$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: AgDtjJAXQMA8AANV2ufyz3HhGDTC9CVamCMnxTFvfts= Subject key identifier: 0A:3C:49:C1:A3:A3:77:D7:F2:7E:E5:4E:A9:7E:A9:BC:E2:0C:C6:21 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A049F633F240F8BCAE17E153D9B9502C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 148C Signing time: Fri 28 Aug 2026 20:01:06 +0000 Manifest this update: Fri 28 Aug 2026 20:01:06 +0000 Manifest next update: Sat 29 Aug 2026 20:01:06 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: +v00qiZhVmBQIYip6JyhbpvmRFojv/eboOKiRWF+O3s=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Aug 2026 17:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:49:f6:33:f2:40:f8:bc:ae:17:e1:53:d9:b9:50:2c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 28 20:01:06 2026 GMT Not After : Aug 29 20:01:06 2026 GMT Subject: CN=0a3c49c1a3a377d7f27ee54ea97ea9bce20cc621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:89:93:e3:4e:71:1c:01:29:5e:4e:d7:cb: 9e:dd:86:ef:3e:5f:25:4b:ef:7b:d6:ae:a3:45:ee: 66:39:ad:8d:28:b3:bd:25:91:d7:78:a0:00:34:33: d1:84:a6:41:a2:0b:d5:70:87:9e:2f:9d:43:20:0e: 80:e9:9e:69:f8:ac:52:48:32:12:ae:8b:cb:e8:b4: 62:6c:f4:ef:5e:76:85:6a:cd:be:18:b2:43:e7:ca: dd:c0:32:66:63:3d:bb:ec:bb:67:1f:8b:97:53:7b: ae:f7:91:e2:96:3e:59:79:97:48:22:d8:d2:69:cd: de:08:89:f7:4f:60:ba:25:f1:a3:8f:3b:99:00:1f: 75:80:b4:1f:8a:a5:a8:4f:42:e2:e7:28:98:0c:c0: 8c:38:ed:fa:7f:25:87:da:16:15:ba:d5:39:93:47: ce:1d:70:74:ce:e5:76:15:1b:3e:60:da:f9:10:51: 57:e5:32:83:81:c9:40:7b:57:e2:0c:fd:ed:0e:9d: ed:62:3b:3b:d6:f7:48:9d:9a:cc:03:5b:dd:79:d0: ae:d4:be:ab:59:b7:6f:b8:24:64:2d:d6:1a:ad:e4: ef:fa:9f:dc:17:b2:7c:4b:e5:36:f1:b3:cb:68:13: 0c:c6:05:f0:5f:60:4b:f8:72:21:02:e1:04:3d:a8: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3C:49:C1:A3:A3:77:D7:F2:7E:E5:4E:A9:7E:A9:BC:E2:0C:C6:21 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8c:92:5a:da:df:97:68:b3:1f:be:76:ef:81:18:4b:76:e0: f7:c0:97:e9:9d:c9:05:10:e0:72:a8:da:62:71:65:02:37:b3: 58:23:87:fe:49:51:8c:7c:22:7b:6f:d5:a4:89:70:86:c1:c4: 61:ed:65:66:ee:37:43:c2:ff:38:6b:7a:44:8d:18:a8:bd:35: ec:a6:96:3e:c0:bb:7a:b7:fb:16:10:51:bf:a2:4d:3a:1a:86: 15:2f:a5:19:5b:7d:a2:1f:d0:ab:5c:22:f9:65:ac:1d:e6:e7: 2c:20:95:70:59:2a:b7:79:36:0a:9d:69:ad:5e:39:fa:d5:25: 5b:ee:af:0c:19:86:5b:09:25:a5:e8:0d:23:78:6b:08:2b:06: 1a:80:eb:b6:c2:85:47:00:19:8c:61:09:53:60:ed:30:98:45: 3d:a8:25:bf:21:a3:8e:67:8a:12:66:ca:e3:a9:cd:ab:bc:30: e6:fc:54:b4:85:55:b6:bd:fc:b1:04:16:a2:4b:6c:ec:70:43: dd:60:bf:42:96:19:e0:d7:3d:66:9e:ef:33:6a:7d:5e:42:05: 14:3b:6d:7a:1b:0b:1a:e8:4e:3f:c8:1d:93:b1:b0:61:25:fa: b7:e7:40:4d:be:04:4d:a8:db:8d:ac:f2:da:70:2c:52:7e:00: 39:e1:73:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBJ9jPyQPi8rhfhU9m5UCw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODI4MjAwMTA2WhcNMjYwODI5MjAwMTA2WjAzMTEwLwYDVQQD EygwYTNjNDljMWEzYTM3N2Q3ZjI3ZWU1NGVhOTdlYTliY2UyMGNjNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dKJk+NOcRwBKV5O18ue3YbvPl8l S+971q6jRe5mOa2NKLO9JZHXeKAANDPRhKZBogvVcIeeL51DIA6A6Z5p+KxSSDIS rovL6LRibPTvXnaFas2+GLJD58rdwDJmYz277LtnH4uXU3uu95Hilj5ZeZdIItjS ac3eCIn3T2C6JfGjjzuZAB91gLQfiqWoT0Li5yiYDMCMOO36fyWH2hYVutU5k0fO HXB0zuV2FRs+YNr5EFFX5TKDgclAe1fiDP3tDp3tYjs71vdInZrMA1vdedCu1L6r WbdvuCRkLdYareTv+p/cF7J8S+U28bPLaBMMxgXwX2BL+HIhAuEEPajnjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo8ScGjo3fX8n7lTql+qbziDMYhMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4ySWtrf l2izH75274EYS3bg98CX6Z3JBRDgcqjaYnFlAjezWCOH/klRjHwie2/VpIlwhsHE Ye1lZu43Q8L/OGt6RI0YqL017KaWPsC7erf7FhBRv6JNOhqGFS+lGVt9oh/Qq1wi +WWsHebnLCCVcFkqt3k2Cp1prV45+tUlW+6vDBmGWwklpegNI3hrCCsGGoDrtsKF RwAZjGEJU2DtMJhFPaglvyGjjmeKEmbK46nNq7ww5vxUtIVVtr38sQQWokts7HBD 3WC/QpYZ4Nc9Zp7vM2p9XkIFFDttehsLGuhOP8gdk7GwYSX6t+dATb4ETajbjazy 2nAsUn4AOeFzFw== -----END CERTIFICATE-----Generated at Sat Aug 29 03:00:43 2026 by rpki-client