$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: rJEHS+pLt1Hr3GfqtRRHw8IB4hrjviUA0ob+erlbfgs= Subject key identifier: A4:38:FF:0E:BF:AC:42:00:89:4C:A9:F4:61:D1:C7:60:D5:24:E0:FA Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FED43EF248188F03468501E015F4A9E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 145C Signing time: Mon 10 Aug 2026 20:01:19 +0000 Manifest this update: Mon 10 Aug 2026 20:01:19 +0000 Manifest next update: Tue 11 Aug 2026 20:01:19 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 5fruriW3EZJZ7oIE/OW07rZJ/GnhhhTsXfGXGLXr0wE=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Aug 2026 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ed:43:ef:24:81:88:f0:34:68:50:1e:01:5f:4a:9e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 10 20:01:19 2026 GMT Not After : Aug 11 20:01:19 2026 GMT Subject: CN=a438ff0ebfac4200894ca9f461d1c760d524e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:b2:17:dc:1d:9e:e8:c1:f3:cd:96:5e:6e: 55:04:66:1d:74:5d:07:75:a4:0e:75:51:49:0d:3b: 76:52:85:12:c5:2e:1a:19:71:41:48:e1:e2:ab:2b: 72:35:2c:43:99:31:ab:c3:a5:9e:6b:1b:b3:ed:49: ac:a6:e9:32:46:80:5f:4e:15:2d:55:20:81:4a:4c: f6:90:24:b3:84:e9:07:b6:a5:dd:7c:b4:d1:46:d9: e0:29:da:35:12:7d:b4:26:e1:95:7b:e8:41:e4:08: 58:b7:48:53:cf:86:98:b8:f3:d4:86:68:d7:34:89: ed:7e:45:eb:23:a8:98:bc:30:fe:ee:de:25:bb:07: fe:e6:c2:2e:c3:4a:12:e0:f4:96:d5:36:a3:e7:2d: 20:3f:ea:e6:6a:a9:e8:c0:70:4e:1b:b6:dc:41:aa: 67:81:3b:a0:77:31:da:85:7a:50:2e:c6:6b:d6:50: c7:1c:60:6e:91:be:e9:26:29:b9:94:c4:a6:b1:8d: b9:12:f1:01:a9:88:6a:59:58:9b:25:80:b2:23:eb: 8a:3c:fc:4d:33:48:13:5a:65:96:7c:f6:ec:a3:51: 79:09:3f:e7:62:30:d5:c4:f2:cb:41:8e:16:4d:69: e3:3e:0c:81:fd:16:79:2e:ee:b8:56:cd:66:a1:d2: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:38:FF:0E:BF:AC:42:00:89:4C:A9:F4:61:D1:C7:60:D5:24:E0:FA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:b5:35:d5:43:c0:c1:07:39:41:ba:81:b0:57:85:a7:03: b7:f9:09:06:f1:b6:4e:d3:fc:e1:81:b8:d9:ff:88:c1:99:da: 2f:a7:9a:2e:73:6e:4d:9e:0e:9a:02:d8:1e:6a:7c:0d:15:09: 89:e7:d7:d5:7e:e2:23:43:80:3b:83:f3:38:63:37:e2:ef:04: 44:ff:12:47:b7:65:5f:af:3a:15:4b:b2:26:54:60:62:9c:af: 24:5d:ba:97:23:bb:41:ba:d4:06:0c:c9:a5:e9:43:32:17:0e: 1d:6e:20:39:44:2e:b8:36:14:6f:f5:1c:1e:7b:ed:57:0f:0a: 80:7c:a7:b5:d6:8f:28:31:83:8c:5b:03:61:07:53:32:e6:b5: 67:d8:76:ee:57:aa:61:b0:80:b1:08:2c:68:58:d3:ee:1d:48: 21:f4:85:5b:34:2a:5f:02:49:a5:0a:3b:7c:da:8b:b5:fd:df: 64:84:da:78:64:6d:d5:7b:f1:6f:a2:e6:f1:9c:08:5f:55:49: f1:06:77:fa:8b:97:54:10:6c:51:06:7e:27:c1:de:51:27:16: dd:c1:eb:c8:94:bd:b4:2e:e2:6e:cc:29:d2:37:48:8c:f5:5b: 16:97:61:37:98:46:bf:94:9e:f5:9d:7a:25:b5:da:c3:7d:af: 0a:dc:78:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/tQ+8kgYjwNGhQHgFfSp5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODEwMjAwMTE5WhcNMjYwODExMjAwMTE5WjAzMTEwLwYDVQQD EyhhNDM4ZmYwZWJmYWM0MjAwODk0Y2E5ZjQ2MWQxYzc2MGQ1MjRlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDCyF9wdnujB882WXm5VBGYddF0H daQOdVFJDTt2UoUSxS4aGXFBSOHiqytyNSxDmTGrw6Weaxuz7UmspukyRoBfThUt VSCBSkz2kCSzhOkHtqXdfLTRRtngKdo1En20JuGVe+hB5AhYt0hTz4aYuPPUhmjX NIntfkXrI6iYvDD+7t4luwf+5sIuw0oS4PSW1Taj5y0gP+rmaqnowHBOG7bcQapn gTugdzHahXpQLsZr1lDHHGBukb7pJim5lMSmsY25EvEBqYhqWVibJYCyI+uKPPxN M0gTWmWWfPbso1F5CT/nYjDVxPLLQY4WTWnjPgyB/RZ5Lu64Vs1modITqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ4/w6/rEIAiUyp9GHRx2DVJOD6MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgG1NdVD wMEHOUG6gbBXhacDt/kJBvG2TtP84YG42f+IwZnaL6eaLnNuTZ4OmgLYHmp8DRUJ iefX1X7iI0OAO4PzOGM34u8ERP8SR7dlX686FUuyJlRgYpyvJF26lyO7QbrUBgzJ pelDMhcOHW4gOUQuuDYUb/UcHnvtVw8KgHyntdaPKDGDjFsDYQdTMua1Z9h27leq YbCAsQgsaFjT7h1IIfSFWzQqXwJJpQo7fNqLtf3fZITaeGRt1Xvxb6Lm8ZwIX1VJ 8QZ3+ouXVBBsUQZ+J8HeUScW3cHryJS9tC7ibswp0jdIjPVbFpdhN5hGv5Se9Z16 JbXaw32vCtx4mg== -----END CERTIFICATE-----Generated at Tue Aug 11 01:37:56 2026 by rpki-client