$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: bF7lzSoi9UKi0fEGmS00bt05NFn3HijfYYkl1TxckhA= Subject key identifier: 2E:7E:CF:E9:E2:DC:5C:CA:AB:36:B9:5F:C8:44:DD:6C:5D:5C:69:A8 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019CD20B48F9245C9466B36FE247D98E3F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 12BD Signing time: Mon 09 Mar 2026 10:01:20 +0000 Manifest this update: Mon 09 Mar 2026 10:01:20 +0000 Manifest next update: Tue 10 Mar 2026 10:01:20 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: Z8Keb85pJQTDNe/JWav5a060ML0xiXpTpFqTULvh7xk=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d2:0b:48:f9:24:5c:94:66:b3:6f:e2:47:d9:8e:3f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Mar 9 10:01:20 2026 GMT Not After : Mar 10 10:01:20 2026 GMT Subject: CN=2e7ecfe9e2dc5ccaab36b95fc844dd6c5d5c69a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:3a:82:3a:05:b8:97:f6:44:49:8d:56:3d: 45:65:aa:de:75:14:e7:0d:2a:9c:02:ca:30:38:29: 1d:ae:45:ea:8f:59:20:f1:44:08:0a:20:fa:44:db: df:66:2d:99:ed:22:07:83:9f:39:a9:46:16:b6:8a: 63:d2:cf:78:68:b0:02:98:98:93:f9:bc:28:15:7a: 38:87:66:cd:d8:9f:78:55:a5:25:d8:58:2e:0b:67: e3:82:0b:01:53:a6:cc:78:9b:86:2a:f7:3e:9e:9c: 87:3e:1f:39:32:cb:18:bd:35:9f:00:69:7a:17:af: 5b:cb:d9:5d:9b:5a:ec:4a:16:f0:7f:c7:fc:75:16: ef:c1:b3:20:64:8f:04:70:c0:56:04:c6:35:e7:5c: 96:68:9e:62:18:12:3a:1e:87:3c:e9:d1:ae:88:69: ff:43:e5:0f:37:e4:83:44:e3:00:7c:c8:d9:35:ea: 71:31:19:51:ec:5c:c0:fa:86:c2:98:29:d3:08:58: fb:51:32:82:d8:0c:6a:3d:bb:1f:7c:c2:83:bc:dc: d8:5c:d2:66:8f:21:65:34:8e:8b:f0:bc:e8:89:97: 68:21:5a:53:77:ce:1e:cc:9a:04:9c:63:3f:21:ae: a1:eb:64:b7:e2:9d:c5:9c:d6:7a:8a:a0:ab:5b:d5: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:CF:E9:E2:DC:5C:CA:AB:36:B9:5F:C8:44:DD:6C:5D:5C:69:A8 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6d:98:ec:ca:30:77:5b:4b:f0:22:8a:6c:e8:3e:23:71:db: 0e:d6:a1:af:12:03:78:a3:c5:f6:a0:6a:27:8b:49:67:f0:38: 74:2c:a5:a9:86:22:1c:61:17:83:70:61:f7:53:de:5f:04:8a: 63:a0:fe:17:68:c3:4e:28:2a:b4:d6:0a:f7:a5:11:6d:a0:56: f1:39:2a:db:6d:91:a1:63:ab:ea:70:2d:60:10:47:e6:00:73: 96:fc:d6:2b:85:39:a7:b7:63:3a:af:0e:bf:21:77:4b:11:f8: 1d:7e:03:74:a0:08:53:07:dd:68:1c:3d:05:3f:9f:e4:2f:14: 0b:2a:c3:b8:2b:02:49:3b:e9:69:35:69:89:94:e8:ec:02:4e: 6c:a3:3b:2c:a5:dd:58:17:83:85:34:c1:47:80:ea:df:3d:38: bf:94:75:9d:b9:53:5f:ec:90:8e:b6:11:53:52:88:d5:24:29: eb:b9:e6:af:7e:36:65:1a:cc:9b:e0:a7:3c:61:6d:4f:f7:77: 92:66:f6:66:c2:a1:c0:2b:e2:16:22:58:94:61:fc:88:af:51: 37:e5:63:79:2f:3d:8e:b4:a6:14:6c:b5:99:b9:4d:6e:8e:d1: a1:5c:4f:05:75:04:41:1b:ef:84:08:06:ea:95:f4:c4:d7:50: 36:3f:60:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzSC0j5JFyUZrNv4kfZjj8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMzA5MTAwMTIwWhcNMjYwMzEwMTAwMTIwWjAzMTEwLwYDVQQD EygyZTdlY2ZlOWUyZGM1Y2NhYWIzNmI5NWZjODQ0ZGQ2YzVkNWM2OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPY6gjoFuJf2REmNVj1FZaredRTn DSqcAsowOCkdrkXqj1kg8UQICiD6RNvfZi2Z7SIHg585qUYWtopj0s94aLACmJiT +bwoFXo4h2bN2J94VaUl2FguC2fjggsBU6bMeJuGKvc+npyHPh85MssYvTWfAGl6 F69by9ldm1rsShbwf8f8dRbvwbMgZI8EcMBWBMY151yWaJ5iGBI6Hoc86dGuiGn/ Q+UPN+SDROMAfMjZNepxMRlR7FzA+obCmCnTCFj7UTKC2AxqPbsffMKDvNzYXNJm jyFlNI6L8LzoiZdoIVpTd84ezJoEnGM/Ia6h62S34p3FnNZ6iqCrW9V8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5+z+ni3FzKqza5X8hE3WxdXGmoMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW2Y7Mow d1tL8CKKbOg+I3HbDtahrxIDeKPF9qBqJ4tJZ/A4dCylqYYiHGEXg3Bh91PeXwSK Y6D+F2jDTigqtNYK96URbaBW8Tkq222RoWOr6nAtYBBH5gBzlvzWK4U5p7djOq8O vyF3SxH4HX4DdKAIUwfdaBw9BT+f5C8UCyrDuCsCSTvpaTVpiZTo7AJObKM7LKXd WBeDhTTBR4Dq3z04v5R1nblTX+yQjrYRU1KI1SQp67nmr342ZRrMm+CnPGFtT/d3 kmb2ZsKhwCviFiJYlGH8iK9RN+VjeS89jrSmFGy1mblNbo7RoVxPBXUEQRvvhAgG 6pX0xNdQNj9gew== -----END CERTIFICATE-----Generated at Mon Mar 9 12:14:54 2026 by rpki-client