$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: bcLXiQ9Jdgl7QZ3t7LnfrRBpRBELN8ehSX//qIK3kgk= Subject key identifier: 10:54:05:13:3F:DD:87:76:BB:DB:81:EC:BD:5F:A1:E0:6B:EA:26:FF Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A030DB9F27109345635FAE8AD8EEEE6DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 147F Signing time: Sun 23 Aug 2026 23:01:34 +0000 Manifest this update: Sun 23 Aug 2026 23:01:34 +0000 Manifest next update: Mon 24 Aug 2026 23:01:34 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: +AIJQgB71naswDsCjev6t3PbQzsy/UzIVTJUwrWj22k=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Aug 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:30:db:9f:27:10:93:45:63:5f:ae:8a:d8:ee:ee:6d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 23 23:01:34 2026 GMT Not After : Aug 24 23:01:34 2026 GMT Subject: CN=105405133fdd8776bbdb81ecbd5fa1e06bea26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:d5:3f:98:ed:6b:60:87:58:bb:1f:b6:37: bf:fc:1b:41:d1:76:11:00:b2:be:1c:b5:7b:b8:38: 5b:34:50:8e:d0:10:71:d0:52:a7:02:df:b9:fd:d8: fe:a5:01:d7:63:ff:b6:69:e1:dd:eb:5f:82:7d:f3: 1d:ab:ed:84:aa:20:b2:7e:69:10:ab:5c:d4:2e:29: 8a:a7:c8:67:13:2d:c9:a0:82:10:26:35:1c:95:fa: 1f:a8:db:ac:1c:cc:ca:5a:40:3f:aa:fa:23:28:18: 94:29:c1:73:0e:fe:e5:13:95:14:12:94:d7:be:74: d5:7c:b7:48:78:26:73:68:e6:e9:e5:75:29:b2:fc: 1f:34:2f:2c:db:31:d2:d2:b4:b7:f5:d2:b2:04:97: 4a:a1:f8:ee:66:8b:44:11:b3:b3:9b:7b:69:78:59: 3d:91:e9:0d:a6:14:e0:6d:72:73:37:b1:5d:e1:90: 0a:6e:b8:c4:5d:12:17:d3:f6:ab:a2:ac:ac:79:ce: a1:27:66:b9:09:9b:52:61:23:b4:68:1c:bf:09:c7: 17:cb:14:36:e5:28:9b:c2:7d:f1:45:b3:3c:35:cb: 70:ab:d0:63:ab:02:48:0b:5f:d1:fe:c0:d1:f7:08: 20:d2:92:cd:7e:92:f3:5e:1d:be:c5:65:82:63:e3: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:54:05:13:3F:DD:87:76:BB:DB:81:EC:BD:5F:A1:E0:6B:EA:26:FF X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0d:0c:78:1f:9c:1f:6d:4c:a9:91:79:f8:9e:9b:b7:65:7e: 6a:46:0a:d5:34:16:82:6c:57:9a:60:30:25:2e:03:34:c2:35: 5a:e5:a9:f7:2d:d1:e0:6b:ff:7b:c2:d0:73:bf:10:af:a5:71: e7:4a:d3:57:ae:3f:cf:b5:d3:05:0f:d6:a4:f4:e5:72:e2:49: 20:5a:da:25:24:f0:e7:c1:ba:af:00:05:50:eb:d7:b5:24:fe: 73:f9:a7:0b:84:5d:b4:e9:58:2d:c6:56:54:ab:89:e1:e3:7a: 4e:cf:93:3c:ef:b8:2b:4a:8b:df:e6:7f:31:9f:73:1e:28:0a: 86:fe:09:56:97:ee:df:bb:e9:42:e3:e9:9e:82:e2:0c:98:b9: 4e:4d:c1:9a:46:2a:2d:8f:c7:fc:d6:7a:1e:47:bb:6b:e4:da: 7c:6a:ed:30:fc:e3:b8:f9:6b:07:16:c9:ce:32:f2:dd:49:ee: 56:1b:8e:16:12:92:9b:f1:c7:12:fc:11:f2:6f:c7:1f:b2:0b: 81:d6:ed:a6:3e:81:8b:bb:7d:1b:7b:9f:90:ce:f9:90:17:85: d5:a5:d8:73:99:fb:3f:5b:fd:b2:41:8b:b4:ea:3d:0a:65:4c: 6d:ad:81:94:5d:45:a9:98:78:26:2a:79:ef:14:4e:dd:0c:fe: c1:37:f1:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAw258nEJNFY1+uitju7m38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODIzMjMwMTM0WhcNMjYwODI0MjMwMTM0WjAzMTEwLwYDVQQD EygxMDU0MDUxMzNmZGQ4Nzc2YmJkYjgxZWNiZDVmYTFlMDZiZWEyNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6TVP5jta2CHWLsftje//BtB0XYR ALK+HLV7uDhbNFCO0BBx0FKnAt+5/dj+pQHXY/+2aeHd61+CffMdq+2EqiCyfmkQ q1zULimKp8hnEy3JoIIQJjUclfofqNusHMzKWkA/qvojKBiUKcFzDv7lE5UUEpTX vnTVfLdIeCZzaObp5XUpsvwfNC8s2zHS0rS39dKyBJdKofjuZotEEbOzm3tpeFk9 kekNphTgbXJzN7Fd4ZAKbrjEXRIX0/aroqysec6hJ2a5CZtSYSO0aBy/CccXyxQ2 5Sibwn3xRbM8Nctwq9BjqwJIC1/R/sDR9wgg0pLNfpLzXh2+xWWCY+PISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBUBRM/3Yd2u9uB7L1foeBr6ib/MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATg0MeB+c H21MqZF5+J6bt2V+akYK1TQWgmxXmmAwJS4DNMI1WuWp9y3R4Gv/e8LQc78Qr6Vx 50rTV64/z7XTBQ/WpPTlcuJJIFraJSTw58G6rwAFUOvXtST+c/mnC4RdtOlYLcZW VKuJ4eN6Ts+TPO+4K0qL3+Z/MZ9zHigKhv4JVpfu37vpQuPpnoLiDJi5Tk3BmkYq LY/H/NZ6Hke7a+TafGrtMPzjuPlrBxbJzjLy3UnuVhuOFhKSm/HHEvwR8m/HH7IL gdbtpj6Bi7t9G3ufkM75kBeF1aXYc5n7P1v9skGLtOo9CmVMba2BlF1FqZh4Jip5 7xRO3Qz+wTfxAA== -----END CERTIFICATE-----Generated at Mon Aug 24 04:35:23 2026 by rpki-client