$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: em60sSyQBMhX5Fyf2LFbd4phQ/ZtzJv+E4QBL/blvvg= Subject key identifier: C7:52:DA:CD:10:91:F1:48:23:55:5F:AB:EF:7F:5E:3E:B9:2B:58:CB Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019DB9C9BDC4D0FE7AACF42593D6940D574F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1335 Signing time: Thu 23 Apr 2026 10:01:39 +0000 Manifest this update: Thu 23 Apr 2026 10:01:39 +0000 Manifest next update: Fri 24 Apr 2026 10:01:39 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: tskbCQPcgdxmvhhJFyNuFbEHRv2v/K1Ffdnf1frJQYs=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b9:c9:bd:c4:d0:fe:7a:ac:f4:25:93:d6:94:0d:57:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Apr 23 10:01:39 2026 GMT Not After : Apr 24 10:01:39 2026 GMT Subject: CN=c752dacd1091f14823555fabef7f5e3eb92b58cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:74:5c:06:a5:6d:6f:6c:a0:74:53:b9:d2: c7:2e:c3:36:72:cc:37:fc:34:c8:65:25:15:1e:ca: 5f:22:04:90:d5:f4:b2:fc:dd:b0:55:cc:43:26:49: bf:53:06:f1:00:26:3f:45:d9:20:d2:c8:88:2a:5f: 79:21:b5:83:cc:dd:2d:2a:91:66:c9:b6:9a:6b:c0: 26:a4:95:d9:e7:82:6e:c6:d8:e4:0a:6e:04:03:6a: 73:7e:57:1d:9d:65:4f:91:6d:d5:ac:61:2c:80:53: c1:4c:a9:cc:07:a0:a9:d3:62:99:8f:1e:1a:8d:eb: 11:d9:82:7b:07:6f:86:21:99:96:5f:b1:aa:f7:ec: 59:d2:17:77:73:ec:e0:38:38:58:d5:d9:ba:99:c2: 0a:60:6f:99:cf:0f:f9:cd:15:b3:15:49:dd:3c:6d: a2:59:f6:17:b2:90:2f:cf:87:ed:b9:95:20:d2:ba: 88:3d:d5:bd:54:c7:68:a4:d3:24:67:78:cb:2b:63: 24:fe:fb:c6:ef:03:92:ce:4e:48:a0:15:2a:92:3c: a5:8e:27:d4:0d:8f:6b:c7:4f:75:18:cd:c8:0e:d5: 05:18:bf:8c:db:d6:6b:76:7f:b9:c2:37:cd:b5:66: 04:f4:80:69:82:96:ab:7e:6e:e3:8e:06:5a:9f:18: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:DA:CD:10:91:F1:48:23:55:5F:AB:EF:7F:5E:3E:B9:2B:58:CB X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:87:b2:f8:04:a4:a9:1f:8c:37:24:b1:13:7e:1a:5f:36:3c: ed:88:66:f1:b6:47:cc:67:eb:06:a5:1f:bd:f4:33:b8:23:ea: bc:9b:62:c0:38:4a:9f:b2:94:aa:14:e4:84:c4:45:6d:19:c4: c4:5e:0a:08:a0:f5:75:32:ab:01:38:52:c1:c0:05:f0:7c:62: cd:f6:09:e7:85:b6:b5:d6:ca:e4:93:e8:11:fc:be:df:67:64: 7c:eb:24:e2:28:b1:75:7b:76:46:d3:9a:ba:ca:51:72:22:5d: e3:0b:21:4d:84:4a:7e:9d:c9:94:40:c7:f6:d2:55:9a:17:ac: 16:8c:19:ae:4e:7c:62:b5:71:98:db:e7:7c:2c:4c:d2:f1:0e: c5:cc:1c:ee:09:f4:79:03:ab:1f:16:c1:ce:78:c0:44:87:4b: d1:5c:c7:c5:a5:af:34:14:7b:1d:e8:04:4e:c7:86:31:f3:24: 93:33:ba:4e:cb:d7:22:8d:ee:66:95:1d:24:f0:8d:4b:82:cd: c7:47:d2:eb:03:b0:d2:42:9d:e8:61:41:f0:1d:5c:24:05:a3: 88:25:09:3a:d2:5c:3f:b4:cc:6c:13:ea:71:68:7e:7a:dd:69: fd:88:b4:10:be:98:0d:cf:00:38:1a:49:83:55:dc:45:94:75: 4e:a2:d0:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ25yb3E0P56rPQlk9aUDVdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNDIzMTAwMTM5WhcNMjYwNDI0MTAwMTM5WjAzMTEwLwYDVQQD EyhjNzUyZGFjZDEwOTFmMTQ4MjM1NTVmYWJlZjdmNWUzZWI5MmI1OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9R0XAalbW9soHRTudLHLsM2csw3 /DTIZSUVHspfIgSQ1fSy/N2wVcxDJkm/UwbxACY/Rdkg0siIKl95IbWDzN0tKpFm ybaaa8AmpJXZ54JuxtjkCm4EA2pzflcdnWVPkW3VrGEsgFPBTKnMB6Cp02KZjx4a jesR2YJ7B2+GIZmWX7Gq9+xZ0hd3c+zgODhY1dm6mcIKYG+Zzw/5zRWzFUndPG2i WfYXspAvz4ftuZUg0rqIPdW9VMdopNMkZ3jLK2Mk/vvG7wOSzk5IoBUqkjyljifU DY9rx091GM3IDtUFGL+M29Zrdn+5wjfNtWYE9IBpgparfm7jjgZanximfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdS2s0QkfFII1Vfq+9/Xj65K1jLMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYey+ASk qR+MNySxE34aXzY87Yhm8bZHzGfrBqUfvfQzuCPqvJtiwDhKn7KUqhTkhMRFbRnE xF4KCKD1dTKrAThSwcAF8HxizfYJ54W2tdbK5JPoEfy+32dkfOsk4iixdXt2RtOa uspRciJd4wshTYRKfp3JlEDH9tJVmhesFowZrk58YrVxmNvnfCxM0vEOxcwc7gn0 eQOrHxbBznjARIdL0VzHxaWvNBR7HegETseGMfMkkzO6TsvXIo3uZpUdJPCNS4LN x0fS6wOw0kKd6GFB8B1cJAWjiCUJOtJcP7TMbBPqcWh+et1p/Yi0EL6YDc8AOBpJ g1XcRZR1TqLQlQ== -----END CERTIFICATE-----Generated at Thu Apr 23 13:55:08 2026 by rpki-client