$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: CAVqoUHBDVqTvmCpRarT8WetTSSWSU4MgTuf+n8e7iM= Subject key identifier: 8C:A6:5C:D7:AC:70:43:AD:82:D3:69:D3:5E:EE:36:3E:9A:CF:78:40 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FC4483489FBE8158CE4CCC09D378BA03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1446 Signing time: Sun 02 Aug 2026 21:01:34 +0000 Manifest this update: Sun 02 Aug 2026 21:01:34 +0000 Manifest next update: Mon 03 Aug 2026 21:01:34 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 9/J2fs4lLH7REiK6d+t92ZP6eETnNGOQFl6RtxF58/c=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Aug 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:c4:48:34:89:fb:e8:15:8c:e4:cc:c0:9d:37:8b:a0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 2 21:01:34 2026 GMT Not After : Aug 3 21:01:34 2026 GMT Subject: CN=8ca65cd7ac7043ad82d369d35eee363e9acf7840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:ac:6f:e7:de:00:e2:d5:90:d0:cd:c0:a1: 4d:b1:f3:50:3c:12:e3:3d:51:04:d3:82:06:2f:c9: 38:33:6b:01:4d:46:ca:32:07:d2:94:60:c9:c1:55: 48:1a:ff:a0:35:95:f6:2a:f8:cb:0f:b3:62:d4:82: 5d:a3:d5:c3:9f:b4:c9:21:c9:b3:1f:d3:05:3b:c6: cb:bd:c3:34:c8:4a:58:c4:b2:b9:a8:c6:6c:3f:c1: b8:35:42:34:5f:2b:6b:06:28:92:31:54:ce:f6:cf: 03:f3:be:fc:28:41:97:a4:5b:bc:79:1c:6b:37:62: 73:d5:f7:b6:e5:ed:77:38:a3:9d:6c:9a:79:64:25: 51:8b:fd:81:2d:b2:33:b4:fb:38:22:5c:af:37:d0: ab:fc:da:76:10:dc:53:87:f3:b0:bc:61:cb:65:a1: 4c:75:89:c8:a9:1a:87:8d:da:57:13:41:2d:b2:04: 3a:f1:14:58:a1:49:49:95:16:a9:56:84:65:17:44: 58:fe:78:98:a0:2e:0f:8b:36:81:c1:f4:80:d3:14: 73:c3:3e:01:d0:76:ca:a4:5e:de:9a:fe:43:44:dc: d2:ea:90:ae:a9:2c:58:d5:fd:0b:e0:d8:b2:74:2e: 8f:a7:fb:e9:98:1b:1c:82:cf:ff:76:5f:a6:36:3f: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A6:5C:D7:AC:70:43:AD:82:D3:69:D3:5E:EE:36:3E:9A:CF:78:40 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ec:5d:0f:22:d2:41:9d:2a:33:91:95:fd:13:ad:d5:ec:d4: 26:1f:80:dc:3e:ff:fb:50:85:17:e4:5f:24:6d:44:9b:90:e2: bc:e8:e7:21:83:c3:88:07:83:66:f3:58:0a:47:73:98:1b:e7: a0:d2:58:03:6b:7a:a0:6e:8d:d0:8f:40:24:79:60:62:aa:e2: bb:ff:23:cb:e3:49:38:71:f7:68:66:42:8f:f5:04:cb:cc:71: ee:e5:31:37:ee:6e:e9:ce:a7:77:b2:4f:fd:80:a6:34:34:06: 87:7a:a6:8c:9a:5f:18:07:fe:e8:c4:62:3d:92:04:fc:8b:93: 0f:e8:60:80:92:91:6a:5f:ba:86:68:e3:95:09:b1:c4:76:56: 01:37:75:7d:c5:11:08:64:9c:c3:9d:33:f6:f8:1b:bb:20:56: 7e:ea:86:84:8f:64:a6:54:08:ac:7a:f5:42:cc:c5:f2:9d:fb: c3:a9:47:9a:a8:76:07:90:52:c8:6c:27:eb:79:25:50:8c:d5: 67:ab:5c:d7:16:08:2d:36:05:c5:85:ad:ad:e3:39:25:90:bf: f6:f8:55:36:f9:ff:7c:44:21:ba:23:22:2a:94:0e:80:9b:82: cb:93:da:93:6c:bc:59:a1:9f:2e:88:47:94:5a:99:8a:df:ba: c6:8b:23:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/ESDSJ++gVjOTMwJ03i6A7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODAyMjEwMTM0WhcNMjYwODAzMjEwMTM0WjAzMTEwLwYDVQQD Eyg4Y2E2NWNkN2FjNzA0M2FkODJkMzY5ZDM1ZWVlMzYzZTlhY2Y3ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAmsb+feAOLVkNDNwKFNsfNQPBLj PVEE04IGL8k4M2sBTUbKMgfSlGDJwVVIGv+gNZX2KvjLD7Ni1IJdo9XDn7TJIcmz H9MFO8bLvcM0yEpYxLK5qMZsP8G4NUI0XytrBiiSMVTO9s8D8778KEGXpFu8eRxr N2Jz1fe25e13OKOdbJp5ZCVRi/2BLbIztPs4IlyvN9Cr/Np2ENxTh/OwvGHLZaFM dYnIqRqHjdpXE0EtsgQ68RRYoUlJlRapVoRlF0RY/niYoC4PizaBwfSA0xRzwz4B 0HbKpF7emv5DRNzS6pCuqSxY1f0L4NiydC6Pp/vpmBscgs//dl+mNj9WuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIymXNescEOtgtNp017uNj6az3hAMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOxdDyLS QZ0qM5GV/ROt1ezUJh+A3D7/+1CFF+RfJG1Em5DivOjnIYPDiAeDZvNYCkdzmBvn oNJYA2t6oG6N0I9AJHlgYqriu/8jy+NJOHH3aGZCj/UEy8xx7uUxN+5u6c6nd7JP /YCmNDQGh3qmjJpfGAf+6MRiPZIE/IuTD+hggJKRal+6hmjjlQmxxHZWATd1fcUR CGScw50z9vgbuyBWfuqGhI9kplQIrHr1QszF8p37w6lHmqh2B5BSyGwn63klUIzV Z6tc1xYILTYFxYWtreM5JZC/9vhVNvn/fEQhuiMiKpQOgJuCy5Pak2y8WaGfLohH lFqZit+6xosjBw== -----END CERTIFICATE-----Generated at Sun Aug 2 22:48:57 2026 by rpki-client