$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 8W1fljtWPh2U3D979+w2gnMI9CVWtSvaqu+HRXqA0BA= Subject key identifier: 67:72:C3:4C:68:73:75:A0:98:27:E4:DD:82:80:3A:66:F9:FE:30:41 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F7EC1CC4C303187A1051898F21D414080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1422 Signing time: Mon 20 Jul 2026 09:00:57 +0000 Manifest this update: Mon 20 Jul 2026 09:00:57 +0000 Manifest next update: Tue 21 Jul 2026 09:00:57 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: OTYwqoebUpx7iCsbsHcD+9A5ZtEBJx5Y2tUAFBCi5Ag=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:7e:c1:cc:4c:30:31:87:a1:05:18:98:f2:1d:41:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 20 09:00:57 2026 GMT Not After : Jul 21 09:00:57 2026 GMT Subject: CN=6772c34c687375a09827e4dd82803a66f9fe3041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:f5:69:bb:7b:59:43:ed:40:4e:7d:d2:c7: 40:ea:56:97:ac:1c:3b:dd:d1:50:ea:3d:fe:91:4c: 4e:f3:5f:1b:fc:3a:23:51:76:1b:47:81:0f:5f:04: 43:69:4c:58:22:3b:06:81:30:fa:0c:09:1e:d0:af: 85:b8:3e:39:cf:aa:48:68:0b:ad:70:7d:6c:b6:a7: 4d:4b:73:ae:18:b8:c2:0d:ae:0e:ff:70:3b:9c:77: b1:10:15:4c:22:61:c0:eb:50:64:e6:4a:82:05:3e: 4a:48:09:da:64:f0:b8:6f:f2:f0:80:d7:cb:84:fd: 3d:9d:eb:54:81:f2:28:5b:2a:90:01:c6:b0:7e:45: a5:52:f0:d6:99:7b:4a:b5:06:ce:09:49:41:23:31: 58:13:f5:ed:da:c6:47:e9:82:9f:fd:ad:81:a8:f1: 88:f7:25:82:bc:46:b7:f6:78:84:3f:de:92:f9:6f: 1b:da:e7:5a:55:01:d7:8f:13:30:4f:83:b1:7c:67: f9:62:b7:18:e3:b0:c7:af:88:bc:cf:77:fa:d4:bb: 84:08:86:43:1e:a9:ed:0a:2e:13:bd:05:0b:06:b1: 4f:d4:d3:c7:88:13:84:c2:1b:44:ba:37:36:55:e3: 89:d5:a5:c3:1e:f8:f6:5a:c4:be:1f:83:c7:fe:89: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:C3:4C:68:73:75:A0:98:27:E4:DD:82:80:3A:66:F9:FE:30:41 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2c:99:b5:4b:01:0e:47:4b:c5:ea:b5:df:6c:6f:53:64:fb: 57:e4:5c:de:12:2c:21:d8:6f:fd:27:c2:2c:51:e3:78:35:71: 81:ff:59:9e:30:be:26:8d:9d:a9:5d:0f:92:ef:d9:a3:88:96: 16:27:fc:b7:5b:3b:c4:4f:e4:56:13:82:77:e4:0c:d6:a1:54: 9f:b6:52:1c:10:04:28:77:e3:52:2b:d4:67:cc:80:de:51:55: 95:96:d1:9a:17:90:b1:1e:4e:e9:f8:6c:ef:cf:94:6e:54:9c: 01:8a:b2:e1:28:b6:fc:44:d9:01:f3:95:e7:df:21:79:71:73: 63:6e:f5:d7:2e:31:9f:61:a7:c6:09:e3:38:82:4c:3a:14:95: 2a:fd:f1:eb:1b:c2:36:4a:57:6e:1f:47:66:48:61:1a:e7:02: 41:09:7c:36:75:81:46:6b:58:7d:3f:14:27:0d:8c:f2:66:4e: df:1b:69:39:a6:3a:f2:3b:c7:a0:29:ff:d0:2d:1a:f0:04:83: f3:80:51:51:65:1c:c2:f8:d2:b9:1f:1e:43:24:ff:f1:0c:a7: 5b:51:d6:f3:af:81:96:18:23:d1:f2:ac:39:29:6e:25:e6:e9: ed:af:75:ac:e2:92:ab:bf:1e:4a:bf:f3:2b:4b:c3:68:94:ac: 05:e3:b3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9+wcxMMDGHoQUYmPIdQUCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzIwMDkwMDU3WhcNMjYwNzIxMDkwMDU3WjAzMTEwLwYDVQQD Eyg2NzcyYzM0YzY4NzM3NWEwOTgyN2U0ZGQ4MjgwM2E2NmY5ZmUzMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe31abt7WUPtQE590sdA6laXrBw7 3dFQ6j3+kUxO818b/DojUXYbR4EPXwRDaUxYIjsGgTD6DAke0K+FuD45z6pIaAut cH1stqdNS3OuGLjCDa4O/3A7nHexEBVMImHA61Bk5kqCBT5KSAnaZPC4b/LwgNfL hP09netUgfIoWyqQAcawfkWlUvDWmXtKtQbOCUlBIzFYE/Xt2sZH6YKf/a2BqPGI 9yWCvEa39niEP96S+W8b2udaVQHXjxMwT4OxfGf5YrcY47DHr4i8z3f61LuECIZD HqntCi4TvQULBrFP1NPHiBOEwhtEujc2VeOJ1aXDHvj2WsS+H4PH/onLfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdyw0xoc3WgmCfk3YKAOmb5/jBBMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSyZtUsB DkdLxeq132xvU2T7V+Rc3hIsIdhv/SfCLFHjeDVxgf9ZnjC+Jo2dqV0Pku/Zo4iW Fif8t1s7xE/kVhOCd+QM1qFUn7ZSHBAEKHfjUivUZ8yA3lFVlZbRmheQsR5O6fhs 78+UblScAYqy4Si2/ETZAfOV598heXFzY2711y4xn2GnxgnjOIJMOhSVKv3x6xvC NkpXbh9HZkhhGucCQQl8NnWBRmtYfT8UJw2M8mZO3xtpOaY68jvHoCn/0C0a8ASD 84BRUWUcwvjSuR8eQyT/8QynW1HW86+Blhgj0fKsOSluJebp7a91rOKSq78eSr/z K0vDaJSsBeOzGw== -----END CERTIFICATE-----Generated at Mon Jul 20 14:30:37 2026 by rpki-client