$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: em4kyT4ZWX20EVE0NjDkNxd+fMbQ/d5GwrrMu3YN2HI= Subject key identifier: 9C:E7:44:9F:82:9A:13:60:42:58:1D:8A:2F:1E:F1:7F:66:FD:B6:01 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FBE7D1C2624361998A8953EA44F50ECF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1443 Signing time: Sat 01 Aug 2026 18:01:37 +0000 Manifest this update: Sat 01 Aug 2026 18:01:37 +0000 Manifest next update: Sun 02 Aug 2026 18:01:37 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: QBQfZTWx9ah8P/4SaYZLKU6FvV59IJ424nDqRYxPQ+E=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Aug 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:be:7d:1c:26:24:36:19:98:a8:95:3e:a4:4f:50:ec:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 1 18:01:37 2026 GMT Not After : Aug 2 18:01:37 2026 GMT Subject: CN=9ce7449f829a136042581d8a2f1ef17f66fdb601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:90:4d:e9:0a:e0:13:36:17:29:fb:30:70: 67:8c:72:e6:4d:dd:77:3a:97:02:da:0b:03:9c:64: 7d:6d:dc:dd:de:f5:b9:bc:14:35:ec:f2:7c:ef:ab: 99:e9:3f:f9:ff:d5:ad:98:6c:62:80:f6:05:06:0c: 87:b3:8c:b0:1f:d9:2c:c7:ef:7d:6f:99:f3:8e:f8: fc:5a:0a:c1:1d:3f:6e:be:f9:08:b0:f6:df:f4:f9: 8e:56:11:fd:22:19:e8:00:1c:e9:cd:4f:9e:32:18: 3b:2b:18:1f:7a:06:e6:66:c3:e9:6a:5f:97:cb:c4: 62:5b:b0:76:7d:b2:87:63:e0:e6:e3:8f:69:23:46: dd:f2:4b:b4:f2:a3:0f:d8:ac:c3:e7:1b:21:f7:36: 7d:d1:5b:8c:99:29:33:78:e9:0e:42:1b:99:27:f2: 96:95:b6:ac:83:58:68:7c:13:41:e3:a0:ac:c0:78: a8:2b:1c:68:10:44:cb:90:f2:80:ea:e5:55:32:95: a7:69:cd:47:73:39:46:db:b7:f0:8d:6a:55:0e:ba: b2:41:b0:55:2b:bc:46:62:45:17:78:db:42:a4:50: 33:75:d3:7e:77:f2:52:19:b5:9c:6c:42:ad:cb:31: fc:0c:11:44:70:fe:28:92:ef:0e:1f:67:0b:5e:0e: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:44:9F:82:9A:13:60:42:58:1D:8A:2F:1E:F1:7F:66:FD:B6:01 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fa:78:80:b9:29:0f:db:47:af:2c:f7:d3:07:a2:16:36:77: dc:65:86:3c:93:3b:60:48:74:88:d7:16:d3:c5:18:dc:02:3b: a2:3a:94:35:0c:bd:07:a6:01:70:e9:2b:7f:a7:fb:b3:37:8f: d2:38:29:ed:90:ae:e2:13:20:a5:61:2b:0f:d4:19:87:d8:82: 7a:e7:31:c4:b3:7e:58:9e:92:b5:6c:b1:c0:e7:85:ea:58:78: 2d:8b:2c:e7:50:3f:c4:cd:0c:a7:b1:2b:e8:b5:f9:58:6b:4d: ea:43:d2:a2:08:ce:1c:44:08:92:aa:2e:09:a2:f0:4e:76:22: 3b:58:f5:77:76:aa:51:42:0c:7c:9a:70:a1:96:d6:7e:d7:60: 7a:e4:96:31:f5:61:d5:6a:57:c4:f6:bf:87:98:76:5e:c5:0d: 7c:ad:7b:45:07:5a:bb:21:73:08:21:dc:6c:d7:ba:43:b4:f0: 2f:2a:08:1f:93:cb:41:59:dc:89:63:94:5f:2e:ff:cf:db:d3: 56:40:02:c3:eb:e8:d0:d6:71:db:d8:42:52:7d:66:56:53:8f: 50:df:12:39:ac:34:12:0b:0a:1d:dc:9d:bb:32:e0:1b:b5:bf: fb:2f:01:d4:e7:87:51:b0:84:1b:58:5a:25:91:61:f2:f1:c8: d5:7f:09:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ++fRwmJDYZmKiVPqRPUOz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODAxMTgwMTM3WhcNMjYwODAyMTgwMTM3WjAzMTEwLwYDVQQD Eyg5Y2U3NDQ5ZjgyOWExMzYwNDI1ODFkOGEyZjFlZjE3ZjY2ZmRiNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71CQTekK4BM2Fyn7MHBnjHLmTd13 OpcC2gsDnGR9bdzd3vW5vBQ17PJ876uZ6T/5/9WtmGxigPYFBgyHs4ywH9ksx+99 b5nzjvj8WgrBHT9uvvkIsPbf9PmOVhH9IhnoABzpzU+eMhg7KxgfegbmZsPpal+X y8RiW7B2fbKHY+Dm449pI0bd8ku08qMP2KzD5xsh9zZ90VuMmSkzeOkOQhuZJ/KW lbasg1hofBNB46CswHioKxxoEETLkPKA6uVVMpWnac1HczlG27fwjWpVDrqyQbBV K7xGYkUXeNtCpFAzddN+d/JSGbWcbEKtyzH8DBFEcP4oku8OH2cLXg5uwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJznRJ+CmhNgQlgdii8e8X9m/bYBMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPp4gLkp D9tHryz30weiFjZ33GWGPJM7YEh0iNcW08UY3AI7ojqUNQy9B6YBcOkrf6f7szeP 0jgp7ZCu4hMgpWErD9QZh9iCeucxxLN+WJ6StWyxwOeF6lh4LYss51A/xM0Mp7Er 6LX5WGtN6kPSogjOHEQIkqouCaLwTnYiO1j1d3aqUUIMfJpwoZbWftdgeuSWMfVh 1WpXxPa/h5h2XsUNfK17RQdauyFzCCHcbNe6Q7TwLyoIH5PLQVnciWOUXy7/z9vT VkACw+vo0NZx29hCUn1mVlOPUN8SOaw0EgsKHdyduzLgG7W/+y8B1OeHUbCEG1ha JZFh8vHI1X8J3A== -----END CERTIFICATE-----Generated at Sat Aug 1 21:25:35 2026 by rpki-client