c5:5a:7b:a2:36:7c:a5:3b:47:
         23:6a:52:e9:27:a7:57:d3:79:a0:44:fa:66:3d:11:04:70:d1:
         52:aa:e8:50:b0:da:86:ef:1c:f6:06:7c:e6:0a:88:45:7a:25:
         e3:f7:fb:fd:e1:82:53:fc:d8:56:35:d8:f1:21:f8:6c:1c:6e:
         de:9c:cb:8a:4f:a2:f9:88:2a:46:95:e3:81:17:c8:cc:54:20:
         bb:57:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:37:00 2026 by rpki-client