$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Z8NmLZy8mocCWn/2zyEDs4b+oPIgYUeNV4FYUTOBBR0= Subject key identifier: 2A:E7:8D:9F:1C:B9:D1:96:18:E5:EB:A8:40:3C:DE:1D:93:14:55:F0 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A01B9D1BACB4AB6DB67BA45E294C40942C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1474 Signing time: Wed 19 Aug 2026 20:01:16 +0000 Manifest this update: Wed 19 Aug 2026 20:01:16 +0000 Manifest next update: Thu 20 Aug 2026 20:01:16 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: svl0pCBk85twRMhR2oz3WFzpMjIU5O1nghgMbPCREjE=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Aug 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:1b:9d:1b:ac:b4:ab:6d:b6:7b:a4:5e:29:4c:40:94:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 19 20:01:16 2026 GMT Not After : Aug 20 20:01:16 2026 GMT Subject: CN=2ae78d9f1cb9d19618e5eba8403cde1d931455f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:ae:a0:8d:d8:43:04:31:1b:4f:2d:cc:da: ed:2c:42:b5:fe:86:0d:72:3e:50:15:31:35:e7:3d: 3c:71:d0:ac:e9:0e:cf:49:e4:68:7e:20:25:38:6a: 94:42:09:53:4c:f5:49:59:2c:2f:c3:02:62:bd:3a: bc:1f:5a:21:5a:98:05:61:7d:9f:69:fc:a2:60:75: 9d:e9:3a:db:ef:48:cb:fd:2f:b4:cd:3e:68:13:6b: 1e:99:6d:77:2b:44:eb:78:0b:ec:04:97:8f:d7:e3: e9:d5:cf:8d:e1:11:15:fa:e2:ea:89:2f:f5:f7:ab: f9:f2:7d:17:96:1c:d8:d6:5b:7d:78:61:4c:ea:63: 9f:71:f7:fb:7f:05:a5:9e:a8:62:72:da:49:57:02: 41:ce:b6:98:45:0c:4f:9f:6d:fa:1b:55:29:ff:79: 9f:b0:6f:6f:20:64:76:ed:19:11:8f:77:f2:ce:7d: 33:09:a9:b6:19:91:77:dd:e1:ee:8b:ce:7a:2d:dc: 48:c4:14:fc:4d:ce:35:b9:1a:42:97:77:ea:64:f2: 81:98:f2:7c:e8:80:18:22:ed:9d:fd:a0:a1:f3:d4: 9e:be:13:e8:09:fd:c6:85:ef:dc:61:b5:80:a9:fd: eb:15:67:f1:39:cf:e0:6a:32:52:aa:3a:8e:36:b1: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:8D:9F:1C:B9:D1:96:18:E5:EB:A8:40:3C:DE:1D:93:14:55:F0 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:c4:39:81:e3:9e:a2:09:15:c4:3e:3c:54:92:bd:84:7f: fe:10:3b:c4:c8:0e:4f:bd:34:69:98:5a:b5:f3:2e:87:8c:3f: a3:81:f2:86:f5:85:22:99:22:4c:58:1a:28:98:78:f4:5d:1a: fb:38:18:0e:10:70:4a:b1:97:fc:f0:89:3f:6e:61:3d:cd:37: c0:ec:04:bb:62:e6:24:15:2e:d1:af:a6:d4:0c:a8:6d:56:67: 9a:49:e3:33:05:0c:a6:80:43:59:ac:22:f7:77:c7:87:a2:ee: 4e:e3:5b:af:88:9e:ad:90:e0:09:a3:7e:91:38:74:26:e9:c6: 36:15:ad:bd:00:39:26:1c:c7:93:69:be:22:70:94:77:e4:29: 0e:14:88:aa:04:28:35:5e:75:a3:8c:06:67:55:17:9b:c3:8e: ba:b5:71:51:20:bb:90:73:cc:57:79:89:5f:bf:6d:0f:2b:a6: 56:7d:5c:d8:a1:14:d4:d5:af:38:2f:14:55:0e:56:c4:9e:c4: 53:37:9d:1d:d8:12:bf:dc:a5:a6:bd:f4:29:1f:0c:7c:39:2f: 40:a0:52:2a:eb:96:02:07:bd:b4:87:ae:13:86:4d:6b:ab:33: 84:50:38:5d:d9:09:49:db:77:f3:95:24:2c:12:30:c9:ad:ad: 5b:5e:55:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAbnRustKtttnukXilMQJQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODE5MjAwMTE2WhcNMjYwODIwMjAwMTE2WjAzMTEwLwYDVQQD EygyYWU3OGQ5ZjFjYjlkMTk2MThlNWViYTg0MDNjZGUxZDkzMTQ1NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRuuoI3YQwQxG08tzNrtLEK1/oYN cj5QFTE15z08cdCs6Q7PSeRofiAlOGqUQglTTPVJWSwvwwJivTq8H1ohWpgFYX2f afyiYHWd6Trb70jL/S+0zT5oE2semW13K0TreAvsBJeP1+Pp1c+N4REV+uLqiS/1 96v58n0XlhzY1lt9eGFM6mOfcff7fwWlnqhictpJVwJBzraYRQxPn236G1Up/3mf sG9vIGR27RkRj3fyzn0zCam2GZF33eHui856LdxIxBT8Tc41uRpCl3fqZPKBmPJ8 6IAYIu2d/aCh89SevhPoCf3Ghe/cYbWAqf3rFWfxOc/gajJSqjqONrEOcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrnjZ8cudGWGOXrqEA83h2TFFXwMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZHEOYHj nqIJFcQ+PFSSvYR//hA7xMgOT700aZhatfMuh4w/o4HyhvWFIpkiTFgaKJh49F0a +zgYDhBwSrGX/PCJP25hPc03wOwEu2LmJBUu0a+m1AyobVZnmknjMwUMpoBDWawi 93fHh6LuTuNbr4ierZDgCaN+kTh0JunGNhWtvQA5JhzHk2m+InCUd+QpDhSIqgQo NV51o4wGZ1UXm8OOurVxUSC7kHPMV3mJX79tDyumVn1c2KEU1NWvOC8UVQ5WxJ7E UzedHdgSv9ylpr30KR8MfDkvQKBSKuuWAge9tIeuE4ZNa6szhFA4XdkJSdt385Uk LBIwya2tW15VhA== -----END CERTIFICATE-----Generated at Thu Aug 20 02:32:18 2026 by rpki-client