$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: SVgnLZe1ZF8moOmxkjdwOwDI76AI9Lb7sOA2QXopLmg= Subject key identifier: 34:89:6B:E9:D5:01:8B:BF:8A:72:95:85:94:F3:55:FA:E9:1E:C3:3F Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A16A5A31427F0B743D81C5ED66768BE291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1522 Signing time: Fri 23 Oct 2026 20:00:57 +0000 Manifest this update: Fri 23 Oct 2026 20:00:57 +0000 Manifest next update: Sat 24 Oct 2026 20:00:57 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 3Gn8ZpRx4Ii2h1V8x2fi5zywiV3Tlp5zVLsZLpGlv+E=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6a:5a:31:42:7f:0b:74:3d:81:c5:ed:66:76:8b:e2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 23 20:00:57 2026 GMT Not After : Oct 24 20:00:57 2026 GMT Subject: CN=34896be9d5018bbf8a72958594f355fae91ec33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:65:df:a9:99:7a:4e:40:02:60:32:14:bb: 6b:2b:33:61:1e:cd:c8:3e:e1:56:e4:a5:0f:a5:6f: 6b:9c:39:62:2d:11:fe:69:6b:49:95:8c:77:00:20: 72:df:7a:a0:48:a2:ab:60:28:bb:8b:61:6e:12:e8: 36:f0:bf:ec:64:20:fb:7e:e4:7b:8f:51:af:d9:24: 82:cd:b4:4d:76:7e:44:95:bb:88:69:99:6a:25:97: 1b:98:52:cc:bc:3d:68:83:7e:48:67:08:ad:65:50: ee:ab:95:71:1d:7c:7c:7f:e9:2a:e4:cd:e5:15:93: 16:42:66:32:7a:ee:68:07:da:6f:09:57:c0:ab:29: ea:dd:0a:cb:ba:16:30:bf:8b:43:fa:65:9c:f0:aa: c2:0e:c9:b3:fb:32:ae:cc:dd:71:53:8d:47:80:98: b5:2d:64:bf:82:ba:40:41:78:a8:32:65:41:48:74: 80:46:e7:df:c4:94:e8:08:31:35:d0:19:6a:07:2c: bd:01:e7:7f:c6:b5:4a:ec:bc:c0:41:ba:06:4e:f4: 64:20:9a:2c:f7:23:fa:9f:25:8d:4b:10:7c:5a:6c: 18:5d:05:1a:1a:01:ed:cc:0f:c4:f9:e2:2b:52:cf: 2e:f4:aa:33:a1:5b:09:35:7a:05:e6:8b:2c:20:57: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:89:6B:E9:D5:01:8B:BF:8A:72:95:85:94:F3:55:FA:E9:1E:C3:3F X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c7:bd:a7:a8:ff:6e:84:47:e5:3e:3a:70:60:13:75:bd:dc: 50:03:93:45:59:13:84:5d:29:5a:55:5d:f7:49:ad:56:65:29: 91:65:c8:83:7c:18:f5:aa:69:3e:31:38:56:c2:ed:07:6b:75: e2:68:83:89:2c:10:8f:f8:28:7c:ce:45:48:03:71:ba:93:31: c4:8e:b4:1f:20:15:18:3f:ea:a0:74:b1:c9:f3:a6:3e:35:d3: 5b:b3:90:7b:99:c4:b6:dd:7e:49:70:72:1e:44:53:82:16:e0: 25:f5:0f:43:bf:de:c4:2a:f9:dd:4f:5c:c0:4d:7b:58:2e:ee: 83:a1:6e:d1:4a:8d:b1:c6:44:02:bc:2b:0a:7f:a0:37:53:82: 16:ea:90:c3:d2:38:8b:c8:aa:4b:e1:e4:38:99:59:88:3f:21: 0b:1c:51:38:e2:02:20:4b:4f:fe:7b:10:bf:20:77:e9:e4:98: 7f:12:17:e1:2c:b4:97:14:df:41:52:93:de:bb:c0:7a:6f:50: ad:47:0b:2b:b2:f1:14:df:98:53:00:f7:89:d0:7d:8e:7d:ae: 96:38:be:c8:7b:83:d1:26:13:6b:f2:8b:88:84:73:0b:71:1d: 59:59:60:c2:81:f0:16:ae:00:35:05:87:c0:6a:2a:8d:f4:0d: 49:1d:90:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFqWjFCfwt0PYHF7WZ2i+KRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDIzMjAwMDU3WhcNMjYxMDI0MjAwMDU3WjAzMTEwLwYDVQQD EygzNDg5NmJlOWQ1MDE4YmJmOGE3Mjk1ODU5NGYzNTVmYWU5MWVjMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNRl36mZek5AAmAyFLtrKzNhHs3I PuFW5KUPpW9rnDliLRH+aWtJlYx3ACBy33qgSKKrYCi7i2FuEug28L/sZCD7fuR7 j1Gv2SSCzbRNdn5ElbuIaZlqJZcbmFLMvD1og35IZwitZVDuq5VxHXx8f+kq5M3l FZMWQmYyeu5oB9pvCVfAqynq3QrLuhYwv4tD+mWc8KrCDsmz+zKuzN1xU41HgJi1 LWS/grpAQXioMmVBSHSARuffxJToCDE10BlqByy9Aed/xrVK7LzAQboGTvRkIJos 9yP6nyWNSxB8WmwYXQUaGgHtzA/E+eIrUs8u9KozoVsJNXoF5ossIFdUEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSJa+nVAYu/inKVhZTzVfrpHsM/MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8e9p6j/ boRH5T46cGATdb3cUAOTRVkThF0pWlVd90mtVmUpkWXIg3wY9appPjE4VsLtB2t1 4miDiSwQj/gofM5FSANxupMxxI60HyAVGD/qoHSxyfOmPjXTW7OQe5nEtt1+SXBy HkRTghbgJfUPQ7/exCr53U9cwE17WC7ug6Fu0UqNscZEArwrCn+gN1OCFuqQw9I4 i8iqS+HkOJlZiD8hCxxROOICIEtP/nsQvyB36eSYfxIX4Sy0lxTfQVKT3rvAem9Q rUcLK7LxFN+YUwD3idB9jn2ulji+yHuD0SYTa/KLiIRzC3EdWVlgwoHwFq4ANQWH wGoqjfQNSR2QUA== -----END CERTIFICATE-----Generated at Sat Oct 24 06:59:30 2026 by rpki-client