$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft File: 39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json) Hash identifier: 3IMabjxeIa8t8qjZoD13dLjAlr6r/MA0RZ3k2DWzRyM= Subject key identifier: 29:8C:0B:15:E3:E2:0E:AE:05:DC:0E:3A:67:41:2E:63:64:41:62:FD Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Certificate serial: 36D9736D4DEFFE913A36EBFA95E016CEF28A23C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft Manifest number: 0840 Signing time: Sat 28 Jun 2025 12:44:55 +0000 Manifest this update: Sat 28 Jun 2025 12:39:55 +0000 Manifest next update: Sun 29 Jun 2025 16:25:55 +0000 Files and hashes: 1: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: jv1quXkP9qggRhmtw9WX20Qnli6GOncntx5bSvAxE38=) 2: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: RscqkfAqKol9Mb7kH1rk6TlCkY+RbxXqXidKOH9Y1CA=) 3: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: 1sSYbctZQTsAtFkf68We9NYRTjJ8HTc93JioA0AE/NM=) 4: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: jo9/TfqHe8coP6CLQoJAgiV9pkwdZ4Aen9L4GMibhSE=) 5: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: AuNHJ4Er5rWaDoF9/UJ9XblyUup1/1iXCBaRrrZlm1I=) 6: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: 1+9nFut/p6B8/nGfj65i9mWnPd801743S6CwoSwjM6U=) 7: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: Stu4rCpjsW++1o+hLBBUMrcI9XDVGgCDFxr3l7VjbgI=) 8: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: wyjofl+FoiWAK8U6GH50K1UqPviIS66WsfrE0TRAhuw=) 9: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: SZJLz0j/jbKX96lW4L7mkLyksXLsFVWjP8hE7OePkGw=) 10: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: 5ww1tmf1b8mW/owcEDef8iPMdMRHp6Y3gH2eIq4NXhc=) 11: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: Pb2F4w7HUlB+8KC1ApcS7XeGOzx10fAyifHBz2nieIA=) 12: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: SCq27MG9RGSIUs9pFwUD8DJ+z99XPXXyy+EOwWQmw8w=) 13: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=) 14: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: 2L3Jf/FOZ/w+JX84GSASdtqfWnviCCBALnTenYC8mME=) 15: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: 53m+ftbfDXSKBRFpCpSF+PApitRNJ4vzOZgjhmEiTrw=) 16: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: EG+gf6pxptR1s0mTsH21dZ3ZIG3E/FbLYwtMTLQTcLQ=) 17: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=) 18: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: SuOMHvUHLfGQ83E+Cf0aWiWT5I1L1Fv+EJ8iEtLqOiI=) 19: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: 4kDWkCWoD32Q8R+xSsLxKd6NdD93vjHkBzeM3Z2IWkk=) 20: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: +IbToSr8RSz9HQHVbkkQ9W8e0jSZnsHHcmWMXNsHJFw=) 21: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: qM2WSYB5Z4W9VWzQSVLga41k4eMCbUfZ3v+fWF84Ot4=) 22: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: UYVa8bgF6Yn2Az929trS6NtXdXvO1IAUooYwTkp4LjA=) 23: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: wk3fJQs2Y5gztGyN2bdXZAUOs6lIPomlEshkGoIEf0w=) 24: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: 3/AXr9Mh/1G2LT3F6HVetvIcUb6Y2xZfnTnWkXieDSE=) 25: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: 0N67suNkEg1cwJdciU0lkIVbrva+AsfHunxSej5ABWw=) 26: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=) 27: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: PXxIPbPYgYAkV8Fr04NodCt8BXsoPGpIleRa49s51NY=) 28: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: zDXoLHlJzrr6hgqj5P5M/kCRYrCGwzCMH11FUUWWDvU=) 29: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=) 30: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: 6cVhvSw9JMim43f5rKa5dY2+nNAMktQ2jilddGaGaBE=) Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 16:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d9:73:6d:4d:ef:fe:91:3a:36:eb:fa:95:e0:16:ce:f2:8a:23:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb