$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: vN1b4PU2WMlvEsyV6vEgk/ln8z63Lw71UQEtzOgkTM8= Subject key identifier: 37:11:98:8F:DE:2E:F8:BD:6E:2D:BC:A0:FA:55:DB:E9:91:7B:D2:F5 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F0517D9CF2075880BFA35B83EF5EE78AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 13E2 Signing time: Fri 26 Jun 2026 18:01:16 +0000 Manifest this update: Fri 26 Jun 2026 18:01:16 +0000 Manifest next update: Sat 27 Jun 2026 18:01:16 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: cOo/JtKuuWQfndV3KjEzb92Y6iFcVMbHRgRKGduwYRk=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Jun 2026 18:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:05:17:d9:cf:20:75:88:0b:fa:35:b8:3e:f5:ee:78:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jun 26 18:01:16 2026 GMT Not After : Jun 27 18:01:16 2026 GMT Subject: CN=3711988fde2ef8bd6e2dbca0fa55dbe9917bd2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:c4:07:91:2f:8a:c5:8d:18:2d:8d:a6:00: 29:5f:6c:96:94:7c:a3:d4:d9:d9:8e:4f:fa:1b:93: 71:5d:46:38:97:36:6e:06:18:8e:e3:eb:a3:43:01: 4a:01:da:9c:c7:b5:57:22:0f:ca:e2:96:d3:55:c1: 8e:48:c8:26:34:9d:99:65:4d:58:13:df:48:08:35: 3e:bd:a7:2f:1f:27:7f:64:a7:81:b2:bb:c7:4b:29: bd:c8:74:7b:b4:9f:a4:d2:fc:9b:5e:e6:ff:06:07: 98:b0:43:75:b3:42:0b:bb:2d:6b:c3:ce:11:eb:71: 8e:04:3c:83:8a:dd:7a:85:ed:d6:01:65:8f:dd:09: db:fb:94:32:24:bd:4b:b2:c6:db:a5:e6:5b:81:03: 13:7d:ba:77:de:f2:d1:72:c3:c6:81:78:60:92:62: a4:ba:eb:86:9f:90:ee:e2:e3:a1:b5:a1:17:2e:0d: 86:9d:ce:81:fc:96:8e:f3:7f:15:06:0b:06:cc:cc: a3:db:d1:67:66:b3:dd:0b:35:b8:56:54:33:83:2b: 95:03:e8:df:71:19:1a:fe:c9:d2:e7:b1:4f:e4:a3: a0:89:cc:24:cd:de:3b:97:cb:70:3a:e0:eb:ca:00: 1d:16:4e:3d:76:2f:bf:fa:b3:6b:76:b4:a0:79:0e: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:11:98:8F:DE:2E:F8:BD:6E:2D:BC:A0:FA:55:DB:E9:91:7B:D2:F5 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:70:f3:fa:ef:25:c3:0b:90:ba:96:03:97:62:9d:7e:9a:60: 13:95:cd:25:87:4c:be:21:39:69:75:92:7f:20:a8:33:34:7b: 11:f8:22:77:d2:d4:4a:64:2b:58:f2:1d:d9:84:f4:60:b9:9a: 97:32:3a:5e:32:7d:88:d4:53:7d:55:59:cb:ad:9d:97:5d:fb: 73:c1:bc:48:c8:6f:cf:ed:79:56:2b:a6:5f:4c:4a:3e:ce:9f: a5:68:f8:99:2f:97:fe:5a:6e:1a:67:08:38:3b:a0:dd:43:90: 1a:37:9f:8c:b0:f1:40:73:6c:e5:7f:99:d6:79:b7:87:42:1d: 5d:a6:83:6c:fa:e9:89:75:3a:10:9c:af:6e:7e:98:a1:cf:61: e9:e9:bc:c0:bc:a6:fd:a0:4e:89:50:f9:71:6d:42:c4:32:11: c0:3d:83:1d:da:23:27:79:9c:2c:18:16:33:fc:aa:bb:66:99: e3:0b:df:eb:b5:d3:fb:33:07:b7:6a:a5:97:6b:a7:a8:55:e5: 3d:3f:19:4d:19:39:d8:c0:9d:c2:56:53:65:a7:10:08:c1:72: da:a5:d3:84:1e:3b:9c:d3:cb:f4:ff:74:96:5b:48:b4:98:9e: e6:ac:f7:2e:15:56:08:93:fb:e9:92:1d:8b:ee:34:2c:a2:06: fd:cf:8f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8FF9nPIHWIC/o1uD717nirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNjI2MTgwMTE2WhcNMjYwNjI3MTgwMTE2WjAzMTEwLwYDVQQD EygzNzExOTg4ZmRlMmVmOGJkNmUyZGJjYTBmYTU1ZGJlOTkxN2JkMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwjEB5EvisWNGC2NpgApX2yWlHyj 1NnZjk/6G5NxXUY4lzZuBhiO4+ujQwFKAdqcx7VXIg/K4pbTVcGOSMgmNJ2ZZU1Y E99ICDU+vacvHyd/ZKeBsrvHSym9yHR7tJ+k0vybXub/BgeYsEN1s0ILuy1rw84R 63GOBDyDit16he3WAWWP3Qnb+5QyJL1LssbbpeZbgQMTfbp33vLRcsPGgXhgkmKk uuuGn5Du4uOhtaEXLg2Gnc6B/JaO838VBgsGzMyj29FnZrPdCzW4VlQzgyuVA+jf cRka/snS57FP5KOgicwkzd47l8twOuDrygAdFk49di+/+rNrdrSgeQ6ZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcRmI/eLvi9bi28oPpV2+mRe9L1MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXDz+u8l wwuQupYDl2KdfppgE5XNJYdMviE5aXWSfyCoMzR7Efgid9LUSmQrWPId2YT0YLma lzI6XjJ9iNRTfVVZy62dl137c8G8SMhvz+15ViumX0xKPs6fpWj4mS+X/lpuGmcI ODug3UOQGjefjLDxQHNs5X+Z1nm3h0IdXaaDbPrpiXU6EJyvbn6Yoc9h6em8wLym /aBOiVD5cW1CxDIRwD2DHdojJ3mcLBgWM/yqu2aZ4wvf67XT+zMHt2qll2unqFXl PT8ZTRk52MCdwlZTZacQCMFy2qXThB47nNPL9P90lltItJie5qz3LhVWCJP76ZId i+40LKIG/c+Plw== -----END CERTIFICATE-----Generated at Sat Jun 27 03:41:58 2026 by rpki-client