$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: X8BHemvRAuV8iE6lOdG0tLzZI3jjxgwvcDw42W5Thf8= Subject key identifier: 60:AD:33:A3:07:42:9A:63:FB:61:A9:85:03:C5:2E:EC:7F:73:3D:7A Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 512BB135C1F76D3BDD260D370AF3C9487767251E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 0874 Signing time: Tue 05 Aug 2025 15:49:23 +0000 Manifest this update: Tue 05 Aug 2025 15:44:23 +0000 Manifest next update: Wed 06 Aug 2025 16:58:23 +0000 Files and hashes: 1: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 2: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=) 3: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=) 4: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=) 5: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=) 6: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 7: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=) 8: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=) 9: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 10: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=) 11: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: aFDhjKI8DdwaXy2aDND1rUQ0sxDWit6DAXbAyBfBvGc=) 12: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=) 13: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=) 14: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=) 15: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=) 16: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=) 17: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 18: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=) 19: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=) 20: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=) 21: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=) 22: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=) 23: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 24: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 25: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=) 26: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=) 27: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=) 28: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=) 29: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=) 30: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 16:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2b:b1:35:c1:f7:6d:3b:dd:26:0d:37:0a:f3:c9:48:77:67:25:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Aug 5 15:44:23 2025 GMT Not After : Aug 6 16:58:23 2025 GMT Subject: CN=60AD33A307429A63FB61A98503C52EEC7F733D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:08:ee:5a:96:2f:cc:d3:d6:aa:fe:8d:d0: 0d:c9:e6:97:35:95:81:01:ff:f5:f9:89:26:36:76: 8a:04:6f:45:b3:13:37:f1:cf:10:b2:71:91:71:db: 3f:9c:42:8c:03:e7:98:7d:6d:f6:2a:9b:cc:f0:6d: 59:55:a1:d9:91:c3:ea:45:03:76:a3:b6:49:57:a4: 17:0e:0a:35:ed:94:e1:64:99:6a:65:56:6b:53:46: 94:f8:b6:79:ee:9e:bf:11:4e:ae:7c:7c:e3:f7:4f: 49:be:25:0b:ca:ee:16:ec:9e:6e:92:94:ef:15:2e: e0:9c:ff:c2:27:4a:67:9a:ce:5d:a1:7c:f5:7a:64: dd:be:8f:3f:e9:5f:58:8a:c2:4e:29:69:3c:dc:34: 1f:50:bf:6f:05:68:1d:03:6a:a1:53:94:6d:b9:ae: c3:0e:91:a9:97:25:d7:f2:0a:b7:a0:47:ac:6a:13: 5b:9f:49:16:6a:ac:11:5f:8f:65:bb:50:99:a0:06: c8:2c:5b:0f:8b:21:89:76:2d:df:9c:7a:c2:0f:36: 8d:14:43:e7:f2:a7:e3:b9:32:4a:10:83:77:00:d5: b7:63:43:55:69:9c:46:b3:fa:c7:56:c1:0f:71:e5: f6:37:0c:a6:c5:57:b5:5d:a8:ce:9a:e8:5c:9f:dd: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:33:A3:07:42:9A:63:FB:61:A9:85:03:C5:2E:EC:7F:73:3D:7A X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2f:df:f3:0c:9a:8f:3d:d8:9d:d5:5b:6b:70:3d:3d:5a:40: 9d:76:af:0b:f9:1e:e3:a6:61:6a:df:22:ea:21:8c:fa:a3:71: 5a:d6:ad:a9:e4:83:e2:14:ca:c1:5b:07:34:a4:58:96:ce:50: 37:9e:a8:de:ef:a8:fe:7e:af:5a:bb:59:98:91:27:e8:32:a9: 60:bc:2b:cd:44:33:7a:34:68:17:ba:22:83:05:c3:0b:83:a5: 6a:8e:be:20:4c:41:2b:d9:7f:ba:6d:ff:8e:44:57:9e:61:a8: 73:c8:53:ba:22:87:be:47:d6:1e:85:03:bd:1c:eb:14:f1:80: d7:5f:43:cf:ad:a6:2e:45:bf:4a:6b:31:50:cc:f6:a8:31:e1: d5:0a:15:9d:a6:eb:66:c0:f1:3a:da:26:40:24:1d:34:9b:e4: 1a:a3:0e:d9:e8:cc:68:44:5b:8c:36:87:59:76:d1:66:fc:90: 83:03:8c:5e:13:ce:08:e0:40:34:e0:85:e7:e0:73:6f:95:f1: 11:56:45:8d:26:1c:19:96:02:16:e4:3e:b9:a4:e1:8e:f8:4f: d8:b7:98:09:ba:c0:76:80:5d:89:63:3e:5a:52:86:7b:38:2b: e7:d7:72:93:96:0c:6a:18:94:a1:ed:8e:26:9c:15:8d:96:bb: 69:ea:d0:f5 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUUSuxNcH3bTvdJg03CvPJSHdnJR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTA4MDUxNTQ0MjNaFw0yNTA4MDYxNjU4MjNaMDMxMTAvBgNV BAMTKDYwQUQzM0EzMDc0MjlBNjNGQjYxQTk4NTAzQzUyRUVDN0Y3MzNEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNQjuWpYvzNPWqv6N0A3J5pc1 lYEB//X5iSY2dooEb0WzEzfxzxCycZFx2z+cQowD55h9bfYqm8zwbVlVodmRw+pF A3ajtklXpBcOCjXtlOFkmWplVmtTRpT4tnnunr8RTq58fOP3T0m+JQvK7hbsnm6S lO8VLuCc/8InSmeazl2hfPV6ZN2+jz/pX1iKwk4paTzcNB9Qv28FaB0DaqFTlG25 rsMOkamXJdfyCregR6xqE1ufSRZqrBFfj2W7UJmgBsgsWw+LIYl2Ld+cesIPNo0U Q+fyp+O5MkoQg3cA1bdjQ1VpnEaz+sdWwQ9x5fY3DKbFV7VdqM6a6Fyf3ZhRAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUYK0zowdCmmP7YamFA8Uu7H9zPXowHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAjy/f8wyajz3YndVba3A9PVpAnXavC/ke46Zh at8i6iGM+qNxWtatqeSD4hTKwVsHNKRYls5QN56o3u+o/n6vWrtZmJEn6DKpYLwr zUQzejRoF7oigwXDC4Olao6+IExBK9l/um3/jkRXnmGoc8hTuiKHvkfWHoUDvRzr FPGA119Dz62mLkW/SmsxUMz2qDHh1QoVnabrZsDxOtomQCQdNJvkGqMO2ejMaERb jDaHWXbRZvyQgwOMXhPOCOBANOCF5+Bzb5XxEVZFjSYcGZYCFuQ+uaThjvhP2LeY CbrAdoBdiWM+WlKGezgr59dyk5YMahiUoe2OJpwVjZa7aerQ9Q== -----END CERTIFICATE-----Generated at Wed Aug 6 05:26:15 2025 by rpki-client