$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: E1UIIvq5PvUc18nbDvhxXXF4SZi4OEwIjVm733RORBg= Subject key identifier: 8D:B8:31:49:85:BD:65:7A:E6:8D:C3:95:30:DB:51:2A:3C:9C:35:0F Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A03E6055FE9BED1523A2ACECE7657893A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1486 Signing time: Wed 26 Aug 2026 14:01:35 +0000 Manifest this update: Wed 26 Aug 2026 14:01:35 +0000 Manifest next update: Thu 27 Aug 2026 14:01:35 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: palHviIfy5SRTfVhYvDCLuVEbz9XbYMcQu6/9KKF2g4=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3e:60:55:fe:9b:ed:15:23:a2:ac:ec:e7:65:78:93:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 26 14:01:35 2026 GMT Not After : Aug 27 14:01:35 2026 GMT Subject: CN=8db8314985bd657ae68dc39530db512a3c9c350f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:ef:13:78:ed:86:d7:56:d8:0e:14:6e:dd: f3:6b:2b:ad:c5:5a:b2:d5:ec:57:e3:b8:3d:63:3d: 71:d1:e8:ac:8b:da:1e:07:6d:86:3f:60:c6:5e:3e: 13:d6:01:82:e1:0a:9c:68:e1:c9:15:45:81:d0:a2: 43:ac:6e:2d:51:20:1c:2a:94:e5:18:9e:2e:1e:a7: d8:e0:db:a4:42:b5:52:09:5f:6a:a0:9f:32:82:ea: e0:66:62:56:6e:00:e9:c8:c3:ae:20:c0:e9:d6:c2: 98:4a:1e:66:7a:32:b6:fe:52:21:d3:a5:ac:4f:6a: 5c:69:49:2b:f1:06:6f:f2:cc:5e:ec:45:1d:7e:c5: e1:bb:20:0b:30:d6:94:7c:73:93:d1:e3:05:11:c6: 59:d5:0c:4f:82:e0:ca:56:c1:23:5f:58:0a:b2:f4: d3:c8:76:f2:d8:c1:2f:73:50:1f:b9:34:b1:e6:b7: e5:8e:3d:db:95:95:80:1f:21:ab:e6:98:92:ee:66: 4f:85:5e:8b:46:67:29:2f:81:1b:a4:b7:e5:35:ee: 61:21:16:37:f2:8e:42:3f:9b:84:40:f9:30:bb:46: 17:e5:70:25:fe:5a:38:00:c8:92:71:6b:53:b2:e4: 8d:95:0d:ea:be:dc:3e:dc:1d:a3:78:46:2b:a9:35: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B8:31:49:85:BD:65:7A:E6:8D:C3:95:30:DB:51:2A:3C:9C:35:0F X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f2:2a:27:9b:5a:3e:99:a0:ff:76:73:42:d2:48:e4:7a:ba: ab:7f:8f:c2:71:bc:cf:86:9a:ea:46:32:25:25:b3:77:c0:21: 72:3a:a7:a7:e4:4e:37:5f:2a:fb:95:7a:06:e8:10:d4:28:97: b1:e6:ff:bd:a9:be:00:3c:73:30:bf:8b:6f:20:58:b8:f0:6b: d4:f7:a1:fd:7c:63:8c:9a:18:bb:f8:7c:82:92:06:b8:75:e7: 6d:66:ee:16:21:7d:3e:de:46:ff:2f:58:a1:e5:50:af:eb:b9: c4:6d:0f:88:8a:10:38:bc:3e:60:fa:44:88:15:09:f6:a4:d7: fd:0c:13:06:45:61:32:bb:b6:f3:8e:8a:35:55:1e:46:58:b9: d1:93:72:fd:7d:c4:62:a4:07:2c:8b:fb:0b:1c:be:c6:fa:7a: 8d:5b:41:d5:d2:39:88:bf:de:17:a6:10:1b:76:ea:bb:2b:e0: fd:dc:a4:de:ab:47:6d:48:81:3e:f4:69:b8:38:aa:d7:5d:c8: 6b:79:30:04:b6:d1:ac:fe:48:af:68:5e:9a:1d:94:38:c1:9d: 7e:de:6f:39:a9:1d:75:25:39:27:23:3d:ed:08:e1:01:72:39: aa:97:09:16:25:6b:53:9c:0b:d2:77:03:38:49:72:66:9d:8e: 90:f7:5f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA+YFX+m+0VI6Ks7OdleJOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODI2MTQwMTM1WhcNMjYwODI3MTQwMTM1WjAzMTEwLwYDVQQD Eyg4ZGI4MzE0OTg1YmQ2NTdhZTY4ZGMzOTUzMGRiNTEyYTNjOWMzNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIzvE3jthtdW2A4Ubt3zayutxVqy 1exX47g9Yz1x0eisi9oeB22GP2DGXj4T1gGC4QqcaOHJFUWB0KJDrG4tUSAcKpTl GJ4uHqfY4NukQrVSCV9qoJ8ygurgZmJWbgDpyMOuIMDp1sKYSh5mejK2/lIh06Ws T2pcaUkr8QZv8sxe7EUdfsXhuyALMNaUfHOT0eMFEcZZ1QxPguDKVsEjX1gKsvTT yHby2MEvc1AfuTSx5rfljj3blZWAHyGr5piS7mZPhV6LRmcpL4EbpLflNe5hIRY3 8o5CP5uEQPkwu0YX5XAl/lo4AMiScWtTsuSNlQ3qvtw+3B2jeEYrqTX8DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI24MUmFvWV65o3DlTDbUSo8nDUPMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvIqJ5ta Ppmg/3ZzQtJI5Hq6q3+PwnG8z4aa6kYyJSWzd8Ahcjqnp+RON18q+5V6BugQ1CiX seb/vam+ADxzML+LbyBYuPBr1Peh/XxjjJoYu/h8gpIGuHXnbWbuFiF9Pt5G/y9Y oeVQr+u5xG0PiIoQOLw+YPpEiBUJ9qTX/QwTBkVhMru2846KNVUeRli50ZNy/X3E YqQHLIv7Cxy+xvp6jVtB1dI5iL/eF6YQG3bquyvg/dyk3qtHbUiBPvRpuDiq113I a3kwBLbRrP5Ir2hemh2UOMGdft5vOakddSU5JyM97QjhAXI5qpcJFiVrU5wL0ncD OElyZp2OkPdf/A== -----END CERTIFICATE-----Generated at Thu Aug 27 00:08:31 2026 by rpki-client