$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: LO4lJ9aLikh+3+/bHdK7yHBa92fAahPrESxAUC9qK0k= Subject key identifier: D9:B3:E0:99:C0:1F:76:F8:B4:A3:A9:46:C6:86:04:AC:04:5E:BF:03 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A06ACA71F2807D3065BA40D4977E72CE31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 149D Signing time: Fri 04 Sep 2026 05:00:47 +0000 Manifest this update: Fri 04 Sep 2026 05:00:47 +0000 Manifest next update: Sat 05 Sep 2026 05:00:47 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: IG4aUafXu6FlRzkR9Mb/msYhHqXlCutpSEcIRybw39E=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6a:ca:71:f2:80:7d:30:65:ba:40:d4:97:7e:72:ce:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 4 05:00:47 2026 GMT Not After : Sep 5 05:00:47 2026 GMT Subject: CN=d9b3e099c01f76f8b4a3a946c68604ac045ebf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:eb:c1:cc:21:e5:d9:d5:cc:78:86:e4:e7:44: 8c:9e:68:91:d7:8c:c2:6a:3e:30:cc:a8:3d:1a:8c: 3e:c3:c6:35:be:0d:94:bf:52:49:1a:c5:c7:0b:42: 5c:4c:77:23:13:32:ea:25:70:3c:b3:68:19:73:cb: aa:3d:1f:c4:44:59:53:20:b5:58:67:bb:70:15:b1: f6:09:9f:59:f5:83:9f:bf:13:85:fc:1b:17:00:b8: 47:69:ec:1f:31:d1:5a:29:6c:4d:7c:30:0e:66:d2: 03:c1:56:24:f0:f6:9f:da:34:0d:aa:a4:72:98:05: 94:33:9b:67:27:f5:09:7e:2a:1e:d1:df:a1:44:96: f2:4c:cc:06:43:9c:cd:75:b6:ea:30:fa:fa:f5:50: 13:50:8d:9f:a6:7b:5b:e4:96:94:b5:05:e8:35:7c: c4:c7:da:ba:33:3c:37:24:38:ff:68:1e:7d:8c:a2: 5d:36:10:ba:1e:de:58:13:06:8d:e7:79:5b:40:2c: bd:1f:72:ab:0f:2a:7b:66:be:3c:a9:1b:c7:8d:b5: 18:cf:06:db:cc:fa:b7:68:9d:52:5f:11:d7:f5:84: 36:43:7d:52:bd:62:ca:fc:c2:33:3c:7b:cd:56:0f: c9:a8:92:e6:dc:a4:c7:da:5e:e6:84:83:34:89:b9: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B3:E0:99:C0:1F:76:F8:B4:A3:A9:46:C6:86:04:AC:04:5E:BF:03 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ac:c2:ea:90:c6:3e:f6:20:e7:bc:b1:d6:77:81:be:90:ad: 4e:37:cb:2a:66:d5:b5:c9:52:e4:f9:da:f1:38:de:51:74:af: a5:ff:60:c6:d7:d6:25:84:00:4a:6d:e8:19:6e:e7:88:2e:ba: d0:ed:88:82:9a:55:fe:dc:0b:86:e5:b1:3e:77:9d:d9:f0:79: 68:5f:f0:77:0c:0c:85:e2:e4:f8:ad:7b:f1:9f:4b:b3:21:89: 62:b2:9f:16:f3:2f:6b:57:06:ff:38:34:c6:e7:97:5a:0c:40: 55:b0:a3:ad:95:70:4e:f5:0f:ce:5c:f7:43:53:34:c5:2f:11: 60:4f:86:93:d4:59:8b:0d:3a:30:4c:f1:a0:af:65:59:b2:a8: ac:2d:43:43:5e:48:63:3b:45:31:59:65:f0:8c:58:2b:8a:d1: db:b2:83:42:bd:d5:9c:6b:fa:67:d5:db:c8:09:40:fa:c0:a1: 16:2d:94:78:18:f0:09:81:37:d0:2a:96:b8:3d:d4:01:64:b2: 95:52:7a:d5:7a:a3:40:cf:0c:5f:6a:33:da:02:ae:81:3f:bc: 2d:0e:6b:05:34:15:90:a2:70:fd:8b:4d:82:90:55:d5:38:77: 7c:06:a9:e6:52:fd:8f:17:7c:e8:b4:de:9c:e3:72:62:34:40: 1d:fb:c2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBqynHygH0wZbpA1Jd+cs4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTA0MDUwMDQ3WhcNMjYwOTA1MDUwMDQ3WjAzMTEwLwYDVQQD EyhkOWIzZTA5OWMwMWY3NmY4YjRhM2E5NDZjNjg2MDRhYzA0NWViZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OvBzCHl2dXMeIbk50SMnmiR14zC aj4wzKg9Gow+w8Y1vg2Uv1JJGsXHC0JcTHcjEzLqJXA8s2gZc8uqPR/ERFlTILVY Z7twFbH2CZ9Z9YOfvxOF/BsXALhHaewfMdFaKWxNfDAOZtIDwVYk8Paf2jQNqqRy mAWUM5tnJ/UJfioe0d+hRJbyTMwGQ5zNdbbqMPr69VATUI2fpntb5JaUtQXoNXzE x9q6Mzw3JDj/aB59jKJdNhC6Ht5YEwaN53lbQCy9H3KrDyp7Zr48qRvHjbUYzwbb zPq3aJ1SXxHX9YQ2Q31SvWLK/MIzPHvNVg/JqJLm3KTH2l7mhIM0ibkeZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmz4JnAH3b4tKOpRsaGBKwEXr8DMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKzC6pDG PvYg57yx1neBvpCtTjfLKmbVtclS5Pna8TjeUXSvpf9gxtfWJYQASm3oGW7niC66 0O2IgppV/twLhuWxPned2fB5aF/wdwwMheLk+K178Z9LsyGJYrKfFvMva1cG/zg0 xueXWgxAVbCjrZVwTvUPzlz3Q1M0xS8RYE+Gk9RZiw06MEzxoK9lWbKorC1DQ15I YztFMVll8IxYK4rR27KDQr3VnGv6Z9XbyAlA+sChFi2UeBjwCYE30CqWuD3UAWSy lVJ61XqjQM8MX2oz2gKugT+8LQ5rBTQVkKJw/YtNgpBV1Th3fAap5lL9jxd86LTe nONyYjRAHfvCJQ== -----END CERTIFICATE-----Generated at Fri Sep 4 13:22:27 2026 by rpki-client