$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: yeiL0rMTZfv7tSroeKHC/5+uXpH+gFx40zUH890/T5A= Subject key identifier: 59:95:5D:70:54:4A:3D:00:D7:8A:B2:62:50:0B:E3:D8:C6:33:0F:DF Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F5FDC1564EDA43CDF9609ECCCF94E2950 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1412 Signing time: Tue 14 Jul 2026 09:01:26 +0000 Manifest this update: Tue 14 Jul 2026 09:01:26 +0000 Manifest next update: Wed 15 Jul 2026 09:01:26 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: DpJG08vCYyHw43LgIcGdPL2cE5yoLuJ8OHTktNoT9WI=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Jul 2026 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:5f:dc:15:64:ed:a4:3c:df:96:09:ec:cc:f9:4e:29:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 14 09:01:26 2026 GMT Not After : Jul 15 09:01:26 2026 GMT Subject: CN=59955d70544a3d00d78ab262500be3d8c6330fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5b:b1:8e:44:7f:1e:b4:f6:fa:b8:3c:7b:67: 6d:9c:b9:f9:8c:e0:e2:b7:33:a5:6c:d2:80:c6:19: 74:ee:77:8f:b8:6d:0d:cd:dc:17:a1:16:9f:fa:ee: fb:63:d5:6d:5d:89:18:b3:76:16:58:82:18:fd:ae: b5:23:0e:d0:f2:cc:6a:a4:fa:54:11:56:48:52:63: 7d:5f:10:1c:44:d7:e6:bb:35:36:ff:07:ac:a5:5e: 0a:5b:32:c5:b7:10:af:31:39:15:42:2e:9b:98:7b: 4e:3a:fe:03:f0:97:27:e3:3e:5e:b4:30:f9:88:47: ec:a5:dc:93:0c:db:df:8d:08:3a:fe:90:a1:6a:9b: a5:f9:7c:69:45:9e:33:41:25:87:fd:b0:dd:fe:fa: 1a:9e:23:3e:db:4f:5c:5b:0a:db:15:e7:fd:b5:98: f1:c4:fd:ec:6e:43:69:f6:9d:30:26:50:b8:83:62: 92:ae:63:21:51:c6:07:28:eb:0f:50:81:60:38:60: ad:d4:cd:62:43:ac:a6:47:a1:57:01:8c:73:23:d3: 97:f7:f0:e6:33:40:54:48:fc:3b:64:f6:ec:ae:15: ed:5d:b6:fc:22:c5:ca:c0:cb:fa:f1:e8:15:01:ed: 93:89:8a:20:cf:4f:93:70:3d:a2:93:77:6d:f3:d1: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:95:5D:70:54:4A:3D:00:D7:8A:B2:62:50:0B:E3:D8:C6:33:0F:DF X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:26:07:f2:a5:5d:26:77:b0:05:c4:11:66:42:04:d9:19:a8: 34:d4:7a:e1:16:28:cc:7c:ff:65:55:7e:32:91:a3:8f:3e:54: a3:7f:be:31:de:fd:ae:0a:3c:cf:22:9e:cf:67:12:4e:f1:0f: 53:76:5e:ae:5c:fa:ec:39:36:9e:7c:17:87:f5:38:d0:c3:35: 1d:0c:e4:b6:e4:99:37:2e:bb:5a:30:34:e0:b7:f2:21:87:d8: a3:8f:a3:d4:08:c3:65:3f:09:de:1b:d7:9e:0d:b7:ae:08:3a: b3:df:cc:71:f4:44:73:06:61:e2:6a:59:6b:a7:6c:c6:ee:fd: 29:a3:35:99:4a:a8:e7:4d:76:07:fb:a6:c7:db:04:84:88:27: b9:9d:f9:df:45:76:4a:63:0c:74:19:00:d9:fd:30:1b:32:f0: 5c:0d:4b:0e:8e:1a:cb:0d:54:8b:32:63:8b:16:14:75:8f:de: de:f2:68:da:50:ad:0a:96:b5:b0:2e:4c:2c:27:70:18:33:7c: 20:28:d8:cd:8a:90:35:c3:9f:22:01:06:0b:16:e2:ef:6d:00: 2c:2e:63:9d:f4:52:1b:27:10:0b:35:43:02:6c:cd:c5:a7:6e: 9b:e0:30:af:b0:2a:d6:50:76:a0:d6:98:3d:20:dc:fc:15:f1: 0d:80:a6:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9f3BVk7aQ835YJ7Mz5TilQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzE0MDkwMTI2WhcNMjYwNzE1MDkwMTI2WjAzMTEwLwYDVQQD Eyg1OTk1NWQ3MDU0NGEzZDAwZDc4YWIyNjI1MDBiZTNkOGM2MzMwZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FuxjkR/HrT2+rg8e2dtnLn5jODi tzOlbNKAxhl07nePuG0NzdwXoRaf+u77Y9VtXYkYs3YWWIIY/a61Iw7Q8sxqpPpU EVZIUmN9XxAcRNfmuzU2/wespV4KWzLFtxCvMTkVQi6bmHtOOv4D8Jcn4z5etDD5 iEfspdyTDNvfjQg6/pChapul+XxpRZ4zQSWH/bDd/voaniM+209cWwrbFef9tZjx xP3sbkNp9p0wJlC4g2KSrmMhUcYHKOsPUIFgOGCt1M1iQ6ymR6FXAYxzI9OX9/Dm M0BUSPw7ZPbsrhXtXbb8IsXKwMv68egVAe2TiYogz0+TcD2ik3dt89Hq9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmVXXBUSj0A14qyYlAL49jGMw/fMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiYH8qVd JnewBcQRZkIE2RmoNNR64RYozHz/ZVV+MpGjjz5Uo3++Md79rgo8zyKez2cSTvEP U3Zerlz67Dk2nnwXh/U40MM1HQzktuSZNy67WjA04LfyIYfYo4+j1AjDZT8J3hvX ng23rgg6s9/McfREcwZh4mpZa6dsxu79KaM1mUqo5012B/umx9sEhIgnuZ3530V2 SmMMdBkA2f0wGzLwXA1LDo4ayw1UizJjixYUdY/e3vJo2lCtCpa1sC5MLCdwGDN8 ICjYzYqQNcOfIgEGCxbi720ALC5jnfRSGycQCzVDAmzNxadum+Awr7Aq1lB2oNaY PSDc/BXxDYCmbA== -----END CERTIFICATE-----Generated at Tue Jul 14 14:03:33 2026 by rpki-client