$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: DbEnsZ8rh3dGJKYwZIoIxHsFxdv5c5SdGOy83Y0hpEM= Subject key identifier: F4:72:5B:2E:B5:D9:D2:B2:53:39:1E:31:F4:F0:34:A6:52:74:C7:97 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FF30F1ECD6C2CF94F5122F270BBE1A8F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 145F Signing time: Tue 11 Aug 2026 23:01:22 +0000 Manifest this update: Tue 11 Aug 2026 23:01:22 +0000 Manifest next update: Wed 12 Aug 2026 23:01:22 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 4dQPH8kDqH2Pg9Y4gxl8ucplvWABjfhbgABvvTcnXvM=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Aug 2026 21:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f3:0f:1e:cd:6c:2c:f9:4f:51:22:f2:70:bb:e1:a8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 11 23:01:22 2026 GMT Not After : Aug 12 23:01:22 2026 GMT Subject: CN=f4725b2eb5d9d2b253391e31f4f034a65274c797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:9b:bd:d4:67:a8:09:44:cc:fb:8c:c4:f5: dc:f5:75:5a:88:0b:aa:71:a3:d9:57:40:33:d0:63: 20:0c:37:34:d1:e9:d6:07:21:00:94:2e:36:cf:dd: 1b:a5:1e:7c:0b:1a:d3:41:ac:45:e9:f5:43:db:da: c6:2d:c3:2d:21:cf:4c:7b:9f:8c:42:c6:d6:81:9f: 9e:ff:87:c2:1f:20:ba:b7:5d:bb:4a:68:b1:d9:cb: b8:bc:3e:b0:6c:ff:12:35:7b:bd:50:20:f3:b4:1d: 5b:f0:2a:18:dc:84:53:96:94:69:5e:c1:3c:af:3a: b1:73:f3:cb:d6:ce:e2:39:b9:9b:52:04:a4:da:ea: ec:15:3f:15:64:64:91:57:09:4a:4c:66:01:1c:ad: 55:cf:97:1a:2f:c6:66:98:2b:cd:8e:1c:41:9e:4a: 1b:ab:7f:02:f0:73:7b:c9:8d:59:e6:86:b6:08:a8: 37:f4:d6:42:c9:27:b3:e9:79:3f:c7:cd:91:69:1f: 29:bd:33:24:2a:4b:51:b9:49:db:b5:c6:b8:c7:33: 46:28:d6:a9:0b:6a:bb:d8:29:43:b0:d3:69:dc:e9: 19:ce:b6:75:ea:42:2a:d1:ca:e8:7f:eb:a1:52:e2: cd:26:17:78:6a:87:24:d6:c4:7e:dd:f4:8a:a0:f3: 8f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:5B:2E:B5:D9:D2:B2:53:39:1E:31:F4:F0:34:A6:52:74:C7:97 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:09:ea:a7:ca:b3:bb:4f:7b:d2:9a:87:08:3e:ab:7b:9f:7b: cf:ad:af:c1:bc:a5:e6:ad:91:9e:ee:fa:96:88:6f:46:6b:ee: e2:80:b9:8a:73:0c:53:b0:0b:21:b6:13:40:03:49:0c:e5:a6: 5c:c4:0d:84:d0:10:0e:12:2f:4f:53:a9:96:19:66:f2:93:b8: 5c:f6:16:a3:5f:f0:55:4c:87:a1:81:67:dc:b0:b0:4a:e2:76: bf:fc:5b:ea:33:33:0f:88:ac:77:a7:7c:2f:ce:e7:21:e0:74: 54:e7:e3:85:da:b4:53:4a:7f:5f:68:44:0e:2e:ee:af:42:69: 34:54:60:0f:4d:ce:eb:e3:8c:11:83:61:4c:99:3d:20:59:b1: 00:38:5a:0f:55:1c:66:07:61:b3:4a:02:c9:96:2f:44:18:fa: a2:70:7b:bd:1f:e9:77:d9:5c:81:bd:46:f2:c9:85:a4:d0:88: 24:97:0d:bf:9b:e3:8c:90:3f:e1:70:1a:14:0d:7a:a2:5c:55: 18:6a:f5:ad:21:a5:8b:d7:cb:8a:ff:9c:8d:37:80:cb:9c:7e: 47:93:97:6d:0d:11:e3:10:6a:60:24:6b:da:8e:6f:10:15:22: 76:d2:fb:32:11:66:d5:cd:94:0e:92:57:e1:12:86:da:06:af: 76:90:68:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/zDx7NbCz5T1Ei8nC74aj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODExMjMwMTIyWhcNMjYwODEyMjMwMTIyWjAzMTEwLwYDVQQD EyhmNDcyNWIyZWI1ZDlkMmIyNTMzOTFlMzFmNGYwMzRhNjUyNzRjNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDqbvdRnqAlEzPuMxPXc9XVaiAuq caPZV0Az0GMgDDc00enWByEAlC42z90bpR58CxrTQaxF6fVD29rGLcMtIc9Me5+M QsbWgZ+e/4fCHyC6t127Smix2cu4vD6wbP8SNXu9UCDztB1b8CoY3IRTlpRpXsE8 rzqxc/PL1s7iObmbUgSk2ursFT8VZGSRVwlKTGYBHK1Vz5caL8ZmmCvNjhxBnkob q38C8HN7yY1Z5oa2CKg39NZCySez6Xk/x82RaR8pvTMkKktRuUnbtca4xzNGKNap C2q72ClDsNNp3OkZzrZ16kIq0crof+uhUuLNJhd4aock1sR+3fSKoPOPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRyWy612dKyUzkeMfTwNKZSdMeXMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAnqp8qz u0970pqHCD6re597z62vwbyl5q2Rnu76lohvRmvu4oC5inMMU7ALIbYTQANJDOWm XMQNhNAQDhIvT1Oplhlm8pO4XPYWo1/wVUyHoYFn3LCwSuJ2v/xb6jMzD4isd6d8 L87nIeB0VOfjhdq0U0p/X2hEDi7ur0JpNFRgD03O6+OMEYNhTJk9IFmxADhaD1Uc Zgdhs0oCyZYvRBj6onB7vR/pd9lcgb1G8smFpNCIJJcNv5vjjJA/4XAaFA16olxV GGr1rSGli9fLiv+cjTeAy5x+R5OXbQ0R4xBqYCRr2o5vEBUidtL7MhFm1c2UDpJX 4RKG2gavdpBo1Q== -----END CERTIFICATE-----Generated at Wed Aug 12 02:18:52 2026 by rpki-client