Validity Not Before: Jun 28 12:39:55 2025 GMT Not After : Jun 29 16:25:55 2025 GMT Subject: CN=298C0B15E3E20EAE05DC0E3A67412E63644162FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:f5:c9:41:c1:f5:60:69:c1:f9:2d:00:7f: a7:e3:84:29:41:99:e0:48:1b:ca:c9:0c:a2:f5:72: 74:56:00:14:75:6f:35:d9:89:ec:4b:68:d2:96:4a: 87:ef:ec:27:be:9d:e2:00:00:09:40:ef:d6:0c:5d: d4:63:52:bd:92:e9:4a:0c:c4:b1:b6:d3:d0:07:3e: bb:d3:69:bc:f1:03:b1:21:13:4d:fa:6a:f4:f3:05: 38:f8:77:53:38:f3:2d:d4:18:56:14:18:c3:64:29: a8:5b:ce:1b:80:ba:08:bf:cb:89:2b:3d:c4:ba:47: f3:7a:9e:41:cd:52:35:2e:87:a3:c3:7d:eb:c9:3f: be:68:c3:79:16:58:c3:89:83:cb:ec:0b:1f:e0:99: da:c0:bf:8c:83:48:c9:d9:26:3f:cd:a6:73:d2:1c: 25:51:25:e3:d3:f7:ac:90:b2:92:7f:86:bc:da:cf: 13:23:e0:1b:0d:71:4c:dc:81:67:db:32:5d:fb:ca: 8e:ba:de:8e:e0:85:fb:2e:4e:90:f5:dd:00:be:d7: 2b:df:a1:0a:30:c5:0a:47:be:65:5e:41:b2:6c:93: bf:7f:cd:64:1b:fa:1e:aa:60:39:90:a9:93:41:ad: 6f:ac:2f:87:f5:1f:ef:69:22:68:64:5b:67:05:c7: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:0B:15:E3:E2:0E:AE:05:DC:0E:3A:67:41:2E:63:64:41:62:FD X509v3 Authority Key Identifier: keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:35:f7:4b:2a:07:7e:9e:b3:eb:24:b1:a0:2c:66:60:e6:45: fb:25:7f:5d:70:06:1f:d9:c6:1b:b5:ae:67:2e:5f:78:b6:a1: 29:6e:ac:22:1d:b3:cb:c9:13:82:30:9d:d4:c4:58:ee:99:ec: 53:c9:89:b7:de:8a:7c:ae:90:9e:eb:27:87:e0:3f:04:fc:f0: 44:34:14:80:29:e6:ec:19:27:33:43:98:24:f7:14:c0:ef:2b: 52:fe:75:7a:9a:d2:5a:53:3a:06:6f:d4:1c:4d:2c:5a:1f:96: f6:b9:be:84:9a:21:b9:94:0c:5b:b8:41:6d:73:3d:71:5e:42: 38:34:6c:0d:0a:c6:a0:bc:54:97:95:2a:16:31:e6:07:37:dc: e7:18:46:6f:a2:71:4a:a0:0c:d7:e4:dc:3e:26:ff:c0:49:6a: 4f:a3:5e:cf:02:4f:1b:a8:82:20:43:a7:e4:29:be:2e:23:c8: e7:42:fe:1b:be:1a:35:ed:10:6b:bf:4e:fb:2a:3e:1c:04:86: 3f:aa:47:fc:62:58:4b:88:1f:47:30:84:da:9b:49:cc:da:9e: ee:5d:dd:51:44:eb:1a:55:bf:d6:46:71:4b:0c:09:f1:53:b5: 09:11:f0:8c:73:d2:99:6b:ca:fb:d2:4e:cf:0d:43:15:4d:b4: e3:48:4e:1a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUNtlzbU3v/pE6Nuv6leAWzvKKI8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlmNjZmNDVhNTliODM3ZWQyNGQ2YjlmMjBjNjA3MDIx MTRiNzBiYjAeFw0yNTA2MjgxMjM5NTVaFw0yNTA2MjkxNjI1NTVaMDMxMTAvBgNV BAMTKDI5OEMwQjE1RTNFMjBFQUUwNURDMEUzQTY3NDEyRTYzNjQ0MTYyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTj/XJQcH1YGnB+S0Af6fjhClB meBIG8rJDKL1cnRWABR1bzXZiexLaNKWSofv7Ce+neIAAAlA79YMXdRjUr2S6UoM xLG209AHPrvTabzxA7EhE036avTzBTj4d1M48y3UGFYUGMNkKahbzhuAugi/y4kr PcS6R/N6nkHNUjUuh6PDfevJP75ow3kWWMOJg8vsCx/gmdrAv4yDSMnZJj/NpnPS HCVRJePT96yQspJ/hrzazxMj4BsNcUzcgWfbMl37yo663o7ghfsuTpD13QC+1yvf oQowxQpHvmVeQbJsk79/zWQb+h6qYDmQqZNBrW+sL4f1H+9pImhkW2cFxz/xAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUKYwLFePiDq4F3A46Z0EuY2RBYv0wHwYDVR0j BBgwFoAUOfZvRaWbg37STWufIMYHAhFLcLswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80MS8z OUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcwMjExNEI3MEJCLmNybDBkBggr BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y ZXBvc2l0b3J5L0RFRkFVTFQvT2ZadlJhV2JnMzdTVFd1ZklNWUhBaEZMY0xzLmNl cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu bmV0L3JyZHAveFRvbS80MS8zOUY2NkY0NUE1OUI4MzdFRDI0RDZCOUYyMEM2MDcw MjExNEI3MEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAsTX3SyoHfp6z6ySxoCxmYOZF+yV/XXAGH9nG G7WuZy5feLahKW6sIh2zy8kTgjCd1MRY7pnsU8mJt96KfK6Qnusnh+A/BPzwRDQU gCnm7BknM0OYJPcUwO8rUv51eprSWlM6Bm/UHE0sWh+W9rm+hJohuZQMW7hBbXM9 cV5CODRsDQrGoLxUl5UqFjHmBzfc5xhGb6JxSqAM1+TcPib/wElqT6NezwJPG6iC IEOn5Cm+LiPI50L+G74aNe0Qa79O+yo+HASGP6pH/GJYS4gfRzCE2ptJzNqe7l3d UUTrGlW/1kZxSwwJ8VO1CRHwjHPSmWvK+9JOzw1DFU2040hOGg== -----END CERTIFICATE-----Generated at Sun Jun 29 08:07:34 2025 by rpki-client