$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: ZO3K2OYXZDrz4V+i3LocD/jjLv1AaoM/XZ5Di/3h90s= Subject key identifier: 46:2A:3F:E7:FB:43:6D:CC:44:44:49:C7:89:C1:00:85:B2:88:87:6F Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FB2E6DDBA3B016B1456998F7DE4BCC0D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 143D Signing time: Thu 30 Jul 2026 12:01:42 +0000 Manifest this update: Thu 30 Jul 2026 12:01:42 +0000 Manifest next update: Fri 31 Jul 2026 12:01:42 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 9BKydsaINGdFaqdCf16QFkhIQQTUoUrS4DfPPc6aXqU=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Jul 2026 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:b2:e6:dd:ba:3b:01:6b:14:56:99:8f:7d:e4:bc:c0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 30 12:01:42 2026 GMT Not After : Jul 31 12:01:42 2026 GMT Subject: CN=462a3fe7fb436dcc444449c789c10085b288876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:75:21:44:6a:20:1e:34:53:5b:03:c3:bf:df: a6:40:4e:b6:df:7b:62:f9:c7:48:7c:de:c4:38:64: 10:e8:ce:20:8c:4c:3e:f3:5c:f2:d7:5b:68:77:14: 89:9b:56:d0:65:cf:eb:e9:85:3b:95:1e:72:c5:03: 43:69:a9:72:59:9f:2c:59:49:22:b1:89:be:68:40: bf:c4:c0:79:24:75:5e:7d:f0:95:5d:08:2e:2e:1a: c9:9c:13:df:02:c4:f4:e6:c1:6e:64:40:fd:f1:70: 3c:ee:11:9b:d1:a2:e2:fa:27:f1:60:a5:cd:d4:d1: 28:8a:29:92:3e:9b:1b:56:aa:77:b5:7f:01:99:50: 61:3d:a7:eb:dd:1f:ed:7f:c8:e6:60:ec:8e:dc:15: b8:e5:a6:93:51:25:24:bd:c2:67:d0:57:1d:98:52: d7:03:fc:38:cd:d9:e2:03:51:83:31:89:c0:7f:73: 9f:1a:71:df:85:74:81:92:94:63:b9:23:7f:4f:2f: e5:9b:4d:e7:7a:1b:01:90:92:45:94:53:ac:83:04: f0:7c:7c:04:33:90:5d:71:02:51:80:05:c7:75:17: 4e:c4:01:23:87:d0:98:df:66:a4:96:db:3b:52:cd: 66:3e:12:6e:d6:08:f0:16:20:46:30:ba:b1:60:89: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:3F:E7:FB:43:6D:CC:44:44:49:C7:89:C1:00:85:B2:88:87:6F X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6d:4f:f2:fb:3b:7a:b0:a5:db:cb:f2:6c:91:51:09:0a:4e: 3f:9d:6e:15:32:cd:65:55:ff:af:7d:ae:cc:8a:77:1c:47:8e: c0:7f:e5:22:ae:76:c7:36:de:22:3d:39:dc:38:aa:82:f2:8a: 03:79:65:2c:9a:19:06:85:4d:34:61:cd:83:dd:d8:95:af:fa: f8:81:1f:d2:9d:db:33:18:64:00:33:97:df:fd:e5:de:74:3a: 69:c5:32:ed:c6:35:5d:b5:54:13:e3:00:a6:22:5d:3d:8f:8b: 30:45:47:f0:48:43:a9:f2:30:2b:7b:84:59:f2:81:3b:58:7d: 52:79:a1:aa:ff:29:c7:16:56:16:df:ac:da:33:d6:ab:2b:96: 49:f1:d3:54:a0:17:53:69:fc:e1:14:63:43:6b:b7:ca:94:53: 66:59:f9:7e:fc:9c:9e:37:81:6d:0b:ef:2f:0b:c7:30:a4:de: a4:18:8b:58:4c:14:4f:83:1b:e1:c0:e7:92:10:cd:9a:9f:b8: 55:df:19:c9:48:15:3d:f9:e8:a7:4e:1d:49:8f:f2:53:a6:ad: 3a:61:54:09:fc:01:24:a7:f1:ae:2b:ba:cb:bd:51:ee:d0:38: 5b:23:a6:e7:93:b6:cd:49:39:fd:b6:1a:b8:65:1b:f9:84:c1: 69:c1:cf:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+y5t26OwFrFFaZj33kvMDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzMwMTIwMTQyWhcNMjYwNzMxMTIwMTQyWjAzMTEwLwYDVQQD Eyg0NjJhM2ZlN2ZiNDM2ZGNjNDQ0NDQ5Yzc4OWMxMDA4NWIyODg4NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinUhRGogHjRTWwPDv9+mQE6233ti +cdIfN7EOGQQ6M4gjEw+81zy11todxSJm1bQZc/r6YU7lR5yxQNDaalyWZ8sWUki sYm+aEC/xMB5JHVeffCVXQguLhrJnBPfAsT05sFuZED98XA87hGb0aLi+ifxYKXN 1NEoiimSPpsbVqp3tX8BmVBhPafr3R/tf8jmYOyO3BW45aaTUSUkvcJn0FcdmFLX A/w4zdniA1GDMYnAf3OfGnHfhXSBkpRjuSN/Ty/lm03nehsBkJJFlFOsgwTwfHwE M5BdcQJRgAXHdRdOxAEjh9CY32aklts7Us1mPhJu1gjwFiBGMLqxYImPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYqP+f7Q23MRERJx4nBAIWyiIdvMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAem1P8vs7 erCl28vybJFRCQpOP51uFTLNZVX/r32uzIp3HEeOwH/lIq52xzbeIj053DiqgvKK A3llLJoZBoVNNGHNg93Yla/6+IEf0p3bMxhkADOX3/3l3nQ6acUy7cY1XbVUE+MA piJdPY+LMEVH8EhDqfIwK3uEWfKBO1h9Unmhqv8pxxZWFt+s2jPWqyuWSfHTVKAX U2n84RRjQ2u3ypRTZln5fvycnjeBbQvvLwvHMKTepBiLWEwUT4Mb4cDnkhDNmp+4 Vd8ZyUgVPfnop04dSY/yU6atOmFUCfwBJKfxriu6y71R7tA4WyOm55O2zUk5/bYa uGUb+YTBacHPuw== -----END CERTIFICATE-----Generated at Thu Jul 30 22:21:02 2026 by rpki-client