Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          2FJ5nTAu7eEHzN1JEcSilEUuOMMuWnkb2QowPTuquYs=
Subject key identifier:   33:C0:BB:28:91:04:5B:2B:2A:45:C6:92:E2:AA:50:8C:8B:6E:D1:08
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       5F1D7F94F51F843E31E11B26265143CB4F2835DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          088F
Signing time:             Sat 23 Aug 2025 01:48:31 +0000
Manifest this update:     Sat 23 Aug 2025 01:43:31 +0000
Manifest next update:     Sun 24 Aug 2025 03:46:31 +0000
Files and hashes:         1: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
                          2: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
                          3: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
                          4: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
                          5: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
                          6: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
                          7: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
                          8: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=)
                          9: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
                          10: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
                          11: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
                          12: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          13: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
                          14: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
                          15: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=)
                          16: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
                          17: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
                          18: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: NpX0KA9IXqQe8cXPgOhGz/DCsiougzgVouYFdRHVI3g=)
                          19: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
                          20: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=)
                          21: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
                          22: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
                          23: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=)
                          24: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
                          25: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
                          26: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
                          27: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
                          28: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
                          29: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          30: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1d:7f:94:f5:1f:84:3e:31:e1:1b:26:26:51:43:cb:4f:28:35:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Aug 23 01:43:31 2025 GMT
            Not After : Aug 24 03:46:31 2025 GMT
        Subject: CN=33C0BB2891045B2B2A45C692E2AA508C8B6ED108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fc:8e:68:34:b6:87:33:77:04:3c:8b:a6:87:
                    c1:76:cb:a0:47:43:c0:05:34:d9:0d:5f:7f:a9:45:
                    bc:3c:ad:07:86:a2:ea:45:ab:f8:af:fe:ff:4c:48:
                    a6:27:52:bc:8a:ab:c6:82:3e:cc:12:28:45:1d:8c:
                    e9:50:16:25:95:27:e3:6b:26:1c:76:c8:a7:6c:46:
                    04:be:2c:9a:73:85:08:22:4a:46:3b:b8:70:e3:76:
                    05:33:9f:06:04:3a:40:28:f8:05:7a:91:f7:2f:e4:
                    b4:28:28:0b:7d:df:40:5e:39:d3:b0:aa:b1:fd:4b:
                    0d:2a:ac:96:5b:f8:e8:ca:cd:24:cc:e6:3e:de:97:
                    a7:2c:31:19:2a:ba:e3:9b:1f:c0:17:d4:47:c3:14:
                    44:de:26:77:c6:32:35:8c:b0:b5:2b:88:bf:fb:7b:
                    c2:49:c6:50:f5:4b:ce:d1:ce:c9:b6:72:2b:8c:ff:
                    b5:64:59:d2:e1:1e:82:e4:76:c2:a7:c9:cb:5c:a0:
                    bd:5c:63:bd:22:25:f5:1d:62:fb:ea:13:e1:bf:25:
                    aa:03:06:68:44:fe:a2:f5:d4:d8:84:bd:30:8e:01:
                    ee:1a:d5:8a:b2:20:0a:7c:9c:06:4d:0d:c9:2c:6a:
                    77:19:fb:34:d0:87:43:ba:3d:90:c3:6d:8b:6c:3a:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:BB:28:91:04:5B:2B:2A:45:C6:92:E2:AA:50:8C:8B:6E:D1:08
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:1d:99:78:dd:68:9f:56:df:f6:cb:65:f0:34:db:17:54:
         b3:d2:15:9f:0e:2e:15:33:53:0b:e9:df:b0:d4:48:7b:46:a7:
         ec:91:ef:4c:f1:6f:b6:d4:3e:b4:58:30:99:c4:ac:18:45:dc:
         56:2b:70:5c:61:24:4f:78:7d:e1:5a:de:d4:12:9f:a9:4e:b2:
         5b:8c:bf:fd:bd:ce:d1:7b:5f:a6:49:b4:9c:0d:3e:5c:13:f6:
         7e:aa:40:dc:4c:75:ec:52:d5:20:a8:22:fc:09:fd:29:f1:a8:
         f2:cc:fe:19:5b:00:d8:40:53:08:3b:d4:d8:bd:40:40:db:60:
         aa:72:2e:03:12:a7:e5:38:a5:ca:91:16:5b:1e:db:63:5f:bb:
         dc:c1:fd:0f:be:83:25:be:3b:26:53:70:15:ee:49:15:98:2b:
         bd:5f:6e:61:01:4a:f9:0a:bb:db:8c:4c:62:94:49:2e:87:da:
         11:46:81:2f:36:95:29:a7:2a:e9:de:53:12:76:83:34:a0:9f:
         01:eb:6e:0b:94:ec:61:15:f8:33:c9:57:55:ba:d4:e3:53:64:
         a5:1d:9d:0a:21:a5:b1:84:46:38:a9:4d:64:42:32:99:eb:5e:
         4f:a0:e0:9e:bf:15:96:0e:f7:9d:91:9d:ed:32:90:59:44:46:
         f6:12:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:35 2025 by rpki-client