$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: PN4Hj8mEkdyQ+lTCYveq0PTqIm81d+Lrvv2vmttqAL0= Subject key identifier: 69:23:09:DD:00:A2:BE:66:03:5E:F3:51:D8:DB:6F:46:2D:E1:28:7E Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F9DA7890D50A11C71E964706CDD1996EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1432 Signing time: Sun 26 Jul 2026 09:00:30 +0000 Manifest this update: Sun 26 Jul 2026 09:00:30 +0000 Manifest next update: Mon 27 Jul 2026 09:00:30 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 8/CaIofI1X3V1YONVQLMoXDnSIibfPG452VH4it6ymw=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9d:a7:89:0d:50:a1:1c:71:e9:64:70:6c:dd:19:96:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 26 09:00:30 2026 GMT Not After : Jul 27 09:00:30 2026 GMT Subject: CN=692309dd00a2be66035ef351d8db6f462de1287e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3c:60:2a:d6:cc:6a:b1:9c:53:01:88:fe:4a: 1a:7f:5c:26:17:35:45:6f:e4:0d:45:00:f5:4f:77: 72:da:f8:cb:94:75:4c:f9:de:d8:c1:30:cb:b9:03: ec:dc:c8:0f:28:e7:6d:f2:49:64:ba:5b:25:1d:c5: 89:ad:f6:6c:5f:16:76:ea:0d:3f:5a:f7:cd:27:b7: d3:e8:72:45:32:e3:75:03:67:cf:c7:51:a3:04:4e: 39:cd:e2:20:00:e4:90:85:c8:39:ce:da:3a:08:b0: cd:94:5a:3c:ba:72:47:92:cb:7b:fe:b3:c1:cf:cb: 2e:22:71:54:8b:90:85:31:0f:9a:ba:ea:ba:0e:5a: 4c:fa:14:38:39:4f:0b:4f:9a:4f:ff:1b:61:7c:93: 4d:86:48:ed:f3:3c:0f:09:69:79:ee:48:ca:ec:d3: 87:f1:67:60:ab:b3:11:cb:28:7a:51:06:f0:8c:f0: 35:31:41:05:82:3e:41:82:4b:1a:88:7c:5b:40:b1: a2:a8:b2:d9:23:09:35:b7:23:f7:8d:e7:8d:a1:cc: f0:70:87:f7:39:2d:b6:99:36:f9:6e:1a:2f:fc:2c: 3c:67:0e:40:da:e3:28:e7:c1:b3:21:9d:fa:7c:be: a3:48:13:b0:73:de:70:b2:a4:57:1f:d8:90:9c:eb: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:23:09:DD:00:A2:BE:66:03:5E:F3:51:D8:DB:6F:46:2D:E1:28:7E X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:27:35:65:44:6d:9c:a1:28:21:c7:60:16:00:21:d7:87: d4:85:de:fb:66:f7:22:4c:9f:5f:3a:c2:a6:5f:bd:2a:7b:87: cc:e5:2e:52:77:fe:43:1e:af:fa:b3:ba:c5:7f:83:5f:c4:f5: 72:d9:dd:94:b8:ef:dc:76:49:7b:94:8b:96:5e:ca:ba:fe:48: b8:00:ef:c1:33:bc:c2:bc:56:f8:dc:ce:36:54:9b:65:f4:83: ff:4c:f9:93:95:a7:e2:1d:87:aa:a9:df:34:57:a0:48:31:1e: 43:dd:78:5e:9a:6c:07:0c:bd:2c:2d:5e:68:30:5d:21:1c:84: 54:bf:db:fe:b0:fe:cd:d9:62:16:cc:40:fd:a4:13:b4:60:b8: f0:f6:4f:d2:6c:80:46:46:8e:58:bc:3c:06:bd:32:d6:d7:bc: fa:63:83:2e:96:e4:24:56:b3:91:46:ae:d3:c1:b8:81:e7:a6: 57:ad:af:af:1f:65:8b:30:10:c3:8d:f7:77:88:ae:f4:f5:00: 2b:34:ac:a4:81:93:01:ba:4e:9f:91:68:d4:cd:62:80:6f:a0: 3a:91:86:d9:c8:47:92:a1:38:04:c6:25:bc:49:0e:71:32:78: 56:c5:5e:79:ec:19:b3:ab:78:97:74:e3:f5:2f:4e:5c:a4:2c: d9:fe:0b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+dp4kNUKEccelkcGzdGZbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzI2MDkwMDMwWhcNMjYwNzI3MDkwMDMwWjAzMTEwLwYDVQQD Eyg2OTIzMDlkZDAwYTJiZTY2MDM1ZWYzNTFkOGRiNmY0NjJkZTEyODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTxgKtbMarGcUwGI/koaf1wmFzVF b+QNRQD1T3dy2vjLlHVM+d7YwTDLuQPs3MgPKOdt8klkulslHcWJrfZsXxZ26g0/ WvfNJ7fT6HJFMuN1A2fPx1GjBE45zeIgAOSQhcg5zto6CLDNlFo8unJHkst7/rPB z8suInFUi5CFMQ+auuq6DlpM+hQ4OU8LT5pP/xthfJNNhkjt8zwPCWl57kjK7NOH 8Wdgq7MRyyh6UQbwjPA1MUEFgj5BgksaiHxbQLGiqLLZIwk1tyP3jeeNoczwcIf3 OS22mTb5bhov/Cw8Zw5A2uMo58GzIZ36fL6jSBOwc95wsqRXH9iQnOtJ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkjCd0Aor5mA17zUdjbb0Yt4Sh+MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOUnNWVE bZyhKCHHYBYAIdeH1IXe+2b3IkyfXzrCpl+9KnuHzOUuUnf+Qx6v+rO6xX+DX8T1 ctndlLjv3HZJe5SLll7Kuv5IuADvwTO8wrxW+NzONlSbZfSD/0z5k5Wn4h2Hqqnf NFegSDEeQ914XppsBwy9LC1eaDBdIRyEVL/b/rD+zdliFsxA/aQTtGC48PZP0myA RkaOWLw8Br0y1te8+mODLpbkJFazkUau08G4geemV62vrx9lizAQw433d4iu9PUA KzSspIGTAbpOn5Fo1M1igG+gOpGG2chHkqE4BMYlvEkOcTJ4VsVeeewZs6t4l3Tj 9S9OXKQs2f4LEA== -----END CERTIFICATE-----Generated at Sun Jul 26 18:20:22 2026 by rpki-client