$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: PLzD1tE3FFB5cExgpewPyX/HLziZE5LSMs8k6cjrJjI= Subject key identifier: 89:C4:81:E1:87:C2:40:07:B1:1B:D1:E4:AA:9F:5B:E1:9C:0A:FB:99 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 6B608048B701BFC3A951EDD756D7101BBB00B19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 0A15 Signing time: Tue 12 May 2026 10:41:33 +0000 Manifest this update: Tue 12 May 2026 10:36:33 +0000 Manifest next update: Wed 13 May 2026 12:34:33 +0000 Files and hashes: 1: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 2: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 3: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 4: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 5: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 6: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 7: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 8: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 9: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 10: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 11: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 12: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 13: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 14: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 15: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: vXtlJ5M5gtqeoYRHnR8pUYFwoK3J0+nRW6VFhisRNDY=) 16: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 17: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 18: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 19: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=) 20: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 21: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=) 22: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 23: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=) 24: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 25: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 26: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 27: 3138352e33372e3235322e302f32322d3234203d3e2033323538.roa (hash: Ud8noFELJBOlRFNHt6Bu5c6/4igIlvOzTLs7z8OalKI=) 28: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 29: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: IzYGyBUr1iUqCws6DgtfA1OIfIPTsryxyrR7PL8GwJI=) 30: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 31: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:60:80:48:b7:01:bf:c3:a9:51:ed:d7:56:d7:10:1b:bb:00:b1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: May 12 10:36:33 2026 GMT Not After : May 13 12:34:33 2026 GMT Subject: CN=89C481E187C24007B11BD1E4AA9F5BE19C0AFB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:9d:c7:e9:2b:01:ac:71:a8:3d:59:b0:3b: 4b:74:2f:d9:2d:b2:77:ca:d0:8f:08:ca:72:19:63: 2b:8e:b4:bb:b6:af:fc:29:90:26:09:0c:20:96:3b: 0c:ac:bb:4c:c1:76:0e:8d:7d:fc:35:53:15:a9:d7: 66:c4:8b:37:a7:53:d5:ed:ce:e8:e2:e3:f7:08:68: 3f:94:93:70:aa:62:f2:b0:a4:f1:64:77:7e:c7:b3: fa:76:0c:fa:9a:25:12:78:db:c4:c5:25:c0:54:09: 35:f7:46:c7:c2:c7:03:ea:af:2d:d9:87:74:b4:5a: b4:02:76:da:e0:c5:80:87:f6:74:1f:5e:aa:b9:8b: 27:14:fc:c2:39:28:40:88:84:d9:2f:48:36:79:a4: a8:08:1b:65:bf:48:8d:8a:e0:23:35:f9:76:7e:b8: bd:4b:e0:83:9c:b8:ba:33:45:2a:75:c7:f9:53:e4: 27:13:60:e6:93:a8:89:e1:5f:d4:48:9f:38:b8:14: cd:74:30:c5:74:b3:93:f1:40:b2:3c:42:2f:da:57: f5:29:1c:dd:58:75:33:6e:e7:07:02:d6:a4:ab:d4: f9:4f:53:f0:a6:00:a9:95:10:22:f5:55:24:e5:67: 5f:3b:f8:a7:f6:b5:05:e1:58:35:25:7a:37:88:b7: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C4:81:E1:87:C2:40:07:B1:1B:D1:E4:AA:9F:5B:E1:9C:0A:FB:99 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d6:dc:fc:3e:0f:18:81:22:7e:6f:f8:7c:9e:ca:d5:2e:47: 15:f5:0a:39:12:dc:70:92:0f:79:1a:13:cd:23:fa:6b:12:98: 0d:a6:b4:7c:1e:f2:28:19:91:45:d9:2b:e2:bb:bd:d1:0f:ee: 4a:0f:0e:2c:ca:4d:b5:2f:22:55:fb:26:c0:96:b0:40:71:24: 4c:38:cb:9a:cf:e2:e0:2f:08:db:97:20:b1:36:48:20:e3:4d: b3:09:91:37:fd:19:a4:e9:2e:eb:17:36:4b:bf:68:89:06:0a: c7:77:79:3c:57:e2:10:c3:36:03:d0:cd:f6:0b:f8:3e:15:45: 2d:40:9e:8d:9f:c4:59:c1:db:c3:78:30:22:06:1c:11:92:12: 03:82:1b:0a:ea:7f:08:63:dd:fe:cd:98:6a:5c:8b:f9:d6:40: e5:eb:95:af:6f:29:ea:6d:e2:ea:c3:ec:e6:99:58:d9:ec:1c: 4e:0f:99:fc:0a:42:26:23:98:7d:72:01:4e:ab:61:cc:4e:e0: 06:c0:d4:16:31:68:67:85:67:a8:8d:8a:80:f5:f7:80:36:28: 7a:78:4f:24:2a:7d:86:34:95:3e:b0:70:b7:b2:2d:b2:a1:5d: bb:7c:66:96:55:a1:10:f2:64:21:9a:d9:c3:8a:76:05:9b:37: 24:59:28:dc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUa2CASLcBv8OpUe3XVtcQG7sAsZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNjA1MTIxMDM2MzNaFw0yNjA1MTMxMjM0MzNaMDMxMTAvBgNV BAMTKDg5QzQ4MUUxODdDMjQwMDdCMTFCRDFFNEFBOUY1QkUxOUMwQUZCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxR53H6SsBrHGoPVmwO0t0L9kt snfK0I8IynIZYyuOtLu2r/wpkCYJDCCWOwysu0zBdg6Nffw1UxWp12bEizenU9Xt zuji4/cIaD+Uk3CqYvKwpPFkd37Hs/p2DPqaJRJ428TFJcBUCTX3RsfCxwPqry3Z h3S0WrQCdtrgxYCH9nQfXqq5iycU/MI5KECIhNkvSDZ5pKgIG2W/SI2K4CM1+XZ+ uL1L4IOcuLozRSp1x/lT5CcTYOaTqInhX9RInzi4FM10MMV0s5PxQLI8Qi/aV/Up HN1YdTNu5wcC1qSr1PlPU/CmAKmVECL1VSTlZ187+Kf2tQXhWDUlejeIty9xAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUicSB4YfCQAexG9Hkqp9b4ZwK+5kwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAfdbc/D4PGIEifm/4fJ7K1S5HFfUKORLccJIP eRoTzSP6axKYDaa0fB7yKBmRRdkr4ru90Q/uSg8OLMpNtS8iVfsmwJawQHEkTDjL ms/i4C8I25cgsTZIIONNswmRN/0ZpOku6xc2S79oiQYKx3d5PFfiEMM2A9DN9gv4 PhVFLUCejZ/EWcHbw3gwIgYcEZISA4IbCup/CGPd/s2YalyL+dZA5euVr28p6m3i 6sPs5plY2ewcTg+Z/ApCJiOYfXIBTqthzE7gBsDUFjFoZ4VnqI2KgPX3gDYoenhP JCp9hjSVPrBwt7ItsqFdu3xmllWhEPJkIZrZw4p2BZs3JFko3A== -----END CERTIFICATE-----Generated at Tue May 12 23:31:01 2026 by rpki-client