$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 4AxmzIWLPn5nhAhbkN+f8MVj8wyUpezREycubg7YNyY= Subject key identifier: 71:75:A7:FF:1D:14:B8:A9:81:1C:85:C5:2B:41:6E:C7:13:F1:C7:EA Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F8E348532CE4A0E702EE6E530B4178A57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 142A Signing time: Thu 23 Jul 2026 09:00:34 +0000 Manifest this update: Thu 23 Jul 2026 09:00:34 +0000 Manifest next update: Fri 24 Jul 2026 09:00:34 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: NhKTwmwTeFgSbb1kVDq3L5hQvH245QAWXnvpf979/Yo=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:34:85:32:ce:4a:0e:70:2e:e6:e5:30:b4:17:8a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 23 09:00:34 2026 GMT Not After : Jul 24 09:00:34 2026 GMT Subject: CN=7175a7ff1d14b8a9811c85c52b416ec713f1c7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:95:0e:46:97:16:69:3f:c0:86:59:d1:a4: 7b:3d:32:9d:49:fc:ff:f5:cb:22:8e:a3:0c:36:12: 82:0a:e9:3e:e6:14:24:2a:3f:47:e3:72:50:28:3c: a2:91:9e:dc:1d:d7:87:f5:59:05:b7:5d:fb:f3:c7: 85:08:e0:1c:6e:b9:d2:52:a9:7a:6c:26:5d:12:b8: 1f:9f:56:7c:c0:98:91:b8:6c:60:56:19:7e:43:28: f0:e2:47:17:76:d2:12:fb:c8:94:9a:77:0c:e7:d2: ea:9b:cf:b9:ae:8b:a0:2f:19:6f:e0:3a:cc:74:5e: d6:65:b5:16:89:e1:7d:21:b6:25:26:9e:d2:fd:01: 3b:ff:53:65:7e:b5:d5:47:55:da:10:09:c0:48:a1: 16:43:38:4f:9a:99:43:f5:58:9d:63:35:1a:96:83: 76:53:48:8d:67:ba:69:49:58:13:e0:98:8d:b5:2e: 07:1f:b6:ef:e9:0c:b4:ba:21:ff:e3:9c:4c:23:fe: 46:1e:ce:95:ec:41:77:c5:ec:21:fb:9a:86:68:de: fe:5a:7f:f2:8d:0b:9e:34:31:27:c9:dd:38:b6:24: a5:3b:73:10:3f:10:06:8e:5f:63:73:bc:03:94:39: e2:13:1d:8a:23:e7:20:88:1c:33:0c:a0:24:b0:69: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:75:A7:FF:1D:14:B8:A9:81:1C:85:C5:2B:41:6E:C7:13:F1:C7:EA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f9:33:a8:60:41:18:79:c4:e0:63:67:9d:86:82:a0:02:48: 0d:de:d1:94:e6:fc:4c:73:db:ce:cc:76:1a:b9:a1:13:cb:ae: 14:09:16:c6:16:a8:b2:b0:01:ad:95:63:9a:2c:25:87:30:a3: 05:49:a6:56:22:6b:62:0e:ff:f8:f7:6c:ff:5d:d4:53:c9:bd: 5e:76:4e:13:d7:89:9d:61:a8:99:32:9f:7a:ce:90:1c:24:37: 03:e7:08:2c:1a:79:b4:f5:e6:66:e1:75:c4:b7:db:62:6f:68: cf:3f:02:7c:6f:47:0c:2f:5c:db:ab:0a:ba:1b:6c:0f:1e:a5: 22:e5:c0:f4:a7:8b:6e:af:a6:e8:25:5c:d7:1e:2b:bd:8d:21: 55:59:44:8b:9c:fa:17:51:13:d0:2d:8a:9f:4a:66:4a:60:9c: f4:58:76:90:d7:83:74:21:0f:7d:7e:58:cd:4d:6b:99:76:48: ee:0e:17:ba:71:83:4d:8d:c4:33:d4:a0:bf:bf:36:f8:ef:1f: a0:02:0d:a2:b7:95:c7:01:9d:8e:40:1a:bc:28:59:39:f2:cb: b5:7a:5a:24:b5:a2:fb:5f:76:92:c2:bd:a0:ac:93:c1:d8:5d: 04:0c:b6:09:1a:e4:a0:59:31:bc:25:1a:de:6e:ba:dd:dc:91: 6d:69:9f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ONIUyzkoOcC7m5TC0F4pXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzIzMDkwMDM0WhcNMjYwNzI0MDkwMDM0WjAzMTEwLwYDVQQD Eyg3MTc1YTdmZjFkMTRiOGE5ODExYzg1YzUyYjQxNmVjNzEzZjFjN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmuVDkaXFmk/wIZZ0aR7PTKdSfz/ 9csijqMMNhKCCuk+5hQkKj9H43JQKDyikZ7cHdeH9VkFt13788eFCOAcbrnSUql6 bCZdErgfn1Z8wJiRuGxgVhl+Qyjw4kcXdtIS+8iUmncM59Lqm8+5rougLxlv4DrM dF7WZbUWieF9IbYlJp7S/QE7/1NlfrXVR1XaEAnASKEWQzhPmplD9VidYzUaloN2 U0iNZ7ppSVgT4JiNtS4HH7bv6Qy0uiH/45xMI/5GHs6V7EF3xewh+5qGaN7+Wn/y jQueNDEnyd04tiSlO3MQPxAGjl9jc7wDlDniEx2KI+cgiBwzDKAksGntpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF1p/8dFLipgRyFxStBbscT8cfqMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvkzqGBB GHnE4GNnnYaCoAJIDd7RlOb8THPbzsx2GrmhE8uuFAkWxhaosrABrZVjmiwlhzCj BUmmViJrYg7/+Pds/13UU8m9XnZOE9eJnWGomTKfes6QHCQ3A+cILBp5tPXmZuF1 xLfbYm9ozz8CfG9HDC9c26sKuhtsDx6lIuXA9KeLbq+m6CVc1x4rvY0hVVlEi5z6 F1ET0C2Kn0pmSmCc9Fh2kNeDdCEPfX5YzU1rmXZI7g4XunGDTY3EM9Sgv782+O8f oAINoreVxwGdjkAavChZOfLLtXpaJLWi+192ksK9oKyTwdhdBAy2CRrkoFkxvCUa 3m663dyRbWmf+Q== -----END CERTIFICATE-----Generated at Thu Jul 23 15:42:47 2026 by rpki-client