$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: KqNk3ziD7tQU1Q+Ok9lU3PbPsztrfiamnuQj0D+XWmY= Subject key identifier: 47:15:7A:02:77:84:AE:54:54:F2:08:B5:2B:36:13:BD:83:47:EC:9B Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 2DFD79146638F247EE9D4E3CD4CDD5F7D9C00D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 08DD Signing time: Sun 19 Oct 2025 10:13:56 +0000 Manifest this update: Sun 19 Oct 2025 10:08:56 +0000 Manifest next update: Mon 20 Oct 2025 13:14:56 +0000 Files and hashes: 1: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 2: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 3: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 4: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 5: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 6: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 7: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) 8: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 9: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 10: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 11: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 12: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 13: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 14: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 15: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 16: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: nSJ95D86+lxN7wvGhK4FEEY6mwEK912xq8lMW3ohKOc=) 17: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 18: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 19: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 20: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 21: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 22: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 23: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 24: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 25: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 26: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 27: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 28: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 29: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 30: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fd:79:14:66:38:f2:47:ee:9d:4e:3c:d4:cd:d5:f7:d9:c0:0d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Oct 19 10:08:56 2025 GMT Not After : Oct 20 13:14:56 2025 GMT Subject: CN=47157A027784AE5454F208B52B3613BD8347EC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:52:53:0a:d4:2f:c7:50:5a:3b:9f:0f:8a: 56:5d:a6:3b:e5:9a:9e:07:fc:05:ac:ec:b6:aa:7f: 8a:a3:d8:c8:2c:4a:c2:05:74:a5:fa:3b:43:5d:c7: dc:d0:0c:87:45:3e:26:c9:98:16:ca:f7:10:91:ac: 2c:3f:fd:d9:db:21:e8:26:d8:80:75:a2:06:0d:49: 70:b0:ae:fb:77:78:51:79:e1:ac:60:bc:90:fe:71: 93:a4:0c:b7:87:e3:0d:79:45:52:ef:99:77:0a:fa: 93:74:68:a3:a3:7c:10:ff:c9:38:4f:aa:bd:9c:ac: 00:68:0d:df:79:92:b1:90:b8:5f:63:cb:f0:de:42: 18:69:55:33:e3:fa:1b:ad:ca:c5:0c:a9:9b:a3:5a: 72:4a:f7:cf:37:0c:62:fa:8c:27:ac:1e:1f:08:45: e1:f7:8c:49:ea:73:a0:93:61:92:3e:f5:3a:54:8d: 61:e3:32:26:d4:25:72:a5:10:02:de:21:95:4d:3d: 69:49:45:1e:94:d5:63:88:fb:ff:89:27:de:eb:2a: 92:cd:a4:14:76:3e:1c:e8:a7:f9:d6:31:0a:06:46: e0:74:2a:fe:bc:3d:20:c3:59:ac:fc:1c:fc:d4:59: 07:82:f8:98:64:aa:a1:77:80:97:5e:29:a1:de:0c: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:7A:02:77:84:AE:54:54:F2:08:B5:2B:36:13:BD:83:47:EC:9B X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ac:3d:97:bc:a5:48:1f:05:68:e2:d5:45:1d:8e:53:9b:ba: 8f:d5:a5:ff:e3:d3:6b:5f:d4:3a:0e:6f:ed:51:a0:52:44:04: f8:05:01:82:88:81:3a:3d:36:2c:aa:3d:ff:aa:cf:67:15:57: 2b:37:84:1b:8d:1f:06:4d:8d:6e:1a:5d:e4:b4:f3:4d:3e:a9: db:80:6b:b9:05:23:21:93:e2:6a:7d:e3:7e:0d:e4:0f:d6:6d: 4c:b4:1c:05:5c:02:ec:84:57:a0:68:52:0d:05:cf:d9:58:ef: c0:fa:b4:84:a8:a3:a0:49:e0:3d:9d:ba:c1:e1:97:17:5c:3b: d1:33:4e:bb:cf:f5:31:2a:6b:d5:e3:0b:49:6e:a9:26:81:3e: 91:c8:0f:7b:6f:0a:35:7b:c9:b6:06:7a:aa:7c:fe:c0:e6:1b: 74:05:8f:99:db:9c:3d:6a:b6:34:8c:a9:a6:19:11:25:d0:11: 8a:f9:05:79:da:ff:b1:8f:fe:22:1d:50:d5:0c:12:e1:eb:a9: 6b:e8:9c:34:96:43:4e:65:89:f8:0b:8d:3b:4d:84:e3:79:ae: f5:8e:ef:6c:0e:1e:a3:dc:80:58:a9:1a:e2:e3:e4:b9:dc:50: b0:c1:7b:19:80:ed:08:7f:7f:89:26:e4:30:f6:11:f0:c9:9c: f1:bf:5e:80 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIULf15FGY48kfunU481M3V99nADWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTEwMTkxMDA4NTZaFw0yNTEwMjAxMzE0NTZaMDMxMTAvBgNV BAMTKDQ3MTU3QTAyNzc4NEFFNTQ1NEYyMDhCNTJCMzYxM0JEODM0N0VDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHFJTCtQvx1BaO58PilZdpjvl mp4H/AWs7Laqf4qj2MgsSsIFdKX6O0Ndx9zQDIdFPibJmBbK9xCRrCw//dnbIegm 2IB1ogYNSXCwrvt3eFF54axgvJD+cZOkDLeH4w15RVLvmXcK+pN0aKOjfBD/yThP qr2crABoDd95krGQuF9jy/DeQhhpVTPj+hutysUMqZujWnJK9883DGL6jCesHh8I ReH3jEnqc6CTYZI+9TpUjWHjMibUJXKlEALeIZVNPWlJRR6U1WOI+/+JJ97rKpLN pBR2Phzop/nWMQoGRuB0Kv68PSDDWaz8HPzUWQeC+JhkqqF3gJdeKaHeDMmbAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQURxV6AneErlRU8gi1KzYTvYNH7JswHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEApaw9l7ylSB8FaOLVRR2OU5u6j9Wl/+PTa1/U Og5v7VGgUkQE+AUBgoiBOj02LKo9/6rPZxVXKzeEG40fBk2Nbhpd5LTzTT6p24Br uQUjIZPian3jfg3kD9ZtTLQcBVwC7IRXoGhSDQXP2VjvwPq0hKijoEngPZ26weGX F1w70TNOu8/1MSpr1eMLSW6pJoE+kcgPe28KNXvJtgZ6qnz+wOYbdAWPmducPWq2 NIypphkRJdARivkFedr/sY/+Ih1Q1QwS4eupa+icNJZDTmWJ+AuNO02E43mu9Y7v bA4eo9yAWKka4uPkudxQsMF7GYDtCH9/iSbkMPYR8Mmc8b9egA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:05:55 2025 by rpki-client