$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: lyWNLA9wUUzaqjXU1Cb4xMnoDKAxx6uvbcBCtRMs3TE= Subject key identifier: CA:1E:5C:0F:68:D7:2A:0E:6B:7F:65:D9:7D:99:A6:4E:BD:69:61:9C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A02B0FEF333D91980A06ED49CEC072E461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 147C Signing time: Sat 22 Aug 2026 20:00:59 +0000 Manifest this update: Sat 22 Aug 2026 20:00:59 +0000 Manifest next update: Sun 23 Aug 2026 20:00:59 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: iq+hxYtpVG8Suudk8OdRZAqHM9gm+QhJTVvkK0aE3eo=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:2b:0f:ef:33:3d:91:98:0a:06:ed:49:ce:c0:72:e4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 22 20:00:59 2026 GMT Not After : Aug 23 20:00:59 2026 GMT Subject: CN=ca1e5c0f68d72a0e6b7f65d97d99a64ebd69619c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:00:06:75:d6:8d:bc:2f:09:58:ce:6d:7b: f0:f6:bc:19:bc:5e:16:5b:d9:3b:25:27:0d:68:f6: f1:6f:f4:50:b2:24:78:f7:fa:c4:7f:59:72:e9:4b: c8:0f:4d:f0:b1:db:56:bc:4f:97:fc:30:b3:75:41: b2:9d:7b:56:1b:d8:53:df:1a:ce:59:7e:5c:1b:b2: 36:3d:ac:6f:41:10:b6:3f:82:f2:fc:46:87:b3:31: 9b:42:a6:72:47:c3:02:d1:7b:da:d1:13:96:c4:43: a1:c7:23:67:ba:a2:7e:04:6d:d7:40:1a:a2:81:aa: 93:14:58:17:89:61:63:d4:84:76:fa:7f:05:88:b2: 8a:ca:a0:ea:8b:37:33:78:60:95:32:15:c7:a2:70: 69:e2:05:95:1f:3a:ef:3f:7e:64:e5:ad:9c:33:b9: eb:21:ae:62:6f:35:3e:da:1d:10:51:a5:86:4d:d0: c3:af:20:4d:bf:52:cf:4a:60:ef:9a:ee:3f:0b:34: 62:eb:0c:71:71:7c:24:6a:8c:88:6f:9e:cf:6f:d0: 25:af:4d:a2:85:af:94:88:47:c6:6e:f9:f4:f0:16: 2a:62:c3:30:20:20:c0:96:fd:cc:1b:e6:55:7c:a1: 79:91:6d:2f:f3:7d:b8:0f:4e:c9:bc:6a:ac:9d:78: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:5C:0F:68:D7:2A:0E:6B:7F:65:D9:7D:99:A6:4E:BD:69:61:9C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ff:80:d0:70:bc:be:f4:06:39:fa:19:1a:bb:21:66:81:17: ab:31:71:6e:6b:50:9c:ee:59:2c:b7:f8:4a:cd:0a:b9:26:96: 4d:41:78:84:8c:3c:c9:9c:dc:c5:a1:39:5b:67:e7:0d:59:f2: 55:af:6b:e1:d9:0b:15:84:e6:46:da:b1:79:54:65:18:0a:4b: dd:47:78:cf:fa:f7:c6:f9:70:60:ba:38:ed:56:bf:46:7c:e1: b9:d3:af:19:bf:57:2a:ec:7b:b0:52:43:b9:f7:f5:76:f8:6d: 69:3c:55:bc:3b:b1:8f:65:15:2f:73:11:44:b5:6f:59:03:ab: 0d:13:f8:73:c6:64:63:36:46:58:5a:70:5d:f2:3e:55:1e:a2: 0b:65:b0:6e:ef:71:19:55:43:ff:3a:dd:8c:12:d3:fd:d6:2f: 86:5c:e4:15:2f:f2:a3:8a:cf:b6:05:2e:cf:dc:30:73:f7:db: 3f:7b:16:a4:f4:98:33:4c:a4:45:2f:06:0e:55:01:b0:6a:c9: 5f:95:03:6b:55:81:f6:67:d3:8f:7e:5b:f1:c6:68:64:2e:7d: 10:29:18:f9:d9:86:42:12:b4:72:74:e0:0d:c0:cd:dc:09:e7: 30:a3:90:e0:89:6b:bd:67:90:a7:75:e3:71:49:12:72:64:8e: a2:e5:88:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaArD+8zPZGYCgbtSc7AcuRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODIyMjAwMDU5WhcNMjYwODIzMjAwMDU5WjAzMTEwLwYDVQQD EyhjYTFlNWMwZjY4ZDcyYTBlNmI3ZjY1ZDk3ZDk5YTY0ZWJkNjk2MTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkcABnXWjbwvCVjObXvw9rwZvF4W W9k7JScNaPbxb/RQsiR49/rEf1ly6UvID03wsdtWvE+X/DCzdUGynXtWG9hT3xrO WX5cG7I2PaxvQRC2P4Ly/EaHszGbQqZyR8MC0Xva0ROWxEOhxyNnuqJ+BG3XQBqi gaqTFFgXiWFj1IR2+n8FiLKKyqDqizczeGCVMhXHonBp4gWVHzrvP35k5a2cM7nr Ia5ibzU+2h0QUaWGTdDDryBNv1LPSmDvmu4/CzRi6wxxcXwkaoyIb57Pb9Alr02i ha+UiEfGbvn08BYqYsMwICDAlv3MG+ZVfKF5kW0v8324D07JvGqsnXiATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoeXA9o1yoOa39l2X2Zpk69aWGcMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv+A0HC8 vvQGOfoZGrshZoEXqzFxbmtQnO5ZLLf4Ss0KuSaWTUF4hIw8yZzcxaE5W2fnDVny Va9r4dkLFYTmRtqxeVRlGApL3Ud4z/r3xvlwYLo47Va/RnzhudOvGb9XKux7sFJD uff1dvhtaTxVvDuxj2UVL3MRRLVvWQOrDRP4c8ZkYzZGWFpwXfI+VR6iC2Wwbu9x GVVD/zrdjBLT/dYvhlzkFS/yo4rPtgUuz9wwc/fbP3sWpPSYM0ykRS8GDlUBsGrJ X5UDa1WB9mfTj35b8cZoZC59ECkY+dmGQhK0cnTgDcDN3AnnMKOQ4IlrvWeQp3Xj cUkScmSOouWInQ== -----END CERTIFICATE-----Generated at Sun Aug 23 05:16:46 2026 by rpki-client