$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: DdToAOtSCxgGosB3lEPD0MgV0fUrRXSuos9cvH38vPE= Subject key identifier: 9E:49:4F:4A:84:9E:E9:2C:56:25:E4:E3:4C:DB:84:2F:CE:A2:F1:7C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A06EA7A411A71DFD18E8CF3CC659C17EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 149F Signing time: Fri 04 Sep 2026 23:01:15 +0000 Manifest this update: Fri 04 Sep 2026 23:01:15 +0000 Manifest next update: Sat 05 Sep 2026 23:01:15 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: zrvgZCx89PM74MD5lDZe7Qzp0/GISJoJN17VnOT23Lw=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:a7:a4:11:a7:1d:fd:18:e8:cf:3c:c6:59:c1:7e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 4 23:01:15 2026 GMT Not After : Sep 5 23:01:15 2026 GMT Subject: CN=9e494f4a849ee92c5625e4e34cdb842fcea2f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:bd:81:b3:20:5c:83:6d:84:44:ad:73:47: 40:e1:19:c5:d0:86:1e:d2:35:a4:a0:70:cb:fc:a7: c7:5f:df:bf:99:bb:7d:92:34:4b:66:63:45:ed:7a: 19:49:a1:40:88:24:4f:8e:27:a8:a0:ca:79:9f:ee: ed:97:2b:cc:a4:80:bf:63:d2:ba:61:d1:c7:5e:1e: a4:aa:9f:48:86:38:b9:32:2e:69:fa:70:2d:84:86: 43:cf:80:a5:ca:c7:85:a2:c7:2a:8b:0a:40:c1:62: 64:8b:75:b6:52:30:63:4c:81:1e:2d:74:7d:14:16: bc:58:9c:ce:bf:0c:f5:1b:5f:88:d8:d9:07:87:d1: 67:3f:0c:0c:63:cb:a7:19:ee:89:93:a5:01:07:d6: d8:8b:3f:ba:d2:36:33:a4:2e:6e:0d:fa:6c:1a:99: 51:a7:5e:ab:e3:ed:98:db:ce:fd:44:e7:c5:c1:39: 83:83:f3:88:b0:6e:81:cd:e2:10:2e:83:7d:74:ac: 83:68:be:4b:b2:08:de:df:66:62:8c:1e:4f:f4:7f: 7c:11:7c:8e:35:39:ac:17:68:48:c3:7c:3b:c8:b1: 56:e4:97:46:e3:3b:48:a6:95:4e:7e:fe:aa:6c:e8: 02:07:82:5a:19:bd:4a:2c:de:50:c4:2a:61:8d:57: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:4F:4A:84:9E:E9:2C:56:25:E4:E3:4C:DB:84:2F:CE:A2:F1:7C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2a:4d:32:f1:0d:2b:fa:ba:3d:33:f4:64:26:cf:05:0a:7b: 31:bb:85:43:c5:b1:a1:f8:05:f8:38:40:a4:d8:70:60:1e:c0: 0f:06:82:a1:96:72:99:d0:5f:15:83:61:6a:39:71:d4:33:6b: ce:21:50:e9:0d:cd:b6:01:76:03:e9:71:a6:4e:7c:0b:cb:8f: 06:14:da:23:c4:62:38:c4:f5:b9:4c:34:79:30:c3:73:04:7d: 3f:0e:55:07:a7:d4:72:c9:8a:56:87:78:b6:e5:65:5e:66:80: ab:88:a9:68:6d:55:c5:ec:ba:9a:5b:5e:6b:39:4d:e4:1f:b8: 12:04:77:e6:f2:96:c8:6c:c1:c4:b3:f8:be:e6:2a:ec:88:44: 34:07:c3:7f:ef:f4:47:60:b0:f7:92:81:86:6a:2c:c5:59:f8: 9f:3a:ca:7b:64:9a:e1:85:98:50:5e:0a:2f:9a:20:e4:7a:ed: d4:8d:bc:24:f2:c9:b8:31:63:25:95:e4:a5:fd:ee:00:a8:11: 2a:b6:60:ce:97:e9:c7:0a:a6:f6:0a:e6:a4:f7:6d:4d:5b:97: e4:2e:ff:43:a3:03:e4:28:66:83:38:3f:03:e1:ff:e5:9e:dd: 1c:4a:9d:82:2a:8c:7b:34:56:d1:f4:4a:54:bd:e6:a2:65:96: 32:41:e1:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBup6QRpx39GOjPPMZZwX7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTA0MjMwMTE1WhcNMjYwOTA1MjMwMTE1WjAzMTEwLwYDVQQD Eyg5ZTQ5NGY0YTg0OWVlOTJjNTYyNWU0ZTM0Y2RiODQyZmNlYTJmMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje69gbMgXINthEStc0dA4RnF0IYe 0jWkoHDL/KfHX9+/mbt9kjRLZmNF7XoZSaFAiCRPjieooMp5n+7tlyvMpIC/Y9K6 YdHHXh6kqp9Ihji5Mi5p+nAthIZDz4ClyseFoscqiwpAwWJki3W2UjBjTIEeLXR9 FBa8WJzOvwz1G1+I2NkHh9FnPwwMY8unGe6Jk6UBB9bYiz+60jYzpC5uDfpsGplR p16r4+2Y2879ROfFwTmDg/OIsG6BzeIQLoN9dKyDaL5Lsgje32ZijB5P9H98EXyO NTmsF2hIw3w7yLFW5JdG4ztIppVOfv6qbOgCB4JaGb1KLN5QxCphjVdMcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5JT0qEnuksViXk40zbhC/OovF8MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsypNMvEN K/q6PTP0ZCbPBQp7MbuFQ8WxofgF+DhApNhwYB7ADwaCoZZymdBfFYNhajlx1DNr ziFQ6Q3NtgF2A+lxpk58C8uPBhTaI8RiOMT1uUw0eTDDcwR9Pw5VB6fUcsmKVod4 tuVlXmaAq4ipaG1Vxey6mlteazlN5B+4EgR35vKWyGzBxLP4vuYq7IhENAfDf+/0 R2Cw95KBhmosxVn4nzrKe2Sa4YWYUF4KL5og5Hrt1I28JPLJuDFjJZXkpf3uAKgR KrZgzpfpxwqm9grmpPdtTVuX5C7/Q6MD5Chmgzg/A+H/5Z7dHEqdgiqMezRW0fRK VL3momWWMkHh1Q== -----END CERTIFICATE-----Generated at Sat Sep 5 08:40:17 2026 by rpki-client