$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: HkqkF1zO7wtqQcrgl1nXnIfYNLolJR2HWEqMf7OPrrQ= Subject key identifier: A2:4E:1D:CF:FF:7D:63:AA:5D:6A:5D:8D:5C:90:64:E6:C3:96:64:A4 Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 507820009584E7EA39EB4846E95728EABD3485F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 09BE Signing time: Thu 26 Mar 2026 05:59:42 +0000 Manifest this update: Thu 26 Mar 2026 05:54:42 +0000 Manifest next update: Fri 27 Mar 2026 07:49:42 +0000 Files and hashes: 1: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=) 2: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=) 3: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=) 4: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=) 5: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=) 6: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=) 7: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=) 8: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=) 9: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=) 10: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=) 11: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=) 12: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=) 13: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=) 14: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=) 15: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 16: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=) 17: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=) 18: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=) 19: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=) 20: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=) 21: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=) 22: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: 1aM68lBKdfcxiZX1TAmVthFM1qZ2aQlAn3tGi+wVp/A=) 23: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=) 24: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=) 25: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=) 26: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: 3RR/tChAl9rQ65lZoN0xuG5Qnqe19yLrwMMMNK0VPrQ=) 27: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=) 28: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=) 29: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=) 30: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:78:20:00:95:84:e7:ea:39:eb:48:46:e9:57:28:ea:bd:34:85:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Mar 26 05:54:42 2026 GMT Not After : Mar 27 07:49:42 2026 GMT Subject: CN=A24E1DCFFF7D63AA5D6A5D8D5C9064E6C39664A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:e0:28:4f:54:c3:1a:a7:6e:3a:89:17:6b: 63:24:2d:2e:23:14:4a:a3:fe:1e:bc:97:72:4f:ef: dc:c9:3c:7d:ba:62:8d:28:e4:5a:1c:a5:3b:73:62: f2:1d:fa:b0:55:82:e9:05:4f:c2:92:13:40:8c:f8: 12:f1:a0:48:14:d9:62:6f:91:ea:f7:1b:b0:99:5c: 68:19:57:e2:4f:55:56:91:2e:f5:65:b7:63:26:47: 0a:2a:df:49:bd:3b:79:80:27:a0:41:64:bf:e3:2a: 43:2d:b8:3c:7d:cd:f0:4f:64:f5:be:0a:8b:d6:3e: 69:c0:fe:df:6b:ca:7a:a7:91:13:1f:d5:47:7e:fd: d4:6f:2e:4a:fa:2a:cf:df:34:3a:d8:e4:6a:a5:5e: d1:b7:de:b7:f2:3a:9a:d6:90:0a:59:ae:a2:d1:b9: 02:c6:14:53:ee:b6:8d:01:bf:a4:25:4c:1c:35:41: c7:ed:82:37:a4:8b:ba:cc:9c:ad:2c:16:c7:6e:0f: fc:7f:31:dc:c3:46:c4:cf:0c:bf:a5:aa:06:ed:e9: 80:9f:7f:26:ac:41:e1:f8:fe:98:bf:38:9d:d7:5e: 27:f2:55:90:9d:aa:df:b5:02:6e:6a:39:60:73:f5: 9d:ea:5d:90:2c:22:07:c4:63:43:b0:86:fa:d2:1a: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4E:1D:CF:FF:7D:63:AA:5D:6A:5D:8D:5C:90:64:E6:C3:96:64:A4 X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c0:cd:c1:a5:f8:9e:1c:53:71:11:7d:9e:3a:a0:a1:3d:b8: 54:25:a2:40:ce:7f:39:26:e3:38:98:b9:c8:97:44:9a:6a:dc: 28:13:fc:50:cc:21:5d:66:31:d7:84:a1:d0:f3:6b:22:ce:3a: c9:21:fb:0a:0d:5f:d8:da:71:52:4b:f7:26:ef:aa:35:2a:5c: a4:00:38:d4:33:9f:16:f9:e5:ea:8f:c9:84:ae:08:f4:44:6b: 1c:72:cb:0c:56:29:1a:84:03:01:ea:58:83:fe:a0:f8:a5:fa: b0:df:cb:07:15:d5:17:28:17:6d:07:a6:48:f0:7e:44:92:74: a8:78:2b:34:71:f0:e9:d6:bc:61:b9:a4:56:c7:f6:71:c3:8c: 69:0f:0a:68:b3:33:04:36:04:5e:8d:c5:a8:8f:c5:a8:fa:31: f3:10:33:70:db:d3:71:3d:bd:31:38:73:4a:43:c7:6e:78:95: fd:4f:5e:79:0d:11:6c:df:61:9b:ca:21:db:66:59:48:20:f5: fb:5f:95:87:cd:ca:a8:58:c5:63:76:3f:c1:25:1b:1f:87:36: b8:8a:ff:27:16:3e:77:fc:ff:a3:b6:e6:ec:fa:e1:f4:a1:a4: b6:8c:1b:d2:99:96:dc:a8:50:60:4a:bc:b1:64:84:ef:c0:5f: d8:45:da:59 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUUHggAJWE5+o560hG6Vco6r00hfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNjAzMjYwNTU0NDJaFw0yNjAzMjcwNzQ5NDJaMDMxMTAvBgNV BAMTKEEyNEUxRENGRkY3RDYzQUE1RDZBNUQ4RDVDOTA2NEU2QzM5NjY0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjuAoT1TDGqduOokXa2MkLS4j FEqj/h68l3JP79zJPH26Yo0o5FocpTtzYvId+rBVgukFT8KSE0CM+BLxoEgU2WJv ker3G7CZXGgZV+JPVVaRLvVlt2MmRwoq30m9O3mAJ6BBZL/jKkMtuDx9zfBPZPW+ CovWPmnA/t9rynqnkRMf1Ud+/dRvLkr6Ks/fNDrY5GqlXtG33rfyOprWkApZrqLR uQLGFFPuto0Bv6QlTBw1Qcftgjeki7rMnK0sFsduD/x/MdzDRsTPDL+lqgbt6YCf fyasQeH4/pi/OJ3XXifyVZCdqt+1Am5qOWBz9Z3qXZAsIgfEY0OwhvrSGtltAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUok4dz/99Y6pdal2NXJBk5sOWZKQwHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAO8DNwaX4nhxTcRF9njqgoT24VCWiQM5/OSbj OJi5yJdEmmrcKBP8UMwhXWYx14Sh0PNrIs46ySH7Cg1f2NpxUkv3Ju+qNSpcpAA4 1DOfFvnl6o/JhK4I9ERrHHLLDFYpGoQDAepYg/6g+KX6sN/LBxXVFygXbQemSPB+ RJJ0qHgrNHHw6da8YbmkVsf2ccOMaQ8KaLMzBDYEXo3FqI/FqPox8xAzcNvTcT29 MThzSkPHbniV/U9eeQ0RbN9hm8oh22ZZSCD1+1+Vh83KqFjFY3Y/wSUbH4c2uIr/ JxY+d/z/o7bm7Prh9KGktowb0pmW3KhQYEq8sWSE78Bf2EXaWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:58 2026 by rpki-client