$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: UqjMRNEgltifmpYK3otsgfhd2Aak/B1OkaDFMDGN8Bk= Subject key identifier: C3:D7:2C:31:CB:BB:41:85:36:43:14:23:30:68:A2:B0:92:A1:F5:E0 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F95EE68B982F6B0779FC1A71148F4C5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 142E Signing time: Fri 24 Jul 2026 21:00:57 +0000 Manifest this update: Fri 24 Jul 2026 21:00:57 +0000 Manifest next update: Sat 25 Jul 2026 21:00:57 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: kfKsG8ZVuhchl7J1/Lt5ufEvyKmevMf/tutFbKlqTdI=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:95:ee:68:b9:82:f6:b0:77:9f:c1:a7:11:48:f4:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 24 21:00:57 2026 GMT Not After : Jul 25 21:00:57 2026 GMT Subject: CN=c3d72c31cbbb4185364314233068a2b092a1f5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:7b:cd:62:44:8b:83:fa:0f:b8:6e:17:d2: f1:48:a7:12:c1:6b:ad:1f:04:a6:9b:c3:f1:35:e2: 75:22:ce:3a:26:cc:a8:92:ce:10:9e:5e:b1:69:31: 54:ad:c3:ae:bd:6f:7e:fe:e5:58:fd:4b:33:b7:00: 93:84:e9:d4:a1:1d:87:d8:4a:e3:0a:25:f0:b8:dd: e1:38:dc:39:a0:f1:e8:38:b4:bc:2a:86:1d:12:bf: d7:a5:c3:6d:9d:ea:55:2e:2d:23:c5:4d:b2:7f:a4: 61:c1:1b:f5:60:c2:e1:4e:da:71:2e:bb:4a:7a:0f: e5:1f:9a:d0:7e:c5:37:83:6b:e5:b7:5d:15:c3:85: a5:75:12:26:f4:c1:25:46:8a:7c:04:b3:0a:18:6a: d0:3a:7b:40:aa:93:dc:3d:2c:87:69:60:08:27:6c: a4:a8:91:55:b7:3a:a9:71:39:f6:80:6e:c2:77:1a: 46:14:b7:f2:c5:49:a2:b8:7b:31:2c:1d:14:ea:b9: 35:60:c0:20:2c:ea:71:bd:65:01:95:1e:b2:b5:68: 74:2f:d5:e3:8c:35:35:32:76:b5:7d:17:cd:26:8f: 0f:fe:2f:e3:dc:aa:3f:08:87:90:5a:36:0c:54:51: ba:04:78:38:3c:e4:28:35:89:d2:be:e9:bf:90:54: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D7:2C:31:CB:BB:41:85:36:43:14:23:30:68:A2:B0:92:A1:F5:E0 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5f:7a:70:f7:d6:0b:c7:a2:de:21:b8:ca:fa:df:b8:fc:eb: 0b:ff:b9:3f:e3:ef:f6:b8:86:52:9d:32:0f:2f:87:ec:24:01: 93:fb:e1:41:50:93:8b:40:b6:e7:d0:09:f1:df:1e:35:38:d0: 4d:25:f0:ad:3d:a9:5c:9d:36:17:27:a6:87:0c:1c:25:e9:73: 68:d7:3a:92:be:4f:a1:02:82:1f:4f:43:cd:e4:47:78:a2:a4: e3:8b:dd:a7:b7:92:28:f9:8c:28:e2:4b:31:1a:39:cc:ca:0c: 3d:f9:79:0c:9f:41:d7:54:fc:d8:4c:83:8e:93:fc:11:09:34: 2a:99:c7:3b:6c:69:11:a4:74:9a:7a:fd:29:83:7c:a9:08:6b: 33:1b:5c:4d:57:45:1d:8f:1f:ba:a8:db:bf:58:3a:d2:24:aa: 28:8d:49:b9:a7:39:40:71:72:d8:2d:44:39:51:6f:54:3c:03: ab:e5:03:64:3b:5a:0b:f9:b2:2a:ae:82:92:7b:42:c9:38:6c: ac:c2:95:8f:17:5c:ef:54:07:66:c0:4f:2f:5e:36:f9:5e:55: e0:5b:25:e2:a8:f6:10:02:f6:17:04:68:75:9a:ea:99:72:e5: 3a:12:80:50:88:01:8f:0f:2e:0b:ef:c8:8b:50:9a:ec:8a:ca: 4a:35:f7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+V7mi5gvawd5/BpxFI9MXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzI0MjEwMDU3WhcNMjYwNzI1MjEwMDU3WjAzMTEwLwYDVQQD EyhjM2Q3MmMzMWNiYmI0MTg1MzY0MzE0MjMzMDY4YTJiMDkyYTFmNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpx7zWJEi4P6D7huF9LxSKcSwWut HwSmm8PxNeJ1Is46Jsyoks4Qnl6xaTFUrcOuvW9+/uVY/UsztwCThOnUoR2H2Erj CiXwuN3hONw5oPHoOLS8KoYdEr/XpcNtnepVLi0jxU2yf6RhwRv1YMLhTtpxLrtK eg/lH5rQfsU3g2vlt10Vw4WldRIm9MElRop8BLMKGGrQOntAqpPcPSyHaWAIJ2yk qJFVtzqpcTn2gG7CdxpGFLfyxUmiuHsxLB0U6rk1YMAgLOpxvWUBlR6ytWh0L9Xj jDU1Mna1fRfNJo8P/i/j3Ko/CIeQWjYMVFG6BHg4POQoNYnSvum/kFS6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPXLDHLu0GFNkMUIzBoorCSofXgMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV96cPfW C8ei3iG4yvrfuPzrC/+5P+Pv9riGUp0yDy+H7CQBk/vhQVCTi0C259AJ8d8eNTjQ TSXwrT2pXJ02FyemhwwcJelzaNc6kr5PoQKCH09DzeRHeKKk44vdp7eSKPmMKOJL MRo5zMoMPfl5DJ9B11T82EyDjpP8EQk0KpnHO2xpEaR0mnr9KYN8qQhrMxtcTVdF HY8fuqjbv1g60iSqKI1Juac5QHFy2C1EOVFvVDwDq+UDZDtaC/myKq6CkntCyThs rMKVjxdc71QHZsBPL142+V5V4Fsl4qj2EAL2FwRodZrqmXLlOhKAUIgBjw8uC+/I i1Ca7IrKSjX3dQ== -----END CERTIFICATE-----Generated at Sat Jul 25 00:48:10 2026 by rpki-client