$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: vw/Wiy3aW6d1WOLqwPAYtL0p8V7e3xLvN64QK2JP+Sk= Subject key identifier: 4F:6E:60:51:CE:81:C9:ED:93:AE:D3:2D:B1:EE:71:65:11:A8:8D:3C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A04FC1194B4F6F68F74E12DE8F1D975136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 148F Signing time: Sat 29 Aug 2026 23:00:49 +0000 Manifest this update: Sat 29 Aug 2026 23:00:49 +0000 Manifest next update: Sun 30 Aug 2026 23:00:49 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: O4rgp0nDAlpL10HmOgP22M3GhLWIoYDe7oGGn6STw0Q=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Aug 2026 20:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:4f:c1:19:4b:4f:6f:68:f7:4e:12:de:8f:1d:97:51:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 29 23:00:49 2026 GMT Not After : Aug 30 23:00:49 2026 GMT Subject: CN=4f6e6051ce81c9ed93aed32db1ee716511a88d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:f9:15:5c:d6:de:2b:b8:4e:ca:8f:8e:54: 9c:35:7f:48:35:bf:e7:68:8a:87:7c:da:aa:b6:20: c8:2d:aa:ec:81:fa:61:08:08:a8:a3:1d:45:74:b1: 2d:62:f1:35:32:08:12:68:c4:b3:4d:9e:b0:1f:01: af:b8:24:c8:37:3b:3d:ff:c0:47:f2:df:ff:ca:36: 0c:14:f0:ed:6d:95:01:20:e8:d5:09:9f:ee:a7:1e: 1a:cb:91:7a:fa:a6:dc:38:c3:2d:0f:e9:9b:e4:fd: e7:71:db:20:2a:e8:b2:35:bf:19:24:50:ce:6d:c1: 1d:5b:4b:4f:d0:ee:c1:9e:81:8f:a2:28:0b:74:c0: 21:a7:a8:37:73:08:87:c5:a7:96:f3:d1:23:ab:62: ec:57:45:d5:b5:2a:30:2a:78:c4:96:47:2a:42:3e: 16:55:09:1d:86:6f:26:67:4e:20:8f:c5:53:01:cf: e4:b1:36:3c:09:42:a9:94:df:a3:fe:92:09:a4:2a: b1:9c:5e:05:2f:84:8b:38:5a:f5:22:9e:77:80:dd: f2:32:18:0e:23:d2:8f:05:fc:f2:a7:38:28:1e:55: c3:e3:50:fb:51:b3:86:ab:13:a6:0a:48:22:35:36: fd:9a:10:c5:a2:21:58:54:bd:e3:04:7d:ef:ad:df: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6E:60:51:CE:81:C9:ED:93:AE:D3:2D:B1:EE:71:65:11:A8:8D:3C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:38:95:38:62:a6:bd:90:1d:8a:48:53:7a:44:94:c7:62:5f: a5:15:16:5e:7d:7b:a4:d0:00:c8:df:60:1f:4d:4a:9c:3b:1a: 8e:a8:0d:de:cd:f4:1c:ce:02:24:0e:3f:d9:e5:04:d2:38:93: 18:80:92:7b:7e:a1:1e:c5:f7:f0:b5:9e:cc:c0:3e:70:53:5a: 0b:a3:99:94:68:51:51:ef:32:72:9e:68:ec:00:ce:13:78:91: 34:95:1a:53:a7:75:dc:ae:f6:6b:b9:c9:0e:a0:b6:69:88:cb: a2:dd:66:e9:7d:8f:da:a5:c5:d5:01:44:55:8e:61:42:d1:90: bb:96:a0:23:74:15:da:44:25:45:ef:83:08:1e:10:d0:b1:e4: 82:7a:d3:c9:d6:68:17:c7:d6:bd:8a:ac:2d:7d:b8:22:00:1e: ef:12:38:c2:49:dc:66:be:e4:eb:9c:fb:27:8a:35:13:83:85: b0:ff:a4:c6:7f:e9:4f:60:86:73:1c:37:11:d5:b7:42:36:97: 86:a4:81:93:bc:ba:e3:26:97:cb:48:fb:30:22:d6:56:37:2f: c6:82:54:59:68:48:79:f7:4d:d4:ea:3a:06:1a:5c:5e:6f:be: 9b:49:41:06:3c:7e:f0:05:fc:40:85:4c:b9:9b:eb:6c:aa:7f: 5f:17:2d:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBPwRlLT29o904S3o8dl1E2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODI5MjMwMDQ5WhcNMjYwODMwMjMwMDQ5WjAzMTEwLwYDVQQD Eyg0ZjZlNjA1MWNlODFjOWVkOTNhZWQzMmRiMWVlNzE2NTExYTg4ZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskj5FVzW3iu4TsqPjlScNX9INb/n aIqHfNqqtiDILarsgfphCAioox1FdLEtYvE1MggSaMSzTZ6wHwGvuCTINzs9/8BH 8t//yjYMFPDtbZUBIOjVCZ/upx4ay5F6+qbcOMMtD+mb5P3ncdsgKuiyNb8ZJFDO bcEdW0tP0O7BnoGPoigLdMAhp6g3cwiHxaeW89Ejq2LsV0XVtSowKnjElkcqQj4W VQkdhm8mZ04gj8VTAc/ksTY8CUKplN+j/pIJpCqxnF4FL4SLOFr1Ip53gN3yMhgO I9KPBfzypzgoHlXD41D7UbOGqxOmCkgiNTb9mhDFoiFYVL3jBH3vrd+0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9uYFHOgcntk67TLbHucWURqI08MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcziVOGKm vZAdikhTekSUx2JfpRUWXn17pNAAyN9gH01KnDsajqgN3s30HM4CJA4/2eUE0jiT GICSe36hHsX38LWezMA+cFNaC6OZlGhRUe8ycp5o7ADOE3iRNJUaU6d13K72a7nJ DqC2aYjLot1m6X2P2qXF1QFEVY5hQtGQu5agI3QV2kQlRe+DCB4Q0LHkgnrTydZo F8fWvYqsLX24IgAe7xI4wkncZr7k65z7J4o1E4OFsP+kxn/pT2CGcxw3EdW3QjaX hqSBk7y64yaXy0j7MCLWVjcvxoJUWWhIefdN1Oo6BhpcXm++m0lBBjx+8AX8QIVM uZvrbKp/Xxctig== -----END CERTIFICATE-----Generated at Sun Aug 30 05:45:19 2026 by rpki-client