$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: ifB7DNO72RLbt+6XDidkJHQR/uZxolDYEv+ZATo6GFE= Subject key identifier: 92:57:29:FB:8B:E8:58:B7:45:EB:39:6D:E5:79:CA:96:8E:EC:76:EA Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019FA37323DD7AF0A45ED833216C8F4CB3A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1435 Signing time: Mon 27 Jul 2026 12:00:59 +0000 Manifest this update: Mon 27 Jul 2026 12:00:59 +0000 Manifest next update: Tue 28 Jul 2026 12:00:59 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: hmO2YQYWNlvBXiwaDH27ziwiqQxzPVEHafPMCtE8icM=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a3:73:23:dd:7a:f0:a4:5e:d8:33:21:6c:8f:4c:b3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 27 12:00:59 2026 GMT Not After : Jul 28 12:00:59 2026 GMT Subject: CN=925729fb8be858b745eb396de579ca968eec76ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:05:02:85:64:b7:f7:88:4d:d7:65:5d:68: a6:27:fd:72:c6:13:1c:d1:30:84:79:be:b2:db:a4: 52:9d:ef:44:44:b2:db:18:03:b7:c1:c7:58:e4:8c: a8:9f:34:b9:f2:c0:88:18:b8:f9:ff:b1:37:4f:ef: 02:be:b2:d4:e8:89:ec:45:fc:1d:b5:df:a3:1a:52: a3:23:16:e0:27:cc:6f:b0:98:3b:8f:a3:ea:dc:af: 5f:27:09:ba:12:71:96:01:5f:e4:58:40:1d:a9:51: ac:38:a0:29:f9:58:22:03:9b:42:a6:2c:63:4a:48: 0d:e8:be:ff:17:13:2e:ba:43:ec:65:62:da:1f:65: a3:be:51:19:9b:02:7d:5b:3c:69:76:64:db:14:aa: f1:8f:28:0d:1f:be:f3:60:be:e5:a9:68:e7:22:e7: 02:43:31:5d:40:7f:dc:90:23:22:9f:ae:e3:1d:3f: d7:ef:31:e8:45:9e:f0:42:33:2c:96:69:40:44:83: 02:5e:a9:b5:7a:bb:59:f7:67:47:98:75:f8:b2:58: 52:a7:f3:af:02:6a:a5:b5:4b:be:80:7f:98:cc:41: dd:f0:87:2e:a2:51:34:c5:55:36:76:c9:0f:99:24: a4:63:12:92:6f:fd:d6:9e:0a:9a:f7:fc:ff:fb:98: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:57:29:FB:8B:E8:58:B7:45:EB:39:6D:E5:79:CA:96:8E:EC:76:EA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:9a:02:d7:46:56:b0:6c:a3:79:00:a8:02:db:61:93:1c:60: b1:29:9e:a3:b4:0b:22:83:30:54:17:db:ba:7f:0a:3f:7f:cd: 3b:ec:23:c2:97:7b:be:b6:d2:05:25:be:e4:1d:cb:be:35:14: 0a:ea:39:c5:06:66:26:19:20:6b:0b:c9:ef:84:92:07:14:47: 4a:34:86:4d:51:d0:4d:60:bb:dd:55:98:dc:bb:06:e5:82:49: ca:4a:26:53:f3:40:e2:9d:51:fb:35:31:96:f3:fb:25:37:93: 62:37:b3:87:cb:62:fe:08:5c:48:db:d0:0b:91:43:bb:db:e4: 4e:dc:6b:e7:1c:c4:cd:0a:23:50:a2:0a:e8:be:7b:50:1e:85: ad:3d:2e:28:b0:4e:2e:8e:21:e2:17:45:ee:28:26:e5:e2:f4: 44:dc:df:6c:cb:34:d5:21:11:b4:91:47:a4:6a:7d:5a:f3:93: ee:68:61:5b:ad:16:56:9d:4a:8f:01:bb:75:bb:ff:13:8e:73: 18:fb:6f:c5:89:09:c1:98:d6:48:6d:74:30:d6:a0:36:48:d4: f3:87:ff:6e:8f:15:6a:18:90:63:11:24:dc:d8:2a:7f:b1:29: ec:5f:9c:84:c8:5f:ae:24:b3:08:5a:50:2c:70:c2:50:ab:1a: de:e9:9c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+jcyPdevCkXtgzIWyPTLOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzI3MTIwMDU5WhcNMjYwNzI4MTIwMDU5WjAzMTEwLwYDVQQD Eyg5MjU3MjlmYjhiZTg1OGI3NDVlYjM5NmRlNTc5Y2E5NjhlZWM3NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhcFAoVkt/eITddlXWimJ/1yxhMc 0TCEeb6y26RSne9ERLLbGAO3wcdY5IyonzS58sCIGLj5/7E3T+8CvrLU6InsRfwd td+jGlKjIxbgJ8xvsJg7j6Pq3K9fJwm6EnGWAV/kWEAdqVGsOKAp+VgiA5tCpixj SkgN6L7/FxMuukPsZWLaH2WjvlEZmwJ9WzxpdmTbFKrxjygNH77zYL7lqWjnIucC QzFdQH/ckCMin67jHT/X7zHoRZ7wQjMslmlARIMCXqm1ertZ92dHmHX4slhSp/Ov AmqltUu+gH+YzEHd8IcuolE0xVU2dskPmSSkYxKSb/3Wngqa9/z/+5i8gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJXKfuL6Fi3Res5beV5ypaO7HbqMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpoC10ZW sGyjeQCoAtthkxxgsSmeo7QLIoMwVBfbun8KP3/NO+wjwpd7vrbSBSW+5B3LvjUU Cuo5xQZmJhkgawvJ74SSBxRHSjSGTVHQTWC73VWY3LsG5YJJykomU/NA4p1R+zUx lvP7JTeTYjezh8ti/ghcSNvQC5FDu9vkTtxr5xzEzQojUKIK6L57UB6FrT0uKLBO Lo4h4hdF7igm5eL0RNzfbMs01SERtJFHpGp9WvOT7mhhW60WVp1KjwG7dbv/E45z GPtvxYkJwZjWSG10MNagNkjU84f/bo8VahiQYxEk3Ngqf7Ep7F+chMhfriSzCFpQ LHDCUKsa3umchQ== -----END CERTIFICATE-----Generated at Mon Jul 27 21:48:49 2026 by rpki-client