$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: /dHVANJRzXYsLLdJ45FTDbtHXWW2IY8ku0HQnsGRkkA= Subject key identifier: 06:F5:F8:B7:A2:8E:14:DB:C0:03:68:C7:AE:A5:ED:0B:ED:1E:72:09 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019D7A0FE94356A31B66B86AAB4EB943B65E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1314 Signing time: Sat 11 Apr 2026 01:02:36 +0000 Manifest this update: Sat 11 Apr 2026 01:02:36 +0000 Manifest next update: Sun 12 Apr 2026 01:02:36 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: X89wlww31LExo+THI0I6RFRSnRmVGeE7zlAf97iWO0E=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 23:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:7a:0f:e9:43:56:a3:1b:66:b8:6a:ab:4e:b9:43:b6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Apr 11 01:02:36 2026 GMT Not After : Apr 12 01:02:36 2026 GMT Subject: CN=06f5f8b7a28e14dbc00368c7aea5ed0bed1e7209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:ab:c2:59:61:54:48:bb:13:dd:a9:eb:32: d3:ee:0c:a0:c8:54:3e:d5:d8:3e:45:31:1b:8c:bd: c8:3c:f3:b5:9a:55:9f:fa:cf:bb:a0:8c:ab:79:ae: 05:e6:1b:26:0a:70:ce:6a:ae:fa:eb:8c:1a:65:a9: 8a:57:e8:72:84:a3:02:ac:96:d5:ed:37:bf:dc:16: fb:1d:0d:52:3d:9c:4d:5b:3a:80:6e:71:d4:bc:e6: 2e:78:73:37:24:02:26:21:3b:e8:78:53:67:1d:55: e9:0e:ed:df:4d:d2:bb:53:42:a7:3c:ac:0a:4c:b0: e1:45:6d:fa:6c:ff:ec:e9:c1:b1:54:35:ab:0f:79: 21:48:bf:99:ea:4a:6f:81:f8:85:98:30:e6:e3:ed: 04:56:b8:0b:10:8f:2e:48:86:3e:ab:89:4c:1e:cb: 09:cc:b3:f8:99:7f:ef:7c:11:f5:57:40:9a:e0:63: 26:90:b6:04:29:44:98:9f:42:09:b2:6c:13:17:90: 91:b5:19:6a:c3:8b:61:f5:02:e3:14:24:74:e7:a9: 03:f3:25:b1:71:cd:e3:e5:67:e5:ed:c3:39:cf:86: 42:a5:d2:d7:ab:91:a1:08:2e:22:89:05:4a:d4:55: 80:47:ff:b9:0b:1f:b8:70:64:c5:ef:98:98:83:e4: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:F8:B7:A2:8E:14:DB:C0:03:68:C7:AE:A5:ED:0B:ED:1E:72:09 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:72:44:8f:8f:3c:f7:30:91:91:7b:c7:c1:5a:7a:c7:7b:58: 3c:7c:0a:d4:77:30:bd:5b:2d:29:27:09:a2:cd:d5:6f:6f:0c: bb:15:81:de:26:86:6e:0d:48:78:b7:77:ae:1b:69:69:94:bb: 38:44:4d:49:ad:80:a5:72:49:bf:73:48:ba:19:15:df:d9:d1: 0b:17:81:45:66:e5:94:07:b3:51:97:12:11:78:63:0f:7a:6f: f6:bb:f0:3c:8e:e0:77:8c:51:2b:a0:84:1f:0f:1f:08:85:9a: 04:a7:89:e6:3c:c0:73:54:53:1d:85:57:52:5c:ab:e1:d4:64: 32:11:81:a2:6c:c6:a8:6f:c9:29:53:47:a1:ee:62:75:87:06: 8f:77:af:c9:37:59:65:38:53:a8:de:f4:32:0c:3e:73:ab:ac: cf:8b:1a:3e:a8:39:b0:58:6a:60:d1:d5:b7:63:78:5a:42:b9: b5:4a:d8:17:57:8a:29:60:ce:62:47:f3:f8:81:92:41:8b:1b: 02:2e:f4:03:9a:41:29:02:94:76:2c:19:5f:f9:c4:0b:22:63: e4:ec:cb:98:9c:35:29:83:03:49:56:fd:55:00:de:55:e4:df: ba:95:94:bb:16:18:32:bd:72:68:d1:a7:0b:90:6a:67:95:27: dc:c5:18:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ16D+lDVqMbZrhqq065Q7ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNDExMDEwMjM2WhcNMjYwNDEyMDEwMjM2WjAzMTEwLwYDVQQD EygwNmY1ZjhiN2EyOGUxNGRiYzAwMzY4YzdhZWE1ZWQwYmVkMWU3MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWyrwllhVEi7E92p6zLT7gygyFQ+ 1dg+RTEbjL3IPPO1mlWf+s+7oIyrea4F5hsmCnDOaq7664waZamKV+hyhKMCrJbV 7Te/3Bb7HQ1SPZxNWzqAbnHUvOYueHM3JAImITvoeFNnHVXpDu3fTdK7U0KnPKwK TLDhRW36bP/s6cGxVDWrD3khSL+Z6kpvgfiFmDDm4+0EVrgLEI8uSIY+q4lMHssJ zLP4mX/vfBH1V0Ca4GMmkLYEKUSYn0IJsmwTF5CRtRlqw4th9QLjFCR056kD8yWx cc3j5Wfl7cM5z4ZCpdLXq5GhCC4iiQVK1FWAR/+5Cx+4cGTF75iYg+RnkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAb1+LeijhTbwANox66l7QvtHnIJMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXJEj488 9zCRkXvHwVp6x3tYPHwK1HcwvVstKScJos3Vb28MuxWB3iaGbg1IeLd3rhtpaZS7 OERNSa2ApXJJv3NIuhkV39nRCxeBRWbllAezUZcSEXhjD3pv9rvwPI7gd4xRK6CE Hw8fCIWaBKeJ5jzAc1RTHYVXUlyr4dRkMhGBomzGqG/JKVNHoe5idYcGj3evyTdZ ZThTqN70Mgw+c6usz4saPqg5sFhqYNHVt2N4WkK5tUrYF1eKKWDOYkfz+IGSQYsb Ai70A5pBKQKUdiwZX/nECyJj5OzLmJw1KYMDSVb9VQDeVeTfupWUuxYYMr1yaNGn C5BqZ5Un3MUY5Q== -----END CERTIFICATE-----Generated at Sat Apr 11 05:29:47 2026 by rpki-client