$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: TyjwtcXLhaauy6R3RIKU/uuq0pFQ0kNF7Hi5zIalcqo= Subject key identifier: 39:76:E2:A8:E9:E6:7D:F1:67:F4:76:51:EC:4B:E8:81:DC:30:B1:E0 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A021682670D1937B0697CAFEB1DE130413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1477 Signing time: Thu 20 Aug 2026 23:01:08 +0000 Manifest this update: Thu 20 Aug 2026 23:01:08 +0000 Manifest next update: Fri 21 Aug 2026 23:01:08 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: MpfyLiGIIn0UWd4lG07Tmz2YIRauRd0b8lDDlq6o+a0=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 20:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:21:68:26:70:d1:93:7b:06:97:ca:fe:b1:de:13:04:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 20 23:01:08 2026 GMT Not After : Aug 21 23:01:08 2026 GMT Subject: CN=3976e2a8e9e67df167f47651ec4be881dc30b1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:56:e0:55:99:75:df:eb:f3:da:fa:c7:32: 95:3c:b2:71:2c:7a:69:a1:7d:c4:9a:ff:51:63:92: 30:79:c9:38:75:5f:8c:8e:e7:45:33:8e:b8:46:85: 28:4f:1b:a9:52:b5:e8:1b:11:4d:17:7c:43:5e:75: 3a:1b:6a:84:11:a3:8a:38:ec:8c:fa:44:87:72:78: 5a:3e:11:85:df:75:44:ad:21:67:5a:66:be:1c:6d: 2d:5d:3e:54:1f:7a:d8:e3:7d:6b:a8:48:22:3b:e2: cc:6d:c2:a1:b7:02:35:f0:50:d4:6d:e4:20:e3:74: d3:76:ab:2e:9c:a4:7c:57:b6:3c:87:18:fc:7b:fb: 66:d2:cb:ca:f1:85:ec:6e:02:92:68:45:72:11:e4: 57:eb:65:59:92:c0:1f:2f:39:36:65:1d:6c:79:e6: 45:75:6d:7f:b9:d6:65:c8:52:67:0b:a0:d6:90:0c: c5:4b:92:d5:5e:ee:0c:d2:62:e5:24:7d:ac:2a:8e: 0f:68:f5:a5:2e:3b:5b:7d:c5:5e:92:a4:2c:e7:15: 6b:87:e3:d5:c1:15:7e:6f:17:f8:e0:f2:0c:0c:cf: 74:48:b0:a7:27:02:53:ce:71:7e:d8:b0:97:68:60: 6f:60:60:bc:51:1e:4e:41:b4:96:7d:ea:8b:e4:a1: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:E2:A8:E9:E6:7D:F1:67:F4:76:51:EC:4B:E8:81:DC:30:B1:E0 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ad:c1:db:16:de:ab:3d:42:c4:75:44:c2:77:49:70:f7:fc: 9f:0c:bd:45:d9:e1:fd:ca:ae:14:2c:42:a7:4f:28:78:49:c2: 4b:2b:30:2c:3a:ee:de:8e:8a:42:47:c0:ed:ea:26:53:9b:8d: ef:10:d0:5e:86:f6:00:31:ce:e1:95:ae:f0:db:67:2a:6c:3e: 1e:e6:e5:09:db:25:79:43:2a:d0:bb:62:18:ca:6e:ca:14:36: d6:d8:4f:f1:5f:14:1f:22:f5:6d:22:a5:39:89:51:73:aa:b7: b8:db:44:f2:97:67:d3:2e:0a:43:89:0a:de:4d:93:68:5d:24: 6f:4b:fd:b5:72:13:bb:8f:3f:65:23:26:5e:d2:97:aa:7b:c8: 9a:c3:09:e6:34:5b:ac:b2:28:6c:f1:19:4c:0d:36:14:1b:40: fb:a7:9f:3f:f2:91:9e:02:e7:94:a3:8e:5e:7b:9a:63:e4:b3: ed:7c:d7:8e:36:30:82:d3:93:8f:f7:ff:3a:29:03:63:e7:f6: de:c4:d6:0f:41:d4:5a:ba:45:4a:18:25:19:2e:40:ac:de:7f: ea:01:d4:21:f8:65:df:b0:79:d2:a7:fb:94:9d:38:43:5e:5a: 74:a9:96:9e:1b:fb:16:dd:b1:1a:ff:c5:59:1b:2f:46:f2:1b: 48:75:d5:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAhaCZw0ZN7BpfK/rHeEwQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODIwMjMwMTA4WhcNMjYwODIxMjMwMTA4WjAzMTEwLwYDVQQD EygzOTc2ZTJhOGU5ZTY3ZGYxNjdmNDc2NTFlYzRiZTg4MWRjMzBiMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqShW4FWZdd/r89r6xzKVPLJxLHpp oX3Emv9RY5Iweck4dV+MjudFM464RoUoTxupUrXoGxFNF3xDXnU6G2qEEaOKOOyM +kSHcnhaPhGF33VErSFnWma+HG0tXT5UH3rY431rqEgiO+LMbcKhtwI18FDUbeQg 43TTdqsunKR8V7Y8hxj8e/tm0svK8YXsbgKSaEVyEeRX62VZksAfLzk2ZR1seeZF dW1/udZlyFJnC6DWkAzFS5LVXu4M0mLlJH2sKo4PaPWlLjtbfcVekqQs5xVrh+PV wRV+bxf44PIMDM90SLCnJwJTznF+2LCXaGBvYGC8UR5OQbSWfeqL5KFGNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl24qjp5n3xZ/R2UexL6IHcMLHgMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPq3B2xbe qz1CxHVEwndJcPf8nwy9Rdnh/cquFCxCp08oeEnCSyswLDru3o6KQkfA7eomU5uN 7xDQXob2ADHO4ZWu8NtnKmw+HublCdsleUMq0LtiGMpuyhQ21thP8V8UHyL1bSKl OYlRc6q3uNtE8pdn0y4KQ4kK3k2TaF0kb0v9tXITu48/ZSMmXtKXqnvImsMJ5jRb rLIobPEZTA02FBtA+6efP/KRngLnlKOOXnuaY+Sz7XzXjjYwgtOTj/f/OikDY+f2 3sTWD0HUWrpFShglGS5ArN5/6gHUIfhl37B50qf7lJ04Q15adKmWnhv7Ft2xGv/F WRsvRvIbSHXV/g== -----END CERTIFICATE-----Generated at Fri Aug 21 04:17:13 2026 by rpki-client