$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: +UE3j0qR1rK8+asMmlDBjqRnF7DmQtL6J+6sXhQg+3g= Subject key identifier: 89:F2:E8:D5:0C:1A:10:1F:FF:71:B9:E1:62:D3:19:49:65:E7:AB:DF Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019E5937E131CB39681EEBEB36CF23557459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1389 Signing time: Sun 24 May 2026 09:01:34 +0000 Manifest this update: Sun 24 May 2026 09:01:34 +0000 Manifest next update: Mon 25 May 2026 09:01:34 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: X3qe5uPh+Ms7qLDzIzC7IIQhNC/7/yTqmmO3WblrU0w=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:59:37:e1:31:cb:39:68:1e:eb:eb:36:cf:23:55:74:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 24 09:01:34 2026 GMT Not After : May 25 09:01:34 2026 GMT Subject: CN=89f2e8d50c1a101fff71b9e162d3194965e7abdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:86:54:b7:8c:74:15:4c:18:06:ff:f8:61:ac: 23:c6:04:24:7f:b1:5f:9d:e6:0d:66:8b:30:bb:cb: 39:78:b7:9c:ce:54:a1:aa:61:b6:e8:13:07:8d:4f: 85:84:10:f6:08:ac:c7:7b:80:b7:81:34:0e:e0:94: 03:93:03:cb:cb:1e:07:0e:b8:35:0c:2a:c7:b8:92: cb:37:f6:43:f1:4c:35:25:54:4d:05:57:37:8a:cc: 48:38:85:fe:da:e3:7b:0f:72:12:70:14:34:1b:c3: 6b:e9:e7:3f:42:df:64:7e:c4:64:5e:ba:2e:52:16: 8c:23:0f:4d:05:65:3c:30:95:9d:f8:00:f9:5d:f3: 44:b4:55:1c:8b:b7:5f:0d:ee:a5:e6:44:63:0f:78: d5:f7:c7:11:e6:f5:f5:c6:a6:7d:ef:17:4a:56:1e: 68:9d:70:1b:35:42:69:ef:ad:f7:d0:58:8c:31:8e: 47:5a:92:de:14:c8:9b:d2:af:69:e1:af:0b:27:eb: b2:29:70:a4:8b:26:4d:4d:f4:25:e8:5d:90:87:cd: 9a:6b:d6:0e:e2:83:23:7e:15:88:15:d6:7a:c0:1f: 84:cf:2f:29:c0:be:b1:32:9f:98:f0:bf:4c:88:32: 8b:1d:67:0d:87:3c:85:79:56:e6:ae:53:72:f8:b4: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F2:E8:D5:0C:1A:10:1F:FF:71:B9:E1:62:D3:19:49:65:E7:AB:DF X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b9:21:56:62:34:9b:24:5a:81:80:8f:bc:cc:19:6f:ad:72: 96:c2:1d:bf:df:3f:62:05:f2:46:89:71:ad:32:0d:72:b7:be: 83:f7:00:60:b2:c1:94:64:5b:6c:bb:05:e2:83:bc:76:97:cf: bc:40:59:13:53:97:97:99:56:93:c1:c5:aa:cf:bb:c8:04:02: 92:f5:89:d4:2f:24:bb:3f:6c:f3:5a:e0:79:34:0f:8c:c2:5a: 9e:d4:ee:06:7d:73:70:74:d0:ba:83:7a:b3:8a:a3:02:4f:0f: d5:a4:1e:a8:13:e5:d6:9a:1b:98:50:77:75:d4:b6:f1:14:dc: de:e3:7b:bb:e1:4c:ac:8b:b8:98:d0:77:82:d2:7f:b9:44:9b: dc:b6:88:53:f6:81:1b:f5:e7:0f:dc:4c:6e:cb:92:f2:03:34: 52:aa:d5:11:c9:56:f7:f8:d9:73:bb:12:a0:b0:63:ef:91:21: 8c:8d:77:63:29:89:67:92:3b:50:8f:80:7d:7d:37:64:ab:a9: 8d:f3:cd:e8:59:9c:0a:5e:9e:d0:c7:ff:19:00:26:5a:13:6c: a8:46:0e:bf:2a:29:60:20:f1:90:7a:09:f6:cc:5b:24:1a:46: 1a:55:2b:fc:0b:6c:b7:17:34:37:80:d3:a5:05:9b:43:3b:ff: 2f:24:86:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5ZN+ExyzloHuvrNs8jVXRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNTI0MDkwMTM0WhcNMjYwNTI1MDkwMTM0WjAzMTEwLwYDVQQD Eyg4OWYyZThkNTBjMWExMDFmZmY3MWI5ZTE2MmQzMTk0OTY1ZTdhYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ZUt4x0FUwYBv/4YawjxgQkf7Ff neYNZoswu8s5eLeczlShqmG26BMHjU+FhBD2CKzHe4C3gTQO4JQDkwPLyx4HDrg1 DCrHuJLLN/ZD8Uw1JVRNBVc3isxIOIX+2uN7D3IScBQ0G8Nr6ec/Qt9kfsRkXrou UhaMIw9NBWU8MJWd+AD5XfNEtFUci7dfDe6l5kRjD3jV98cR5vX1xqZ97xdKVh5o nXAbNUJp76330FiMMY5HWpLeFMib0q9p4a8LJ+uyKXCkiyZNTfQl6F2Qh82aa9YO 4oMjfhWIFdZ6wB+Ezy8pwL6xMp+Y8L9MiDKLHWcNhzyFeVbmrlNy+LQYVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIny6NUMGhAf/3G54WLTGUll56vfMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbkhVmI0 myRagYCPvMwZb61ylsIdv98/YgXyRolxrTINcre+g/cAYLLBlGRbbLsF4oO8dpfP vEBZE1OXl5lWk8HFqs+7yAQCkvWJ1C8kuz9s81rgeTQPjMJantTuBn1zcHTQuoN6 s4qjAk8P1aQeqBPl1pobmFB3ddS28RTc3uN7u+FMrIu4mNB3gtJ/uUSb3LaIU/aB G/XnD9xMbsuS8gM0UqrVEclW9/jZc7sSoLBj75EhjI13YymJZ5I7UI+AfX03ZKup jfPN6FmcCl6e0Mf/GQAmWhNsqEYOvyopYCDxkHoJ9sxbJBpGGlUr/Atstxc0N4DT pQWbQzv/LySGvw== -----END CERTIFICATE-----Generated at Sun May 24 18:26:08 2026 by rpki-client