$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Y5FtR6XF3gbbWDxAqAmYdUb6EvQVCpUioEbCurYOjvk= Subject key identifier: BC:FD:90:CF:B2:25:DF:68:DD:D0:35:6A:82:2F:85:58:9A:98:AB:EE Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019F848D0C554C84FAD6124937B09567E382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1425 Signing time: Tue 21 Jul 2026 12:01:03 +0000 Manifest this update: Tue 21 Jul 2026 12:01:03 +0000 Manifest next update: Wed 22 Jul 2026 12:01:03 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: OcKzFwpLxkddSGLsJOHvQ5d8Ek840p/jEMuWYf2VwPM=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:8d:0c:55:4c:84:fa:d6:12:49:37:b0:95:67:e3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jul 21 12:01:03 2026 GMT Not After : Jul 22 12:01:03 2026 GMT Subject: CN=bcfd90cfb225df68ddd0356a822f85589a98abee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:c1:ae:e5:56:49:dd:11:8e:84:3e:2a:f8: f5:58:e0:71:41:c5:3b:a8:8a:8a:a5:8c:ce:f4:4d: f4:41:7e:7b:53:10:ed:8c:e3:01:58:96:7a:85:ff: 75:f9:60:36:6f:42:29:b5:cd:9f:bc:71:bc:e9:0d: 60:21:3b:bb:76:9e:27:3c:6e:74:0e:ca:81:71:22: c2:6d:6d:6c:0f:c8:d7:e2:4a:a7:f4:f5:e5:cf:8c: a3:2c:9b:a8:5b:c5:01:92:8d:19:e8:d2:07:f5:35: 65:00:69:1b:0c:cd:83:bb:e1:4c:e6:04:11:93:f9: 2f:1e:09:1c:e4:7c:b0:a9:4d:51:82:b5:f7:9d:c3: 2d:a2:a3:ce:4e:82:3b:bf:60:48:8c:c4:02:8f:f8: 24:ce:ab:79:c0:6c:64:d2:92:28:03:4b:03:82:95: 5f:a9:86:f6:31:e1:b8:68:9a:00:3d:a9:df:c1:4f: 10:a0:5d:a7:22:14:05:bc:b2:4d:68:37:34:6d:5c: 6c:b3:db:c2:c9:d8:d8:c3:7b:1d:22:ff:f6:89:c1: 7a:b0:76:96:c8:a8:d8:40:ab:b0:1b:6f:e9:07:e8: 68:34:46:e5:fb:54:b9:0d:7e:45:43:26:c0:a6:10: 7e:cd:7f:3c:76:6d:3a:e9:df:f4:d7:2c:78:8c:d9: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FD:90:CF:B2:25:DF:68:DD:D0:35:6A:82:2F:85:58:9A:98:AB:EE X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2e:d4:8a:5b:72:d3:87:4c:42:8b:41:0e:c6:77:bb:44:20: 96:80:8f:48:a3:c6:6a:75:a4:99:4d:e0:6f:90:25:cd:21:7c: 3a:25:bb:b6:48:a3:a0:41:12:63:bc:75:13:73:a8:59:92:33: 70:f0:3a:3e:22:61:cd:c3:b9:bc:01:6e:60:3c:d7:01:75:ce: d5:d2:8b:d6:20:a1:7f:fd:19:0f:e7:a7:93:5e:0b:34:63:6c: 38:8d:5d:ce:b2:fb:2a:a5:63:c3:3e:fb:2c:5f:94:d7:da:f5: 7f:6b:90:44:fa:a5:4e:a7:66:2a:1d:db:ed:02:88:1f:6c:dd: 7f:b9:1e:55:48:00:74:95:2c:c6:9b:79:fd:c6:9e:0a:9f:a4: 3a:2f:12:b6:c2:93:60:e9:36:7a:cc:bd:82:89:83:59:c0:6d: 72:2b:4a:6c:a2:c7:07:92:d2:65:c9:f8:b4:6d:61:74:01:99: 27:69:a9:e5:60:7b:dc:f7:2d:d8:4c:99:a0:28:51:c0:4b:8c: 30:c5:5c:32:58:39:06:46:93:7e:c7:c5:fe:0b:c4:cf:0c:c3: 1a:d3:cd:9c:26:90:40:13:0b:bb:52:78:68:4d:43:d5:51:7f: 68:41:e1:88:0a:2c:fb:ee:c7:e9:5c:11:0e:0e:19:0d:34:c7: 57:d4:18:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+EjQxVTIT61hJJN7CVZ+OCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNzIxMTIwMTAzWhcNMjYwNzIyMTIwMTAzWjAzMTEwLwYDVQQD EyhiY2ZkOTBjZmIyMjVkZjY4ZGRkMDM1NmE4MjJmODU1ODlhOThhYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAPBruVWSd0RjoQ+Kvj1WOBxQcU7 qIqKpYzO9E30QX57UxDtjOMBWJZ6hf91+WA2b0Iptc2fvHG86Q1gITu7dp4nPG50 DsqBcSLCbW1sD8jX4kqn9PXlz4yjLJuoW8UBko0Z6NIH9TVlAGkbDM2Du+FM5gQR k/kvHgkc5HywqU1RgrX3ncMtoqPOToI7v2BIjMQCj/gkzqt5wGxk0pIoA0sDgpVf qYb2MeG4aJoAPanfwU8QoF2nIhQFvLJNaDc0bVxss9vCydjYw3sdIv/2icF6sHaW yKjYQKuwG2/pB+hoNEbl+1S5DX5FQybAphB+zX88dm066d/01yx4jNl2BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz9kM+yJd9o3dA1aoIvhViamKvuMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC7Uilty 04dMQotBDsZ3u0QgloCPSKPGanWkmU3gb5AlzSF8OiW7tkijoEESY7x1E3OoWZIz cPA6PiJhzcO5vAFuYDzXAXXO1dKL1iChf/0ZD+enk14LNGNsOI1dzrL7KqVjwz77 LF+U19r1f2uQRPqlTqdmKh3b7QKIH2zdf7keVUgAdJUsxpt5/caeCp+kOi8StsKT YOk2esy9gomDWcBtcitKbKLHB5LSZcn4tG1hdAGZJ2mp5WB73Pct2EyZoChRwEuM MMVcMlg5BkaTfsfF/gvEzwzDGtPNnCaQQBMLu1J4aE1D1VF/aEHhiAos++7H6VwR Dg4ZDTTHV9QYQg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:13:24 2026 by rpki-client