$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: JzmEAn02n5RMXHm2+NGvgSd3WVJJ6Jp6F0JQOD8BKHc= Subject key identifier: CB:67:9A:27:68:78:F1:B6:80:7B:29:28:BC:AD:3A:56:18:17:52:1A Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0596906D37319D4101F9012AF2FD43113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1494 Signing time: Mon 31 Aug 2026 20:00:50 +0000 Manifest this update: Mon 31 Aug 2026 20:00:50 +0000 Manifest next update: Tue 01 Sep 2026 20:00:50 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: tUi5Zq1fc3w5GRaPCKj3T+E4Uyia1zm8lOFi8GFhWhk=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:59:69:06:d3:73:19:d4:10:1f:90:12:af:2f:d4:31:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 31 20:00:50 2026 GMT Not After : Sep 1 20:00:50 2026 GMT Subject: CN=cb679a276878f1b6807b2928bcad3a561817521a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:21:f4:6e:7c:4a:f5:7b:fb:ff:54:ef:61: 56:f6:d7:1c:bf:99:0b:ab:94:92:54:ec:ab:92:08: b6:47:fb:26:dd:52:ed:e9:70:34:1e:77:48:4b:73: b1:60:4b:ae:d0:05:fd:fc:70:a3:e7:01:7c:9a:2b: c4:f8:68:8d:0e:3f:c9:b6:30:48:d9:9e:1e:42:73: 10:55:92:4a:3a:40:cf:79:02:45:1b:30:02:b3:94: 76:0d:9b:d1:83:10:42:3f:99:7f:a7:f3:25:f5:60: fa:48:97:ba:4c:f7:9c:9e:66:94:86:63:3e:a2:3e: 99:af:14:b0:ff:63:fa:3c:15:b5:20:82:ad:98:a3: 96:9a:62:86:af:4e:7b:6b:e8:21:97:b7:d0:12:16: 1f:46:7a:ec:d5:ac:56:4a:fc:e8:73:8f:14:0e:50: 1a:96:4d:df:ee:9a:b7:ac:43:6e:89:ae:4b:ba:f4: d9:d3:09:da:d6:3c:0f:c7:6b:b5:73:db:41:c1:bf: ab:a1:54:c6:47:07:09:3c:42:a8:03:02:68:f5:30: 94:58:18:b7:d5:01:b5:28:ca:6b:6c:20:f2:fc:a7: 43:5e:75:c0:d2:c9:82:c5:0a:33:5d:2f:36:e8:b4: 77:88:91:2a:d8:c3:4e:eb:77:1c:67:81:08:a1:40: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:67:9A:27:68:78:F1:B6:80:7B:29:28:BC:AD:3A:56:18:17:52:1A X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9c:e7:57:8b:d8:31:8f:46:42:c2:be:88:27:0b:2d:ae:1a: 36:b2:ca:a5:6d:87:b8:7d:c6:6a:40:30:67:24:2f:4a:4f:65: 1c:79:8b:7d:9c:e6:4d:85:01:06:c0:88:1b:b7:73:0f:ba:e6: 98:0d:3a:ea:74:4c:49:c1:cb:94:0a:dc:25:3c:37:cb:1a:28: 26:1e:ab:ce:d8:5f:08:fe:c2:fb:ba:59:87:92:84:c1:86:ea: 75:ef:9d:bf:4b:e1:a5:95:74:c3:f3:e7:7d:cc:10:a6:7c:9d: 58:d0:ff:01:a4:6c:91:83:23:f2:65:30:20:83:e3:db:9d:c0: ba:af:47:65:8b:2f:31:09:15:08:f4:52:30:79:0d:0b:9f:b5: ed:40:8c:7d:b9:12:16:21:c2:06:3c:1c:74:fc:18:27:da:c1: c4:b6:6f:1d:c0:7a:cc:db:9e:de:27:da:d6:27:57:5b:66:36: 58:05:a3:de:0a:e5:77:0f:f6:3c:94:37:51:5a:a8:42:27:72: 77:67:eb:31:5f:d1:27:8a:5d:ff:1b:cd:a5:7e:57:8f:2c:a9: 20:38:43:f5:ff:05:b4:68:13:98:eb:df:48:02:28:f3:a7:13: 8b:25:21:e5:ec:25:3b:df:ae:49:9c:a5:a9:7a:22:87:72:2d: 52:b9:9e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBZaQbTcxnUEB+QEq8v1DETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODMxMjAwMDUwWhcNMjYwOTAxMjAwMDUwWjAzMTEwLwYDVQQD EyhjYjY3OWEyNzY4NzhmMWI2ODA3YjI5MjhiY2FkM2E1NjE4MTc1MjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ukh9G58SvV7+/9U72FW9tccv5kL q5SSVOyrkgi2R/sm3VLt6XA0HndIS3OxYEuu0AX9/HCj5wF8mivE+GiNDj/JtjBI 2Z4eQnMQVZJKOkDPeQJFGzACs5R2DZvRgxBCP5l/p/Ml9WD6SJe6TPecnmaUhmM+ oj6ZrxSw/2P6PBW1IIKtmKOWmmKGr057a+ghl7fQEhYfRnrs1axWSvzoc48UDlAa lk3f7pq3rENuia5LuvTZ0wna1jwPx2u1c9tBwb+roVTGRwcJPEKoAwJo9TCUWBi3 1QG1KMprbCDy/KdDXnXA0smCxQozXS826LR3iJEq2MNO63ccZ4EIoUB3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtnmidoePG2gHspKLytOlYYF1IaMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJznV4vY MY9GQsK+iCcLLa4aNrLKpW2HuH3GakAwZyQvSk9lHHmLfZzmTYUBBsCIG7dzD7rm mA066nRMScHLlArcJTw3yxooJh6rzthfCP7C+7pZh5KEwYbqde+dv0vhpZV0w/Pn fcwQpnydWND/AaRskYMj8mUwIIPj253Auq9HZYsvMQkVCPRSMHkNC5+17UCMfbkS FiHCBjwcdPwYJ9rBxLZvHcB6zNue3ifa1idXW2Y2WAWj3grldw/2PJQ3UVqoQidy d2frMV/RJ4pd/xvNpX5XjyypIDhD9f8FtGgTmOvfSAIo86cTiyUh5ewlO9+uSZyl qXoih3ItUrmevg== -----END CERTIFICATE-----Generated at Tue Sep 1 05:13:35 2026 by rpki-client