$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: 4QlKH4UxXQLb54N5OK6GKUpkw7zJpgyY5Z8JHtn71FI= Subject key identifier: 9E:9E:71:1A:BF:73:44:5F:B1:F7:C0:1C:C9:6E:69:E2:F3:C3:45:E1 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 58FA4AEE2256BAE50ECE8E91A8589EA22697495A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 09BD Signing time: Wed 25 Mar 2026 12:56:13 +0000 Manifest this update: Wed 25 Mar 2026 12:51:13 +0000 Manifest next update: Thu 26 Mar 2026 13:59:13 +0000 Files and hashes: 1: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 2: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 3: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 4: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 5: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: tCnnYhibxHrcKW2pre5J5GVKCmrHV9skM/bgABNhTlU=) 6: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 7: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=) 8: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 9: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 10: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 11: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 12: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 13: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 14: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 15: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 16: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 17: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 18: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 19: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 20: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=) 21: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 22: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 23: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 24: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 25: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=) 26: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 27: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 28: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 29: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 30: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 13:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fa:4a:ee:22:56:ba:e5:0e:ce:8e:91:a8:58:9e:a2:26:97:49:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Mar 25 12:51:13 2026 GMT Not After : Mar 26 13:59:13 2026 GMT Subject: CN=9E9E711ABF73445FB1F7C01CC96E69E2F3C345E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:88:90:db:3a:1d:8d:97:c0:fc:b1:62:51: 69:aa:a0:69:b6:09:d4:4d:a6:47:ec:d3:33:fb:ed: 48:16:f4:ef:07:72:b2:de:ad:33:8f:40:e9:90:8a: c0:26:3a:5c:a1:ec:bd:2b:09:27:de:85:b7:80:d9: 0c:00:9d:62:5d:f1:2b:1f:d6:3c:46:cb:1f:83:b8: 16:45:65:f9:8d:c2:ed:ed:b1:99:c2:74:59:dd:6b: bd:1d:8b:e7:a7:78:e7:08:84:98:b9:2a:2f:c0:a1: 1c:f4:e6:54:9a:ef:96:e7:c9:ea:b8:50:3e:43:bd: bc:68:81:08:3c:ae:02:1b:1c:8e:68:87:08:8e:d8: 49:2d:b3:eb:ad:35:55:92:0f:27:10:5f:44:fb:8b: f7:43:86:66:08:4a:c3:a4:ff:8a:f2:52:66:9d:45: 90:99:a3:e0:6d:df:85:87:ab:fe:d2:3c:d6:ce:cd: 15:72:83:ae:ec:15:8f:24:33:de:db:01:c9:08:4d: c6:73:16:20:72:7a:94:3f:2e:19:fc:a8:11:d4:74: e7:58:1d:b8:3f:a0:a6:77:ab:c0:18:86:15:2e:67: c4:5d:e4:ae:3e:51:28:66:fe:7e:85:46:9c:56:a6: bf:61:c0:05:ee:ec:b8:0b:87:4c:a8:e6:8a:f6:bf: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9E:71:1A:BF:73:44:5F:B1:F7:C0:1C:C9:6E:69:E2:F3:C3:45:E1 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ef:a0:f0:ef:fc:89:e7:9a:ea:ca:f4:8d:21:b1:68:eb:01: b1:9d:7d:a7:7e:69:dc:b0:20:9c:70:35:b7:5f:c2:65:49:db: 38:e1:f4:72:69:c9:62:30:19:8d:69:a6:45:5a:7d:c9:eb:40: a5:d1:ad:eb:8d:85:77:83:0c:7f:37:ad:7b:f2:b7:d6:79:e0: 63:52:b7:83:6c:ae:3e:fd:2f:81:31:c8:4f:59:43:d4:8d:63: 28:a7:52:1c:83:12:c9:d0:c1:ee:7b:78:1d:2d:36:c6:a3:71: 68:37:01:ee:12:18:46:4c:27:7e:fe:34:6c:14:43:91:a1:bd: 1a:be:64:85:05:1d:ed:1a:a5:de:61:8b:4f:89:df:3d:fe:7d: 1a:c2:80:37:82:75:1a:83:2c:1e:bf:65:ad:9f:34:2e:65:b5: e7:0a:c8:36:8b:e9:52:8e:c6:75:13:28:46:1a:97:1a:bf:88: 16:01:01:78:50:f2:c8:28:4a:2a:b9:48:4b:67:96:25:4a:b3: d8:b0:7b:11:9f:84:75:62:17:12:e6:1f:64:53:d5:81:ef:41: da:28:0b:74:cc:f0:7e:cd:5b:9a:ae:39:0b:c9:3c:3d:ec:b0: d7:b9:52:ce:cb:31:90:1a:35:56:ab:d9:09:d1:89:77:b9:df: db:21:31:76 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUWPpK7iJWuuUOzo6RqFieoiaXSVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNjAzMjUxMjUxMTNaFw0yNjAzMjYxMzU5MTNaMDMxMTAvBgNV BAMTKDlFOUU3MTFBQkY3MzQ0NUZCMUY3QzAxQ0M5NkU2OUUyRjNDMzQ1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSoiQ2zodjZfA/LFiUWmqoGm2 CdRNpkfs0zP77UgW9O8HcrLerTOPQOmQisAmOlyh7L0rCSfehbeA2QwAnWJd8Ssf 1jxGyx+DuBZFZfmNwu3tsZnCdFnda70di+eneOcIhJi5Ki/AoRz05lSa75bnyeq4 UD5DvbxogQg8rgIbHI5ohwiO2Ekts+utNVWSDycQX0T7i/dDhmYISsOk/4ryUmad RZCZo+Bt34WHq/7SPNbOzRVyg67sFY8kM97bAckITcZzFiByepQ/Lhn8qBHUdOdY Hbg/oKZ3q8AYhhUuZ8Rd5K4+UShm/n6FRpxWpr9hwAXu7LgLh0yo5or2v7WLAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUnp5xGr9zRF+x98AcyW5p4vPDReEwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAve+g8O/8ieea6sr0jSGxaOsBsZ19p35p3LAg nHA1t1/CZUnbOOH0cmnJYjAZjWmmRVp9yetApdGt642Fd4MMfzete/K31nngY1K3 g2yuPv0vgTHIT1lD1I1jKKdSHIMSydDB7nt4HS02xqNxaDcB7hIYRkwnfv40bBRD kaG9Gr5khQUd7Rql3mGLT4nfPf59GsKAN4J1GoMsHr9lrZ80LmW15wrINovpUo7G dRMoRhqXGr+IFgEBeFDyyChKKrlIS2eWJUqz2LB7EZ+EdWIXEuYfZFPVge9B2igL dMzwfs1bmq45C8k8Peyw17lSzssxkBo1VqvZCdGJd7nf2yExdg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:12 2026 by rpki-client