$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: ltv4vptfNtX7yslcKszDwlWUXoKQh5bEwYBVwX8bAwk= Subject key identifier: 5F:8B:D2:59:CE:D6:CA:FC:5E:7C:D6:87:7E:66:03:50:1B:83:F5:DF Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A011F5700FEB05C96388883D5FFC5CFE48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 146F Signing time: Mon 17 Aug 2026 23:01:32 +0000 Manifest this update: Mon 17 Aug 2026 23:01:32 +0000 Manifest next update: Tue 18 Aug 2026 23:01:32 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: YYfQD0zMGIcTqXzut/XLNQVrtzjDnTSjw/JM6LS5zwk=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 20:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:11:f5:70:0f:eb:05:c9:63:88:88:3d:5f:fc:5c:fe:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 17 23:01:32 2026 GMT Not After : Aug 18 23:01:32 2026 GMT Subject: CN=5f8bd259ced6cafc5e7cd6877e6603501b83f5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:09:a9:0f:1c:99:d3:a0:7d:f0:19:04:a3: c0:82:b1:ae:d6:1a:1f:44:a2:b3:6a:5c:4b:89:de: e1:8c:c6:31:07:3d:a6:a8:68:22:95:e3:33:12:b1: 88:53:b3:b1:99:95:65:66:6a:66:10:a1:48:c6:92: 6d:d6:9c:27:f6:91:5b:05:9c:d7:d4:bd:68:cf:26: 1f:12:f4:c9:d9:a4:8d:ef:ac:d4:b8:a2:28:12:b4: 3e:d8:12:1e:00:24:f5:c6:9f:93:d5:30:61:1c:46: c2:c7:6e:39:a9:8f:c9:5e:ca:5f:56:31:59:19:5a: b5:a2:12:cc:18:40:b7:ac:1d:f7:9a:c7:c3:09:34: f6:96:3e:cd:77:49:b3:f7:d8:31:bb:49:48:07:57: 9f:b6:ad:89:04:35:08:c8:0c:ce:2b:d1:7a:e9:20: 35:2c:37:39:7e:55:69:d3:da:93:c1:80:43:a9:67: e1:69:18:cf:12:9e:cb:f5:e3:6c:91:4e:43:8c:52: 5d:b5:e8:c7:ce:8c:95:1b:b8:d9:13:b1:61:48:69: 68:bb:e2:fc:19:13:bb:68:96:33:e5:5a:c2:9a:8f: 74:44:40:34:e0:43:58:66:fd:76:3b:92:0a:a8:69: 27:2b:34:66:db:ef:86:7b:25:ba:fe:6c:7a:e6:94: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:D2:59:CE:D6:CA:FC:5E:7C:D6:87:7E:66:03:50:1B:83:F5:DF X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:21:b5:01:74:3b:16:b1:e5:62:89:0a:68:92:07:1d:ca:31: 58:28:5d:b1:81:e6:b5:7b:9c:55:a9:31:c0:aa:a8:e5:bf:f1: 5a:ac:b8:01:5b:69:d0:b9:50:a3:64:e1:93:5c:00:f9:37:0b: d1:90:96:f2:c7:7b:d8:f9:10:10:9e:65:9b:de:57:41:6c:33: 79:7a:ba:a4:48:d2:28:c0:10:c3:9e:74:78:51:21:ea:04:43: 9e:2b:91:8b:64:8d:de:87:97:89:3e:b3:6d:49:fe:8f:bc:4f: 8a:db:99:01:a2:ce:65:29:11:28:a4:9a:40:a5:2c:0f:7c:58: d8:d5:35:33:af:04:c2:e3:bd:1c:4c:5e:d9:9e:37:a0:29:6e: ce:37:9b:26:06:0b:d5:f2:af:ae:de:8b:59:92:9e:b4:dc:ae: 2c:2c:a0:11:2e:7b:13:9a:91:cf:ed:cc:4d:80:e3:ea:d2:a5: f2:5f:fd:ee:93:b8:ba:fd:f9:9e:c9:d5:c9:13:0f:5e:dc:cf: ae:09:67:5e:8f:17:54:a0:17:2c:36:d9:84:bc:b2:65:50:bd: 80:e7:c9:7e:ec:1a:07:40:6b:05:81:64:19:d4:80:42:22:09: cf:02:b3:36:1c:66:46:3c:12:39:0d:b2:ef:8e:81:0b:48:0a: ca:43:8c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAR9XAP6wXJY4iIPV/8XP5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODE3MjMwMTMyWhcNMjYwODE4MjMwMTMyWjAzMTEwLwYDVQQD Eyg1ZjhiZDI1OWNlZDZjYWZjNWU3Y2Q2ODc3ZTY2MDM1MDFiODNmNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonQJqQ8cmdOgffAZBKPAgrGu1hof RKKzalxLid7hjMYxBz2mqGgileMzErGIU7OxmZVlZmpmEKFIxpJt1pwn9pFbBZzX 1L1ozyYfEvTJ2aSN76zUuKIoErQ+2BIeACT1xp+T1TBhHEbCx245qY/JXspfVjFZ GVq1ohLMGEC3rB33msfDCTT2lj7Nd0mz99gxu0lIB1eftq2JBDUIyAzOK9F66SA1 LDc5flVp09qTwYBDqWfhaRjPEp7L9eNskU5DjFJdtejHzoyVG7jZE7FhSGlou+L8 GRO7aJYz5VrCmo90REA04ENYZv12O5IKqGknKzRm2++GeyW6/mx65pQaOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+L0lnO1sr8XnzWh35mA1Abg/XfMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiG1AXQ7 FrHlYokKaJIHHcoxWChdsYHmtXucVakxwKqo5b/xWqy4AVtp0LlQo2Thk1wA+TcL 0ZCW8sd72PkQEJ5lm95XQWwzeXq6pEjSKMAQw550eFEh6gRDniuRi2SN3oeXiT6z bUn+j7xPituZAaLOZSkRKKSaQKUsD3xY2NU1M68EwuO9HExe2Z43oCluzjebJgYL 1fKvrt6LWZKetNyuLCygES57E5qRz+3MTYDj6tKl8l/97pO4uv35nsnVyRMPXtzP rglnXo8XVKAXLDbZhLyyZVC9gOfJfuwaB0BrBYFkGdSAQiIJzwKzNhxmRjwSOQ2y 746BC0gKykOMQw== -----END CERTIFICATE-----Generated at Tue Aug 18 04:00:45 2026 by rpki-client