$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: auQRbliPVJN5Q0aLvCitxm9TZ/TXrH3vTUn9kjIUqq8= Subject key identifier: 11:41:DF:46:90:84:E7:62:35:13:14:75:03:15:36:C7:32:BF:53:DA Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019E64CDC33709753F9388D609526ECB4119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 138F Signing time: Tue 26 May 2026 15:01:06 +0000 Manifest this update: Tue 26 May 2026 15:01:06 +0000 Manifest next update: Wed 27 May 2026 15:01:06 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: PtQvDXjaJ+teEgT4wAPPVwPfo473bOhuSlLyeM10nVw=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 27 May 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:64:cd:c3:37:09:75:3f:93:88:d6:09:52:6e:cb:41:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 26 15:01:06 2026 GMT Not After : May 27 15:01:06 2026 GMT Subject: CN=1141df469084e76235131475031536c732bf53da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9f:e6:0c:04:e0:53:b1:0c:18:31:dc:ab:19: 89:33:5f:54:c7:f9:6c:e3:f5:d1:48:44:7d:18:9b: e3:ec:20:b5:b8:3e:78:69:1c:58:eb:0e:28:a4:d4: 85:81:9a:64:69:c6:eb:f8:fa:4e:09:19:b5:c4:a4: a5:35:f2:50:90:9e:8c:b2:9b:62:80:3f:37:74:78: b6:22:79:9d:f1:e5:33:b7:e9:30:2d:23:60:f7:15: ea:2b:90:08:2c:d4:d3:a0:7f:53:59:3b:16:3c:74: b8:91:03:4e:ef:90:84:49:87:9d:75:e0:5c:75:31: b4:0c:a7:a2:80:3f:d1:7b:f7:c7:4e:e8:cc:1f:30: c4:37:2a:e3:c7:16:af:43:24:fd:5d:21:1f:67:4d: bc:ef:9d:23:f9:9c:e1:0e:8e:08:b0:97:e7:cf:b0: 3a:1d:41:85:80:a1:d1:e0:a5:36:b9:34:19:e3:da: 0c:3a:b5:ee:e4:3f:a0:0a:1d:b6:43:94:d7:3f:7d: 9e:f6:78:e4:6c:ea:c9:e6:70:95:3d:cf:1f:81:de: d6:1a:b9:7f:5a:c4:5b:5a:64:07:73:c9:81:b9:ad: 6a:cc:0f:7f:dc:25:f3:c0:e4:21:5e:40:93:ff:50: be:54:b2:c1:4e:bf:72:cc:47:4f:a8:b2:83:91:29: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:41:DF:46:90:84:E7:62:35:13:14:75:03:15:36:C7:32:BF:53:DA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5e:50:a8:f3:9d:9e:69:9e:a4:d2:d9:f0:d0:b9:0c:b4:68: c9:05:2e:ef:30:cd:53:ab:7b:cf:00:30:95:e4:0f:8a:82:a0: e6:68:28:5a:c4:95:e7:f6:f1:fb:5a:65:74:df:37:4a:e8:ed: 8b:c0:f8:ef:c9:ef:7f:48:fb:fc:67:de:b9:23:f0:92:83:b9: c9:72:48:b6:7f:8f:ad:c5:f5:d7:bb:b6:cf:be:4f:04:41:32: ca:b0:7d:6d:b3:79:62:e1:4c:57:d7:47:aa:4a:93:e5:ad:73: d1:45:28:c1:cf:bf:01:1a:cd:79:71:9e:c1:4a:b2:64:02:b5: 59:fb:3f:d8:2a:85:d6:91:a6:ca:13:19:4b:0e:b3:c9:b6:6e: 6f:a2:c7:e4:5c:7b:70:5e:95:59:a3:cd:24:e8:8b:ce:e2:42: 5c:82:99:ea:ad:37:3b:5a:76:d1:1f:5c:b9:a5:4a:3e:15:c4: 96:e4:ee:5e:97:a7:8d:1a:4b:51:35:89:5e:c5:cb:0d:73:fc: e2:fd:10:4e:fa:80:7b:79:c5:bf:e7:ad:80:0f:8e:7c:7c:1c: f0:e0:23:02:2d:a0:73:39:43:7c:ed:80:c1:38:99:2b:6c:88: ed:c5:6a:e3:7c:0b:6b:3c:fe:f7:c8:2e:1d:17:e2:89:12:6b: 59:6a:fa:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5kzcM3CXU/k4jWCVJuy0EZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNTI2MTUwMTA2WhcNMjYwNTI3MTUwMTA2WjAzMTEwLwYDVQQD EygxMTQxZGY0NjkwODRlNzYyMzUxMzE0NzUwMzE1MzZjNzMyYmY1M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J/mDATgU7EMGDHcqxmJM19Ux/ls 4/XRSER9GJvj7CC1uD54aRxY6w4opNSFgZpkacbr+PpOCRm1xKSlNfJQkJ6Mspti gD83dHi2Inmd8eUzt+kwLSNg9xXqK5AILNTToH9TWTsWPHS4kQNO75CESYeddeBc dTG0DKeigD/Re/fHTujMHzDENyrjxxavQyT9XSEfZ028750j+ZzhDo4IsJfnz7A6 HUGFgKHR4KU2uTQZ49oMOrXu5D+gCh22Q5TXP32e9njkbOrJ5nCVPc8fgd7WGrl/ WsRbWmQHc8mBua1qzA9/3CXzwOQhXkCT/1C+VLLBTr9yzEdPqLKDkSmYLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFB30aQhOdiNRMUdQMVNscyv1PaMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl5QqPOd nmmepNLZ8NC5DLRoyQUu7zDNU6t7zwAwleQPioKg5mgoWsSV5/bx+1pldN83Sujt i8D478nvf0j7/GfeuSPwkoO5yXJItn+PrcX117u2z75PBEEyyrB9bbN5YuFMV9dH qkqT5a1z0UUowc+/ARrNeXGewUqyZAK1Wfs/2CqF1pGmyhMZSw6zybZub6LH5Fx7 cF6VWaPNJOiLzuJCXIKZ6q03O1p20R9cuaVKPhXEluTuXpenjRpLUTWJXsXLDXP8 4v0QTvqAe3nFv+etgA+OfHwc8OAjAi2gczlDfO2AwTiZK2yI7cVq43wLazz+98gu HRfiiRJrWWr6nA== -----END CERTIFICATE-----Generated at Wed May 27 02:09:32 2026 by rpki-client