$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: +AmE4qSXGQBFK9grUetRijYnVFDKGP1oomrYNs9CbuI= Subject key identifier: 04:B1:F1:57:87:4C:1A:12:5A:6F:46:BB:59:7C:F1:13:D3:D5:76:30 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A19AA1A9EEB85FE9C2F3CD984C6939060B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 153B Signing time: Mon 02 Nov 2026 05:00:48 +0000 Manifest this update: Mon 02 Nov 2026 05:00:48 +0000 Manifest next update: Tue 03 Nov 2026 05:00:48 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: VZb0wJclN9mG3W7+njnUJVBwlS28jL3/9ZNZqMYmcF0=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:9a:a1:a9:ee:b8:5f:e9:c2:f3:cd:98:4c:69:39:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Nov 2 05:00:48 2026 GMT Not After : Nov 3 05:00:48 2026 GMT Subject: CN=04b1f157874c1a125a6f46bb597cf113d3d57630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:c9:56:3a:b6:11:56:7b:7f:25:de:17:02: 3b:4e:f0:75:99:f8:31:cb:02:a4:96:2b:b7:86:a6: 7a:b9:78:11:98:3d:4e:ce:52:a3:b2:54:80:e0:62: d9:de:62:58:7b:8b:63:69:fa:6f:5a:4f:ca:2c:67: 0a:03:92:8b:a1:45:72:f4:4a:73:d1:cc:6d:72:b5: 2d:05:93:2d:01:2a:58:5a:0f:56:ba:65:11:57:ae: 41:54:03:b9:ee:38:b2:98:9e:44:d6:d3:64:62:9e: 81:d7:77:54:f7:b1:ed:00:99:db:e9:dc:73:b2:48: 3d:7f:39:a6:6e:e3:a6:db:f3:ff:e3:a3:12:22:a8: b3:94:a6:3e:f4:8e:61:9e:9a:98:e9:8b:54:de:c5: 89:9b:3a:5a:a3:5d:c1:73:41:c1:f6:cb:55:f3:25: 13:c5:d1:0b:81:be:74:71:ea:25:17:4c:cc:28:20: ab:a8:fd:12:8d:8b:c9:30:2d:39:7b:71:ab:fe:ec: b2:fd:73:65:f0:96:dd:78:ba:c2:1e:74:df:5a:49: 47:db:82:7b:83:0c:aa:7f:92:25:59:21:43:7f:66: 61:83:03:5f:e2:1d:d8:b8:8f:bc:98:ce:d5:88:ed: 39:78:21:d2:9b:e5:f5:b6:c7:f0:b8:eb:26:58:83: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B1:F1:57:87:4C:1A:12:5A:6F:46:BB:59:7C:F1:13:D3:D5:76:30 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:78:dd:c5:41:88:64:82:4a:57:1c:1c:4e:87:0d:26:c5:be: a1:24:82:34:3c:eb:17:37:90:2c:48:d4:0e:c2:76:6a:6c:d8: a4:e8:a0:91:1a:c7:09:67:db:67:7c:c3:3d:8c:ac:48:d7:57: 0c:1e:ba:80:6a:5a:72:d0:5e:fe:16:1a:ef:fc:74:05:f0:3d: f5:bd:35:c7:a3:ea:31:38:29:8f:14:4b:04:ee:4c:ea:2e:08: d0:cd:96:4a:6e:a4:66:e2:9d:7e:2c:ce:a2:d3:82:1f:e4:49: 74:c0:db:3a:42:e7:6e:30:98:2a:71:93:7b:a3:c1:0c:7c:4c: 9a:52:69:29:fd:92:57:43:0f:b0:8c:db:02:88:17:aa:d6:f6: 52:45:7c:b0:59:e1:5a:b0:95:2b:d2:f6:cc:8e:28:72:b6:38: 85:15:b5:c2:a1:53:c0:c6:76:e3:dd:64:ff:01:d1:dd:c3:ab: d1:fb:a2:18:2e:3f:5b:c1:18:7c:35:e0:80:23:4b:7e:cd:4a: 94:a4:bb:62:f6:c6:09:68:08:f2:94:26:0f:17:8f:fe:39:98: 74:d2:f3:87:31:ec:0f:a1:80:71:aa:ab:81:82:94:bf:64:31: 71:79:d2:9b:9f:e6:cd:22:ec:9e:5e:55:03:d8:d4:31:87:49: 21:e0:0f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGaoanuuF/pwvPNmExpOQYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMTAyMDUwMDQ4WhcNMjYxMTAzMDUwMDQ4WjAzMTEwLwYDVQQD EygwNGIxZjE1Nzg3NGMxYTEyNWE2ZjQ2YmI1OTdjZjExM2QzZDU3NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcbJVjq2EVZ7fyXeFwI7TvB1mfgx ywKkliu3hqZ6uXgRmD1OzlKjslSA4GLZ3mJYe4tjafpvWk/KLGcKA5KLoUVy9Epz 0cxtcrUtBZMtASpYWg9WumURV65BVAO57jiymJ5E1tNkYp6B13dU97HtAJnb6dxz skg9fzmmbuOm2/P/46MSIqizlKY+9I5hnpqY6YtU3sWJmzpao13Bc0HB9stV8yUT xdELgb50ceolF0zMKCCrqP0SjYvJMC05e3Gr/uyy/XNl8JbdeLrCHnTfWklH24J7 gwyqf5IlWSFDf2ZhgwNf4h3YuI+8mM7ViO05eCHSm+X1tsfwuOsmWIOQWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASx8VeHTBoSWm9Gu1l88RPT1XYwMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHjdxUGI ZIJKVxwcTocNJsW+oSSCNDzrFzeQLEjUDsJ2amzYpOigkRrHCWfbZ3zDPYysSNdX DB66gGpactBe/hYa7/x0BfA99b01x6PqMTgpjxRLBO5M6i4I0M2WSm6kZuKdfizO otOCH+RJdMDbOkLnbjCYKnGTe6PBDHxMmlJpKf2SV0MPsIzbAogXqtb2UkV8sFnh WrCVK9L2zI4ocrY4hRW1wqFTwMZ2491k/wHR3cOr0fuiGC4/W8EYfDXggCNLfs1K lKS7YvbGCWgI8pQmDxeP/jmYdNLzhzHsD6GAcaqrgYKUv2QxcXnSm5/mzSLsnl5V A9jUMYdJIeAPXA== -----END CERTIFICATE-----Generated at Mon Nov 2 14:29:04 2026 by rpki-client