Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          kepyWYWnxWhSIBlLaCtYVQSXOyI0f2VblltotyFLzbk=
Subject key identifier:   1F:50:53:AC:87:FF:43:5B:2C:A3:C6:0A:94:53:1F:23:06:58:9F:27
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       78F6DCEAC5FE3082F07532C9D55DA72A488372CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          07E9
Signing time:             Fri 25 Apr 2025 19:30:33 +0000
Manifest this update:     Fri 25 Apr 2025 19:25:33 +0000
Manifest next update:     Sat 26 Apr 2025 22:54:33 +0000
Files and hashes:         1: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: l9wz64b1uT5mXG8MOrlJDswmvqObrd9l4BUMjEA3M20=)
                          2: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=)
                          3: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=)
                          4: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=)
                          5: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=)
                          6: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=)
                          7: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=)
                          8: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=)
                          9: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=)
                          10: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=)
                          11: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=)
                          12: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=)
                          13: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=)
                          14: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=)
                          15: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=)
                          16: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=)
                          17: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=)
                          18: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=)
                          19: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=)
                          20: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=)
                          21: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=)
                          22: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          23: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=)
                          24: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=)
                          25: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=)
                          26: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=)
                          27: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=)
                          28: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=)
                          29: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=)
                          30: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: BAb7hWNMhXpZp+0vnVyRiFl/HrUl9SGTSyV5G7W5GT4=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Apr 2025 22:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f6:dc:ea:c5:fe:30:82:f0:75:32:c9:d5:5d:a7:2a:48:83:72:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Apr 25 19:25:33 2025 GMT
            Not After : Apr 26 22:54:33 2025 GMT
        Subject: CN=1F5053AC87FF435B2CA3C60A94531F2306589F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:60:e8:73:e3:3c:95:c8:7b:bb:2f:a3:76:
                    96:44:d5:a6:11:2d:49:1f:1b:de:fa:81:76:03:ac:
                    bf:e2:33:63:91:0c:3d:b3:2a:03:66:e7:d4:0c:74:
                    9e:cc:ab:b1:49:dd:97:e1:8f:5a:33:9e:61:06:52:
                    b7:5f:2d:1f:f2:aa:42:da:3a:d7:80:2f:6c:24:98:
                    75:13:51:44:2b:9d:66:32:1e:d2:0c:58:bd:f4:a7:
                    26:ca:0f:5e:0b:f5:28:08:ae:e5:3e:f9:3b:0b:9a:
                    a5:76:1a:7f:b5:98:15:fb:5d:97:e7:e8:bb:70:08:
                    41:6d:ad:29:9a:14:74:1e:63:ce:60:65:cd:36:25:
                    f9:bf:a8:f2:bf:28:10:11:f4:7c:eb:3d:cf:da:85:
                    aa:0c:a8:99:73:90:1a:2f:fb:34:9b:c9:83:ea:61:
                    21:84:73:6b:7b:e9:b2:40:ef:aa:d3:50:16:49:83:
                    94:51:ce:12:87:31:53:75:c0:ba:bc:33:6b:16:7a:
                    75:0b:ae:7a:56:25:9d:f1:e9:87:fa:07:da:a3:bf:
                    cb:72:b9:60:22:e5:27:15:f2:4d:7f:25:c1:d1:46:
                    3e:60:f7:dc:84:41:62:ca:5b:e4:a0:d5:b6:af:f3:
                    28:82:78:49:b6:e0:df:ff:5f:f3:80:71:a3:c0:55:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:50:53:AC:87:FF:43:5B:2C:A3:C6:0A:94:53:1F:23:06:58:9F:27
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:64:8d:7f:1c:75:dc:66:00:4e:da:93:9a:a8:d0:39:24:
         c8:1e:6e:d0:de:01:d8:23:30:a3:d6:db:65:3e:48:d6:41:b7:
         87:88:78:3b:db:88:b5:65:45:67:f5:0a:cc:4a:05:7c:f2:89:
         b4:65:46:21:5a:83:ea:9a:63:c8:21:35:f1:f9:ff:52:69:a0:
         78:08:40:10:22:f8:bc:e9:65:8a:70:34:60:ee:dd:0b:ee:13:
         d1:b7:d8:98:14:70:b2:6b:13:eb:09:f9:b4:da:d3:08:b2:f9:
         8e:78:4d:68:14:db:3f:18:73:56:22:44:3d:a3:36:b4:ed:0a:
         e3:48:fa:56:a2:62:e2:90:24:99:8a:8c:87:8b:1c:13:8d:41:
         b9:bd:da:74:ec:0b:d6:95:cc:5b:9a:15:7e:70:da:18:21:a7:
         78:73:59:16:19:ce:06:04:00:23:1c:5f:00:13:9f:57:7e:6d:
         82:b7:c1:3b:f8:61:5d:56:af:a7:bb:3b:9a:18:cf:84:ee:a3:
         fb:a0:66:e3:22:31:05:d9:19:5f:74:eb:a4:c1:62:90:a7:16:
         23:5e:97:fc:c5:f0:67:d0:6b:35:c9:cc:83:ba:b2:7f:57:a6:
         9f:87:74:81:cc:36:01:2f:63:5d:84:0b:d6:6d:7e:80:60:db:
         84:bf:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:45 2025 by rpki-client