$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: F96jNe2hDqg+35qwUf+EOCPfhIghYxDKUIo3zWLnLic= Subject key identifier: E3:8E:D4:96:85:71:EB:C0:08:4E:B5:50:72:18:CA:03:18:FB:1C:8A Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0F29F074FC78E5462DD9AB641BA850A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14E4 Signing time: Wed 30 Sep 2026 14:01:43 +0000 Manifest this update: Wed 30 Sep 2026 14:01:43 +0000 Manifest next update: Thu 01 Oct 2026 14:01:43 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: VwsNBYxWlls2TqnscJk3ZpMt7ywUtdGz8KFvfqBtIl4=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f2:9f:07:4f:c7:8e:54:62:dd:9a:b6:41:ba:85:0a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 30 14:01:43 2026 GMT Not After : Oct 1 14:01:43 2026 GMT Subject: CN=e38ed4968571ebc0084eb5507218ca0318fb1c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:fa:c6:48:ca:2b:fa:d8:fc:d6:3c:21:6d: c6:75:43:70:50:1b:73:84:16:c1:ec:98:31:6a:d8: 6a:69:e7:d6:4d:9d:36:14:b1:dd:99:67:74:f9:2f: d8:dc:e4:98:98:75:fe:c5:96:90:a4:a6:a6:81:a5: 19:68:51:8b:20:ce:b0:2a:ac:2e:23:52:9a:83:e8: fc:08:43:ad:d4:fa:27:54:53:78:8d:6c:a6:4c:f0: 81:d5:f0:3e:51:43:f3:95:e2:11:91:63:ce:a5:09: 5f:82:9b:a8:bb:dd:05:01:04:96:92:e4:58:cc:af: 6a:79:15:69:f1:99:18:9f:d7:cd:22:09:85:40:40: 77:71:c6:47:90:fa:48:4a:19:05:a8:a3:20:5c:33: d3:15:86:35:a5:dc:2a:59:5a:3a:d4:39:b9:1b:fa: 4d:73:c4:48:9f:34:1f:b3:e6:0a:93:06:20:fa:7b: 37:34:d3:1a:6e:5e:12:28:27:ab:4a:3a:ee:3c:fd: 18:a2:6c:db:14:42:4a:0a:c3:78:98:e4:5e:7f:23: 73:29:3b:1d:0d:df:9e:c9:17:a3:ec:0d:16:7e:99: e2:c6:8f:6b:89:f1:14:cd:6c:12:c6:aa:91:28:8e: 3a:53:8a:b8:d0:9e:77:17:09:5c:e1:e2:91:fd:f0: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8E:D4:96:85:71:EB:C0:08:4E:B5:50:72:18:CA:03:18:FB:1C:8A X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:be:ea:41:a2:c0:c3:69:31:c5:8a:6b:07:d8:e3:e3:4e:8a: ef:4c:f3:af:6d:12:6d:70:5e:7f:a4:15:b9:9f:c1:4d:9c:6c: 75:5b:73:cf:d4:6c:dd:de:d2:e4:aa:bf:71:a0:3a:a9:17:0f: 79:f8:1f:ed:54:a7:e8:20:99:1c:b5:bf:91:66:3a:8d:f4:c0: 13:e5:c6:ef:40:26:fa:82:ff:84:c1:02:8f:8d:e9:2d:3b:d9: 9e:3a:a9:b0:de:f0:3e:ec:84:a9:18:e0:53:98:fc:6c:cc:79: 54:23:71:99:ff:7c:ea:ec:64:b4:76:a4:72:62:f6:b5:4d:dd: 6d:09:54:1a:7a:14:6e:25:53:ad:5f:37:39:b6:6d:be:b7:65: 1e:36:e0:07:16:09:86:07:32:5b:3c:f5:b7:af:2a:82:7b:b6: 68:2b:fb:30:ef:79:68:19:28:27:04:25:40:25:3e:2c:c5:8c: ad:d8:4e:a5:c8:2d:69:58:81:2f:03:e9:d9:fb:d0:d9:7d:03: 80:69:90:87:a1:ea:59:32:4b:f6:9b:33:1b:00:0b:4c:18:a3: 0e:97:a6:f4:de:7f:04:93:29:67:03:59:31:be:d8:47:f0:ca: f7:a3:71:20:67:34:11:27:5d:d6:08:05:93:51:22:62:04:9f: ff:06:69:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDynwdPx45UYt2atkG6hQpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTMwMTQwMTQzWhcNMjYxMDAxMTQwMTQzWjAzMTEwLwYDVQQD EyhlMzhlZDQ5Njg1NzFlYmMwMDg0ZWI1NTA3MjE4Y2EwMzE4ZmIxYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc76xkjKK/rY/NY8IW3GdUNwUBtz hBbB7JgxathqaefWTZ02FLHdmWd0+S/Y3OSYmHX+xZaQpKamgaUZaFGLIM6wKqwu I1Kag+j8CEOt1PonVFN4jWymTPCB1fA+UUPzleIRkWPOpQlfgpuou90FAQSWkuRY zK9qeRVp8ZkYn9fNIgmFQEB3ccZHkPpIShkFqKMgXDPTFYY1pdwqWVo61Dm5G/pN c8RInzQfs+YKkwYg+ns3NNMabl4SKCerSjruPP0YomzbFEJKCsN4mORefyNzKTsd Dd+eyRej7A0Wfpnixo9rifEUzWwSxqqRKI46U4q40J53Fwlc4eKR/fAtJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOO1JaFcevACE61UHIYygMY+xyKMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk77qQaLA w2kxxYprB9jj406K70zzr20SbXBef6QVuZ/BTZxsdVtzz9Rs3d7S5Kq/caA6qRcP efgf7VSn6CCZHLW/kWY6jfTAE+XG70Am+oL/hMECj43pLTvZnjqpsN7wPuyEqRjg U5j8bMx5VCNxmf986uxktHakcmL2tU3dbQlUGnoUbiVTrV83ObZtvrdlHjbgBxYJ hgcyWzz1t68qgnu2aCv7MO95aBkoJwQlQCU+LMWMrdhOpcgtaViBLwPp2fvQ2X0D gGmQh6HqWTJL9pszGwALTBijDpem9N5/BJMpZwNZMb7YR/DK96NxIGc0ESdd1ggF k1EiYgSf/wZpkQ== -----END CERTIFICATE-----Generated at Wed Sep 30 21:58:02 2026 by rpki-client