$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: rJMi60k7gFrMebn95FhZ5VLKCScp+wyEUzJOEbYsP+o= Subject key identifier: 24:1C:35:6B:76:5A:5F:92:57:AC:7C:B9:B2:5A:F3:31:E9:11:73:AE Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019D401F7DB9E25360356D49B5C8A757185C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 12F6 Signing time: Mon 30 Mar 2026 19:01:38 +0000 Manifest this update: Mon 30 Mar 2026 19:01:38 +0000 Manifest next update: Tue 31 Mar 2026 19:01:38 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 6Qn7q8fcjfeJaHsjx0Kc+M2HoCezL7ENJSEmQtGSGJM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 31 Mar 2026 14:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:40:1f:7d:b9:e2:53:60:35:6d:49:b5:c8:a7:57:18:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Mar 30 19:01:38 2026 GMT Not After : Mar 31 19:01:38 2026 GMT Subject: CN=241c356b765a5f9257ac7cb9b25af331e91173ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:74:c2:5e:1b:43:31:43:34:dc:2d:05:d7: 17:fa:bf:3c:7c:81:46:e1:28:b9:9f:3c:6e:54:66: 74:a9:ec:c8:88:2b:a2:e1:89:b5:9f:ff:f4:c6:64: b6:db:bb:f4:29:29:cf:b3:ec:06:63:c6:06:3f:73: 21:f2:ba:3a:3c:7b:69:ce:dc:8d:cb:bc:62:fa:03: a6:0a:14:b9:87:cc:f9:10:7e:81:d3:02:93:3a:33: 12:98:3f:8d:cd:7b:f7:82:93:5c:76:a1:5d:a4:4a: 51:ed:f3:42:05:05:29:ad:7a:b4:d0:b4:ff:d0:19: c4:4b:0e:43:f2:76:fd:08:24:c1:fb:0b:0e:56:98: c3:11:68:ff:57:57:73:7a:19:a3:6b:13:4d:d4:c6: e0:d6:0e:43:16:41:ec:7d:09:4a:af:b7:5a:9c:47: fa:38:14:61:ff:ae:7b:48:55:63:0d:60:da:79:c3: ba:48:54:05:89:66:6c:4c:54:eb:40:9e:c9:cf:b8: b7:b6:b7:47:62:8f:41:fa:b1:e2:dd:3d:d2:ab:6e: 6c:de:1d:e6:b4:de:34:23:f4:4e:11:99:4f:0e:e5: 46:83:2f:23:d8:32:21:ff:2d:13:5f:c4:27:79:af: 41:27:89:58:ae:25:97:f8:23:26:91:fc:a3:12:e9: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1C:35:6B:76:5A:5F:92:57:AC:7C:B9:B2:5A:F3:31:E9:11:73:AE X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:dc:97:9c:d9:70:22:bb:52:b2:45:e1:e7:7f:23:01:58: 3c:d6:81:bb:7a:f1:6e:af:ae:85:1c:27:30:12:10:73:6d:12: 88:5d:39:dd:43:82:cb:e3:32:2d:a5:23:3c:e4:93:be:af:9a: a2:c9:09:7b:9c:e4:49:74:ee:03:6a:87:ad:40:62:1e:39:19: 49:cc:05:97:7b:d8:00:20:a3:01:9f:9c:47:4b:8d:1f:00:b4: 84:a6:9b:dc:ef:63:f0:0a:56:4e:68:e3:f5:34:76:44:44:9a: ba:82:df:29:20:d7:ae:0d:11:d3:d0:5e:2d:ff:14:27:3d:9c: 2a:24:79:57:99:40:23:e7:a1:91:df:97:17:0d:aa:b7:dc:0f: 53:8e:88:56:e8:11:c5:8a:ce:aa:e3:11:f5:a0:68:c4:06:a9: e3:7d:7d:3d:5e:92:01:08:21:f0:11:a2:ed:23:50:c4:97:17: f5:42:68:dc:60:84:c7:47:17:e9:ff:e1:ee:1c:fb:5b:e0:c4: 82:51:cf:d4:33:54:e4:4d:9a:bb:06:a6:96:99:e5:5b:19:3a: 20:90:da:35:32:ba:48:d1:23:46:cb:f5:b7:4b:e5:aa:e3:ab: 0f:30:2c:82:aa:74:39:e7:f2:1c:36:7b:47:63:32:c1:6c:22: b6:72:b6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1AH3254lNgNW1JtcinVxhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMzMwMTkwMTM4WhcNMjYwMzMxMTkwMTM4WjAzMTEwLwYDVQQD EygyNDFjMzU2Yjc2NWE1ZjkyNTdhYzdjYjliMjVhZjMzMWU5MTE3M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6R0wl4bQzFDNNwtBdcX+r88fIFG 4Si5nzxuVGZ0qezIiCui4Ym1n//0xmS227v0KSnPs+wGY8YGP3Mh8ro6PHtpztyN y7xi+gOmChS5h8z5EH6B0wKTOjMSmD+NzXv3gpNcdqFdpEpR7fNCBQUprXq00LT/ 0BnESw5D8nb9CCTB+wsOVpjDEWj/V1dzehmjaxNN1Mbg1g5DFkHsfQlKr7danEf6 OBRh/657SFVjDWDaecO6SFQFiWZsTFTrQJ7Jz7i3trdHYo9B+rHi3T3Sq25s3h3m tN40I/ROEZlPDuVGgy8j2DIh/y0TX8Qnea9BJ4lYriWX+CMmkfyjEumvYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQcNWt2Wl+SV6x8ubJa8zHpEXOuMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrrcl5zZ cCK7UrJF4ed/IwFYPNaBu3rxbq+uhRwnMBIQc20SiF053UOCy+MyLaUjPOSTvq+a oskJe5zkSXTuA2qHrUBiHjkZScwFl3vYACCjAZ+cR0uNHwC0hKab3O9j8ApWTmjj 9TR2RESauoLfKSDXrg0R09BeLf8UJz2cKiR5V5lAI+ehkd+XFw2qt9wPU46IVugR xYrOquMR9aBoxAap4319PV6SAQgh8BGi7SNQxJcX9UJo3GCEx0cX6f/h7hz7W+DE glHP1DNU5E2auwamlpnlWxk6IJDaNTK6SNEjRsv1t0vlquOrDzAsgqp0OefyHDZ7 R2MywWwitnK2lw== -----END CERTIFICATE-----Generated at Mon Mar 30 22:32:23 2026 by rpki-client