$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: WFmW7zvNGlHuDnjQ8HutwxFugFPD35sgAX2PBMK8B7A= Subject key identifier: 6E:EB:F7:D3:18:E7:35:C7:09:E1:07:47:62:97:31:C3:39:3D:EA:68 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A078F468E16EFFC2048E1AC90718642EC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14A5 Signing time: Sun 06 Sep 2026 23:01:18 +0000 Manifest this update: Sun 06 Sep 2026 23:01:18 +0000 Manifest next update: Mon 07 Sep 2026 23:01:18 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: oVcbOxgcqQhHGKkHVr7n4YPraP9jdAQA8mK4Q3sIxPo=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Sep 2026 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:78:f4:68:e1:6e:ff:c2:04:8e:1a:c9:07:18:64:2e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 6 23:01:18 2026 GMT Not After : Sep 7 23:01:18 2026 GMT Subject: CN=6eebf7d318e735c709e10747629731c3393dea68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0a:24:c9:27:30:6f:80:66:55:4e:47:a8:06: e1:3d:46:e2:12:6a:53:99:8a:c7:44:1e:bb:e9:fa: c4:e4:45:a0:ea:09:51:7a:b0:05:7d:3d:ea:39:a8: 8b:7c:50:d1:63:c3:b4:c2:b7:9d:d3:8d:72:e2:86: 3d:d6:17:7d:e1:2e:2f:9c:3d:98:b9:55:65:3c:6f: 0c:70:be:aa:7d:93:bd:72:8b:a6:36:42:ee:8e:23: e1:b7:61:3c:2b:ba:17:93:84:8d:13:29:0c:c9:77: 17:47:77:16:c5:27:8c:79:83:6f:e0:1f:29:14:c0: 51:d7:0b:29:e8:53:ba:55:f0:29:c4:4a:9b:a9:66: 99:da:82:cf:d0:9d:18:e4:3c:55:c5:4e:9b:da:cf: c6:e4:63:e2:41:a0:8d:a6:2a:d6:3d:5e:56:5f:29: 46:44:1a:0a:7a:a5:ae:b8:29:b2:96:9a:00:53:70: d6:9d:33:3b:ce:f2:68:51:e5:b6:a6:99:ee:99:4e: 33:96:a0:6f:01:31:86:29:ed:e2:6c:9f:5b:0c:eb: b4:48:dc:c7:23:e0:73:09:61:40:27:fc:4c:4b:f5: 3a:3c:77:ea:c7:e6:0d:e9:f4:b6:a9:69:10:f4:8b: 6b:96:a3:36:fb:74:6c:c8:b2:1c:c8:ec:f3:aa:b8: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:F7:D3:18:E7:35:C7:09:E1:07:47:62:97:31:C3:39:3D:EA:68 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ac:37:18:0f:f5:e3:86:53:cf:c5:9c:e1:63:79:e5:bf:82: 36:05:90:85:a8:3b:ac:2c:14:0f:3d:6c:ff:03:da:1d:5b:f2: 22:2f:1e:ca:44:4e:98:17:ef:5e:3b:84:bf:34:a8:18:68:fd: a8:b9:38:81:d2:aa:bd:34:92:0b:c5:aa:c0:80:c0:60:0f:14: 22:31:42:89:1b:e1:e9:79:24:ce:83:11:4a:c0:2d:97:06:b8: cf:83:ac:65:66:ae:75:76:fe:68:b0:90:f6:9a:97:84:b9:b7: 7e:45:5d:fd:12:83:8f:27:b1:a6:83:62:56:47:6d:c0:d8:b4: 68:c7:89:91:d9:54:a1:f5:a1:b4:b0:3e:a5:09:10:7b:49:cf: d3:c9:7d:85:2e:59:2c:e7:5c:47:68:a4:e3:e6:ee:8d:57:c3: a0:98:62:ad:45:72:89:e3:68:0d:bb:8c:9f:77:a8:ca:73:92: 34:96:bb:53:0c:78:d7:e8:60:e8:1d:d4:cb:64:8f:37:55:54: b9:5e:ab:63:51:2b:79:96:9f:66:f3:5b:fc:27:22:3c:b7:bc: 6c:d0:41:f7:ae:ec:44:87:b6:cb:a0:74:34:3a:f2:fa:14:8d: ac:2b:02:fe:8c:3f:87:bd:5b:f2:af:6c:70:c5:6d:3e:39:35: 10:2d:20:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaB49Gjhbv/CBI4ayQcYZC7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTA2MjMwMTE4WhcNMjYwOTA3MjMwMTE4WjAzMTEwLwYDVQQD Eyg2ZWViZjdkMzE4ZTczNWM3MDllMTA3NDc2Mjk3MzFjMzM5M2RlYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gokyScwb4BmVU5HqAbhPUbiEmpT mYrHRB676frE5EWg6glRerAFfT3qOaiLfFDRY8O0wred041y4oY91hd94S4vnD2Y uVVlPG8McL6qfZO9coumNkLujiPht2E8K7oXk4SNEykMyXcXR3cWxSeMeYNv4B8p FMBR1wsp6FO6VfApxEqbqWaZ2oLP0J0Y5DxVxU6b2s/G5GPiQaCNpirWPV5WXylG RBoKeqWuuCmylpoAU3DWnTM7zvJoUeW2ppnumU4zlqBvATGGKe3ibJ9bDOu0SNzH I+BzCWFAJ/xMS/U6PHfqx+YN6fS2qWkQ9ItrlqM2+3RsyLIcyOzzqrh/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7r99MY5zXHCeEHR2KXMcM5PepoMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKw3GA/1 44ZTz8Wc4WN55b+CNgWQhag7rCwUDz1s/wPaHVvyIi8eykROmBfvXjuEvzSoGGj9 qLk4gdKqvTSSC8WqwIDAYA8UIjFCiRvh6XkkzoMRSsAtlwa4z4OsZWaudXb+aLCQ 9pqXhLm3fkVd/RKDjyexpoNiVkdtwNi0aMeJkdlUofWhtLA+pQkQe0nP08l9hS5Z LOdcR2ik4+bujVfDoJhirUVyieNoDbuMn3eoynOSNJa7Uwx41+hg6B3Uy2SPN1VU uV6rY1EreZafZvNb/CciPLe8bNBB967sRIe2y6B0NDry+hSNrCsC/ow/h71b8q9s cMVtPjk1EC0gjQ== -----END CERTIFICATE-----Generated at Mon Sep 7 07:24:39 2026 by rpki-client