$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: QceUThWi+cY7UwJ3n0pKoJHAdiEbJg8x+ATBRmhcoSM= Subject key identifier: DA:4F:65:19:5F:8A:F0:6A:20:70:EC:EA:3D:EE:57:7D:00:95:74:7C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A1DEA75AB15182FB2338C34A222EB89EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1562 Signing time: Sun 15 Nov 2026 10:01:12 +0000 Manifest this update: Sun 15 Nov 2026 10:01:12 +0000 Manifest next update: Mon 16 Nov 2026 10:01:12 +0000 Files and hashes: 1: 30X_KW6YLs744xLoa5wGwmIpQfE.roa (hash: a3qfn+8/hDvXfqz7+ugtWciS2tAe8+s5ZtIIMLZ+zVI=) 2: 3uI5lQRkJpip0g2Yf5nrOxnpcps.roa (hash: Jrv7cJG1MMoAzxus2BXaB2YNBDsOS6rV68Paas64eu4=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OM-ZUuhtFfEbzEKe1saj5HWlSS8.roa (hash: dCqQ/qpl5rIhH4UzeW/Kln8+INSyixdogETHSosIE5g=) 7: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 8: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 9: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 10: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 16: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: IYI9XWX/MLOvtnBzwfLK1DyePnIghSVaaNA++DR+VV4=) 17: hlqVsa8g3LBYYCgakZsvR_HSrMI.roa (hash: 0Q3BsaAbv0dPxaHiDBoT0UxeEcJjYgRp/S4n3pvDhrc=) 18: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:a7:5a:b1:51:82:fb:23:38:c3:4a:22:2e:b8:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Nov 15 10:01:12 2026 GMT Not After : Nov 16 10:01:12 2026 GMT Subject: CN=da4f65195f8af06a2070ecea3dee577d0095747c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:e4:b2:5c:21:ff:85:d5:fa:5d:96:cc:dc: f4:ca:16:ff:2d:df:d2:80:42:a7:5e:eb:dd:8b:ce: fd:1b:85:ad:f3:80:0b:9f:87:10:7f:35:7a:fa:d0: 29:32:e8:a8:e3:ee:8d:33:6e:cd:43:de:4c:34:06: e8:51:0f:ef:3b:f8:7d:49:5e:bf:c9:c7:34:d6:1f: 37:c1:36:50:1f:b0:f4:20:0c:c9:7d:18:3a:26:14: dc:ff:07:71:6a:b3:8b:79:98:90:fe:37:d7:6b:47: 36:09:ab:24:bc:2d:a9:96:4e:f3:d8:3d:ec:63:bd: 66:4d:6c:b7:40:55:28:4c:52:f8:34:13:0a:7c:57: 9e:46:3d:83:bf:5e:c6:46:cd:1d:95:68:bb:ad:d8: 71:12:22:4b:7e:4e:ba:5c:b0:04:c2:6b:52:e3:3c: 70:fa:a6:56:a7:46:9c:8b:38:14:53:b8:d0:50:33: 73:cb:55:f7:6f:28:7e:7b:c9:5d:b4:a2:75:5c:8d: 02:e3:f9:12:07:08:83:99:9d:95:24:aa:d7:d2:ff: 97:b0:a3:48:15:96:d6:33:a7:2d:a4:b0:05:56:73: d6:8f:45:0d:9d:fc:a1:55:64:c5:fe:76:79:5a:6c: a6:97:12:ca:47:31:71:1f:e4:22:0d:2a:0e:b8:4d: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4F:65:19:5F:8A:F0:6A:20:70:EC:EA:3D:EE:57:7D:00:95:74:7C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:09:61:32:29:c9:ca:9e:86:db:81:30:0f:00:d9:fa:0e:dd: 36:0e:b6:3c:9e:ea:da:9d:47:a2:eb:02:8d:58:57:e5:e3:b4: 0f:81:75:7a:8d:54:fc:43:72:22:c6:cd:73:99:8f:13:f7:a6: 20:e8:c0:70:04:84:59:68:cc:a0:5d:84:1b:84:8f:19:95:22: ee:c7:8d:d6:f1:3a:26:e4:7f:ff:4c:e0:d2:22:f1:3a:a9:a3: db:4e:cd:a5:0d:f3:62:15:4a:77:17:50:aa:84:12:70:48:df: 49:45:b7:0c:1e:36:b2:d2:a3:47:fc:7f:ce:0d:20:43:4f:0e: 6e:cd:ef:a5:5c:6e:49:1c:fb:be:a3:07:f5:ba:d4:89:4c:ae: 86:c6:5c:4e:ae:24:01:58:01:70:e9:aa:1f:71:e7:1a:ee:78: 47:76:ff:1b:ba:5e:17:ef:5c:c4:8a:71:79:45:85:81:ac:d3: e0:1c:24:56:d1:f7:cb:27:1b:52:9b:48:6f:26:d0:df:ca:75: b8:20:7a:11:3a:a3:10:f0:23:44:99:aa:db:64:d7:83:d2:c5: f7:69:ce:31:3c:04:53:8b:7b:c2:69:bd:3a:3b:bd:26:16:4c: 07:48:ec:82:cc:2c:22:a0:f6:39:b5:fc:b6:28:81:2a:4e:fb: ce:8b:75:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHep1qxUYL7IzjDSiIuuJ7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMTE1MTAwMTEyWhcNMjYxMTE2MTAwMTEyWjAzMTEwLwYDVQQD EyhkYTRmNjUxOTVmOGFmMDZhMjA3MGVjZWEzZGVlNTc3ZDAwOTU3NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Lkslwh/4XV+l2WzNz0yhb/Ld/S gEKnXuvdi879G4Wt84ALn4cQfzV6+tApMuio4+6NM27NQ95MNAboUQ/vO/h9SV6/ ycc01h83wTZQH7D0IAzJfRg6JhTc/wdxarOLeZiQ/jfXa0c2CaskvC2plk7z2D3s Y71mTWy3QFUoTFL4NBMKfFeeRj2Dv17GRs0dlWi7rdhxEiJLfk66XLAEwmtS4zxw +qZWp0acizgUU7jQUDNzy1X3byh+e8ldtKJ1XI0C4/kSBwiDmZ2VJKrX0v+XsKNI FZbWM6ctpLAFVnPWj0UNnfyhVWTF/nZ5WmymlxLKRzFxH+QiDSoOuE0RiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpPZRlfivBqIHDs6j3uV30AlXR8MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAlhMinJ yp6G24EwDwDZ+g7dNg62PJ7q2p1HousCjVhX5eO0D4F1eo1U/ENyIsbNc5mPE/em IOjAcASEWWjMoF2EG4SPGZUi7seN1vE6JuR//0zg0iLxOqmj207NpQ3zYhVKdxdQ qoQScEjfSUW3DB42stKjR/x/zg0gQ08Obs3vpVxuSRz7vqMH9brUiUyuhsZcTq4k AVgBcOmqH3HnGu54R3b/G7peF+9cxIpxeUWFgazT4BwkVtH3yycbUptIbybQ38p1 uCB6ETqjEPAjRJmq22TXg9LF92nOMTwEU4t7wmm9Oju9JhZMB0jsgswsIqD2ObX8 tiiBKk77zot1AA== -----END CERTIFICATE-----Generated at Sun Nov 15 20:18:06 2026 by rpki-client