$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: GNr+wcJN8fLlGZouVdsc7NTslj94hKcntFEsvBxBPeA= Subject key identifier: FF:24:4C:9C:3B:C9:B7:54:79:A3:74:ED:F8:7F:27:00:22:A8:A8:EC Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0404E8852DA8370904906DA4E50C4B406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1487 Signing time: Wed 26 Aug 2026 23:01:23 +0000 Manifest this update: Wed 26 Aug 2026 23:01:23 +0000 Manifest next update: Thu 27 Aug 2026 23:01:23 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: HIh9zdq0J7czxs9TzSCclPWxFxhns8a8pvICucuhs2o=) 15: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 20:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:40:4e:88:52:da:83:70:90:49:06:da:4e:50:c4:b4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 26 23:01:23 2026 GMT Not After : Aug 27 23:01:23 2026 GMT Subject: CN=ff244c9c3bc9b75479a374edf87f270022a8a8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f9:03:a7:1f:4d:ea:21:9a:b5:ba:e1:52:46: 04:51:39:01:61:00:37:9f:44:28:ea:29:da:7a:d7: ec:75:68:a7:96:a2:6d:7f:49:db:83:7c:20:56:6b: 50:cf:07:6d:e4:c2:1d:7b:72:35:e9:69:94:5a:db: ca:81:a1:6c:9a:99:53:78:69:b2:4d:5e:89:e6:b7: 61:b0:7a:f7:08:8e:15:fe:9e:ac:c9:9d:b0:66:69: 44:7c:70:37:ae:fa:a0:40:84:18:93:76:2b:30:12: b2:c2:b4:dd:87:55:e3:11:50:46:ba:bf:14:71:7f: f1:e3:ac:9b:21:25:8b:4b:35:b0:f8:2f:a2:2f:ac: ee:21:8e:9b:71:8a:2f:1c:c8:9e:1a:bf:4d:09:81: c7:96:cd:de:a3:ac:12:24:2f:67:c0:94:d4:26:7e: 77:71:a4:01:d4:c0:a1:55:81:16:65:00:8c:42:41: c5:65:e5:cb:78:2c:7e:37:3c:bc:07:b9:43:57:bc: d3:e3:d5:67:0b:e2:e5:8d:78:f4:a7:5b:f3:e7:01: e5:80:06:ff:de:c3:8a:e8:3d:95:42:76:13:c7:9e: 02:b2:d2:1c:d8:e1:7a:c4:2f:f7:d8:1b:d6:37:dd: 17:97:2b:66:4b:14:d9:19:7b:28:f5:15:ff:19:95: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:4C:9C:3B:C9:B7:54:79:A3:74:ED:F8:7F:27:00:22:A8:A8:EC X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b1:5f:d8:1b:09:1e:b7:d0:1f:98:e1:70:44:a3:01:3f:3e: 29:d9:8c:cb:56:6c:c4:85:56:7d:45:7a:92:0f:c9:71:58:86: 8b:fc:3c:e7:72:cc:24:e7:07:75:53:f6:e7:5d:e9:f5:97:89: 4d:1a:32:63:65:59:54:a0:e7:5b:3a:0f:01:02:6b:68:b8:f2: 29:17:b0:05:0d:7d:97:05:58:c7:b4:dc:1e:8e:61:79:b3:27: ec:16:39:00:2c:5a:2b:02:25:40:b1:03:f7:31:bf:ee:28:c3: 67:ba:70:38:97:4e:9e:b0:49:fb:da:13:68:75:f6:3d:9a:ee: 74:4e:02:10:ac:73:0d:28:4e:73:63:19:88:0c:d0:59:a2:65: 81:75:4b:07:f1:8d:28:89:03:8d:e3:92:72:90:21:c3:1b:7b: fe:8e:f9:db:5e:84:a1:44:37:a5:7f:e7:4e:ce:5b:d0:6e:36: 20:12:14:c2:b0:25:34:be:12:2c:2a:f7:a8:fe:cf:6a:52:d5: 5a:af:d4:15:81:dd:e8:28:9e:4d:00:4f:46:3e:a2:90:e5:0f: f5:7e:5a:53:ca:08:59:79:d9:89:4c:ca:c0:60:75:e1:50:f2: 01:f7:11:1d:26:11:b6:63:8c:55:6e:67:47:8a:35:a7:77:40: ba:8b:df:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBATohS2oNwkEkG2k5QxLQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwODI2MjMwMTIzWhcNMjYwODI3MjMwMTIzWjAzMTEwLwYDVQQD EyhmZjI0NGM5YzNiYzliNzU0NzlhMzc0ZWRmODdmMjcwMDIyYThhOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PkDpx9N6iGatbrhUkYEUTkBYQA3 n0Qo6inaetfsdWinlqJtf0nbg3wgVmtQzwdt5MIde3I16WmUWtvKgaFsmplTeGmy TV6J5rdhsHr3CI4V/p6syZ2wZmlEfHA3rvqgQIQYk3YrMBKywrTdh1XjEVBGur8U cX/x46ybISWLSzWw+C+iL6zuIY6bcYovHMieGr9NCYHHls3eo6wSJC9nwJTUJn53 caQB1MChVYEWZQCMQkHFZeXLeCx+Nzy8B7lDV7zT49VnC+LljXj0p1vz5wHlgAb/ 3sOK6D2VQnYTx54CstIc2OF6xC/32BvWN90XlytmSxTZGXso9RX/GZW6tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8kTJw7ybdUeaN07fh/JwAiqKjsMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrFf2BsJ HrfQH5jhcESjAT8+KdmMy1ZsxIVWfUV6kg/JcViGi/w853LMJOcHdVP2513p9ZeJ TRoyY2VZVKDnWzoPAQJraLjyKRewBQ19lwVYx7TcHo5hebMn7BY5ACxaKwIlQLED 9zG/7ijDZ7pwOJdOnrBJ+9oTaHX2PZrudE4CEKxzDShOc2MZiAzQWaJlgXVLB/GN KIkDjeOScpAhwxt7/o75216EoUQ3pX/nTs5b0G42IBIUwrAlNL4SLCr3qP7PalLV Wq/UFYHd6CieTQBPRj6ikOUP9X5aU8oIWXnZiUzKwGB14VDyAfcRHSYRtmOMVW5n R4o1p3dAuovfNw== -----END CERTIFICATE-----Generated at Thu Aug 27 05:04:34 2026 by rpki-client