$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: v4+yTUyE+MINehfKAVwSYzh+mB2U2n8AF17P77PIhV0= Subject key identifier: D7:1B:44:E8:39:42:A0:04:D8:EB:08:09:CB:50:9D:96:3C:72:34:0E Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F25EC9E526E3FACE82D105AC9F74756C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 13F3 Signing time: Fri 03 Jul 2026 03:01:31 +0000 Manifest this update: Fri 03 Jul 2026 03:01:31 +0000 Manifest next update: Sat 04 Jul 2026 03:01:31 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: eoSBVy5SENbLHhk/5BUhKkKoNg+++jBJDVJINPKXFds=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Jul 2026 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:25:ec:9e:52:6e:3f:ac:e8:2d:10:5a:c9:f7:47:56:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 3 03:01:31 2026 GMT Not After : Jul 4 03:01:31 2026 GMT Subject: CN=d71b44e83942a004d8eb0809cb509d963c72340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:74:a9:11:ff:c2:8c:a8:2b:ec:36:77:e3: b2:85:44:14:21:d9:4a:22:ca:8e:69:ed:46:7f:34: 6f:1c:e5:92:51:d7:f7:5f:02:a2:a4:1a:a1:60:57: ee:36:cb:48:92:0d:fc:07:39:80:dd:b5:58:41:8a: 63:06:f3:d0:b1:5b:f2:b7:0d:77:cc:77:5d:14:05: 02:b3:ef:39:e0:d4:cc:80:eb:36:19:a3:2a:97:10: 74:11:4e:ed:8e:ba:82:44:1e:ad:e4:1a:31:51:c9: 34:a3:67:9a:48:c4:f7:07:ba:2a:3d:97:7c:8e:da: 0f:d4:93:2a:e8:9d:a7:b8:91:87:0f:f4:c6:81:4d: f9:18:8f:54:de:3c:5c:e1:45:68:5a:b7:65:14:1d: 35:07:4d:57:91:27:c9:e7:64:4b:e7:99:bb:25:51: e6:97:96:ec:ff:43:7f:e2:e5:08:a8:3f:9b:cc:22: c4:35:4a:d3:36:9b:55:b1:4d:d5:ec:b5:ad:14:7c: f5:05:32:fe:28:c9:fc:32:f3:3e:27:87:f5:f6:da: 5b:cb:3f:d0:76:8b:99:de:bb:4d:6b:f6:32:3a:b5: 71:4a:9a:d9:30:06:ed:34:2e:a7:81:42:d0:4c:da: de:01:52:72:8c:75:cf:b7:5b:67:7d:0c:3d:17:0e: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1B:44:E8:39:42:A0:04:D8:EB:08:09:CB:50:9D:96:3C:72:34:0E X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9b:4f:0b:67:4e:2b:f1:24:b8:83:17:be:f6:b4:b2:a8:fd: 6b:b9:59:c3:68:02:67:39:d0:93:be:32:af:e2:0e:71:8d:bb: a8:20:a1:a9:ba:86:67:90:55:a7:23:09:2e:74:e7:95:95:70: a5:73:f8:97:d1:7e:df:5f:f3:db:08:81:d6:4f:80:71:67:89: b3:c7:1a:85:e1:8d:e4:ed:80:11:02:bd:ce:43:db:3e:20:2e: 32:56:1c:ce:67:ba:16:08:85:48:2f:d6:c9:c7:dd:4a:38:a9: 19:bd:f1:42:96:36:a0:b2:22:45:01:bb:84:39:c9:4e:4f:54: 95:4a:33:9c:3d:39:7a:be:fd:fb:50:66:e0:fc:78:dc:e6:92: b0:fc:4d:0e:2d:7b:4c:ef:85:48:0b:6c:f0:e1:aa:16:67:f9: 60:1d:b6:0d:27:83:0a:ef:ac:5c:60:9d:77:ea:1a:91:d4:51: 93:8f:a9:8f:c4:81:b7:d7:e8:69:1e:22:e1:9c:ee:dd:51:be: d8:13:1c:56:f6:2f:ab:b2:01:90:be:8c:4d:33:95:00:7f:ca: ff:f9:8b:d1:86:24:42:01:39:43:da:a4:f0:a7:1a:e5:77:c8: 88:75:16:8a:b1:ab:d2:43:ac:f3:52:01:d4:0c:8a:1e:3f:e4: bd:fc:91:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8l7J5Sbj+s6C0QWsn3R1bGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzAzMDMwMTMxWhcNMjYwNzA0MDMwMTMxWjAzMTEwLwYDVQQD EyhkNzFiNDRlODM5NDJhMDA0ZDhlYjA4MDljYjUwOWQ5NjNjNzIzNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QR0qRH/woyoK+w2d+OyhUQUIdlK IsqOae1GfzRvHOWSUdf3XwKipBqhYFfuNstIkg38BzmA3bVYQYpjBvPQsVvytw13 zHddFAUCs+854NTMgOs2GaMqlxB0EU7tjrqCRB6t5BoxUck0o2eaSMT3B7oqPZd8 jtoP1JMq6J2nuJGHD/TGgU35GI9U3jxc4UVoWrdlFB01B01XkSfJ52RL55m7JVHm l5bs/0N/4uUIqD+bzCLENUrTNptVsU3V7LWtFHz1BTL+KMn8MvM+J4f19tpbyz/Q douZ3rtNa/YyOrVxSprZMAbtNC6ngULQTNreAVJyjHXPt1tnfQw9Fw6vMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcbROg5QqAE2OsICctQnZY8cjQOMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIptPC2dO K/EkuIMXvva0sqj9a7lZw2gCZznQk74yr+IOcY27qCChqbqGZ5BVpyMJLnTnlZVw pXP4l9F+31/z2wiB1k+AcWeJs8caheGN5O2AEQK9zkPbPiAuMlYczme6FgiFSC/W ycfdSjipGb3xQpY2oLIiRQG7hDnJTk9UlUoznD05er79+1Bm4Px43OaSsPxNDi17 TO+FSAts8OGqFmf5YB22DSeDCu+sXGCdd+oakdRRk4+pj8SBt9foaR4i4Zzu3VG+ 2BMcVvYvq7IBkL6MTTOVAH/K//mL0YYkQgE5Q9qk8Kca5XfIiHUWirGr0kOs81IB 1AyKHj/kvfyRnw== -----END CERTIFICATE-----Generated at Fri Jul 3 09:24:47 2026 by rpki-client