$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: citxpVBBfzCGXKXv82906GAcbBO93zXQ2EjuGPsmtlQ= Subject key identifier: A0:0F:6F:1A:7C:C6:79:E9:30:E5:C8:A2:F5:C1:C7:A5:52:4F:38:01 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FAD1B1DBFCF972834325BF39788EFD511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 143A Signing time: Wed 29 Jul 2026 09:01:03 +0000 Manifest this update: Wed 29 Jul 2026 09:01:03 +0000 Manifest next update: Thu 30 Jul 2026 09:01:03 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 5RgJOkzGpXBIpfuQkiGAaHiJlnOyCTb+tdISBR0j8/A=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ad:1b:1d:bf:cf:97:28:34:32:5b:f3:97:88:ef:d5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 29 09:01:03 2026 GMT Not After : Jul 30 09:01:03 2026 GMT Subject: CN=a00f6f1a7cc679e930e5c8a2f5c1c7a5524f3801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:2d:84:91:d9:7e:dd:65:a9:36:c9:79:73: 83:07:e7:02:46:7e:b2:a2:f7:ba:fa:15:ed:ad:48: db:ac:0c:3f:ab:28:44:5a:2d:6e:0f:e7:9c:9e:4e: 1e:8e:c7:f2:17:ef:c7:73:4d:06:de:42:86:5f:36: b3:3d:f9:f3:ab:73:2d:97:ab:ab:f1:bd:4c:49:b7: 63:b7:00:23:8d:c7:29:09:6a:5f:a1:9a:64:69:97: 7f:60:af:6f:34:01:ac:2a:30:f9:6b:4f:66:c2:ee: 2a:18:44:9e:83:a3:6a:35:13:03:bf:10:11:5a:61: 61:17:1b:c1:20:eb:82:0f:98:36:75:5e:7f:a2:11: 70:d4:2b:b0:16:00:95:d0:93:95:93:bc:85:96:84: b3:4f:60:00:e9:13:59:10:96:74:1b:ac:7f:a2:20: 77:98:c3:07:de:a3:78:c9:eb:20:6d:75:0c:7a:08: 45:a6:40:ec:69:73:8d:c9:9f:fa:e3:d9:40:22:2f: d5:1d:8b:ad:99:2f:25:70:3c:e6:ac:5f:6c:4a:50: 8d:0e:66:d9:ef:78:c5:20:da:2c:d6:7d:33:88:f3: bc:e8:7d:77:9d:0f:11:8f:88:b4:e5:72:58:a1:7a: c7:fe:c3:c2:e7:48:de:e0:4f:69:76:b3:39:03:45: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0F:6F:1A:7C:C6:79:E9:30:E5:C8:A2:F5:C1:C7:A5:52:4F:38:01 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7d:9d:99:df:3b:50:50:0f:95:b0:45:c9:38:11:7a:e9:f8: 91:5e:8e:04:79:cf:94:e4:86:05:c9:cf:6d:c7:4f:90:e9:db: a9:0f:eb:0c:09:a9:2e:26:de:2e:d5:1a:de:2a:2c:ea:77:3e: ae:0a:3f:03:9d:0c:75:03:aa:9a:06:6b:8b:b6:83:68:7e:c3: 2c:7f:23:d4:7a:8a:93:86:77:90:d6:e2:d4:94:d1:65:c1:47: 0f:28:c8:a8:5e:53:da:5d:86:99:e2:21:ad:79:5d:2a:27:6e: cc:7f:0a:8b:ab:ca:5f:7c:62:26:dd:4f:86:27:bd:53:01:0b: 6d:73:dd:f7:c8:8e:c6:a1:dc:54:a8:9e:19:0a:1d:2d:cf:55: 49:bb:a1:8c:fc:7e:7a:27:95:19:84:a9:80:0b:06:fc:55:46: 54:03:8e:3d:82:f6:90:e2:55:91:50:6f:b8:52:97:78:02:96: f5:6e:4f:64:e4:8e:65:7c:8b:62:f4:34:ab:8e:85:cf:aa:dd: f2:51:cb:35:37:58:4b:2c:28:76:82:b7:23:a7:55:e2:03:83: 76:1d:6c:fb:3c:c5:d9:3b:f7:01:fa:5f:20:e5:16:37:81:c9: ec:3d:21:32:7d:7f:81:0e:32:97:5c:bb:88:a8:8a:45:2e:02: a3:e7:fe:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+tGx2/z5coNDJb85eI79URMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzI5MDkwMTAzWhcNMjYwNzMwMDkwMTAzWjAzMTEwLwYDVQQD EyhhMDBmNmYxYTdjYzY3OWU5MzBlNWM4YTJmNWMxYzdhNTUyNGYzODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng4thJHZft1lqTbJeXODB+cCRn6y ove6+hXtrUjbrAw/qyhEWi1uD+ecnk4ejsfyF+/Hc00G3kKGXzazPfnzq3Mtl6ur 8b1MSbdjtwAjjccpCWpfoZpkaZd/YK9vNAGsKjD5a09mwu4qGESeg6NqNRMDvxAR WmFhFxvBIOuCD5g2dV5/ohFw1CuwFgCV0JOVk7yFloSzT2AA6RNZEJZ0G6x/oiB3 mMMH3qN4yesgbXUMeghFpkDsaXONyZ/649lAIi/VHYutmS8lcDzmrF9sSlCNDmbZ 73jFINos1n0ziPO86H13nQ8Rj4i05XJYoXrH/sPC50je4E9pdrM5A0U1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAPbxp8xnnpMOXIovXBx6VSTzgBMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArX2dmd87 UFAPlbBFyTgReun4kV6OBHnPlOSGBcnPbcdPkOnbqQ/rDAmpLibeLtUa3ios6nc+ rgo/A50MdQOqmgZri7aDaH7DLH8j1HqKk4Z3kNbi1JTRZcFHDyjIqF5T2l2GmeIh rXldKiduzH8Ki6vKX3xiJt1Phie9UwELbXPd98iOxqHcVKieGQodLc9VSbuhjPx+ eieVGYSpgAsG/FVGVAOOPYL2kOJVkVBvuFKXeAKW9W5PZOSOZXyLYvQ0q46Fz6rd 8lHLNTdYSywodoK3I6dV4gODdh1s+zzF2Tv3AfpfIOUWN4HJ7D0hMn1/gQ4yl1y7 iKiKRS4Co+f+LA== -----END CERTIFICATE-----Generated at Wed Jul 29 19:02:35 2026 by rpki-client