$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 0AL4nP1I7FGuiiGKRYeQMEOBvBaAplISKyQOexd9e9E= Subject key identifier: 7E:E0:12:71:E5:E6:C7:F9:8A:AF:93:5E:2E:53:F5:A5:47:B6:AD:19 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A13DEED7E013DCB4DA83F4ED0B1FDEFEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 150B Signing time: Thu 15 Oct 2026 05:00:25 +0000 Manifest this update: Thu 15 Oct 2026 05:00:25 +0000 Manifest next update: Fri 16 Oct 2026 05:00:25 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 76iHVpcrGcEz6JmIX/koFZtxORQ6SpctcM7V1i0D4Zw=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3d:ee:d7:e0:13:dc:b4:da:83:f4:ed:0b:1f:de:fe:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 15 05:00:25 2026 GMT Not After : Oct 16 05:00:25 2026 GMT Subject: CN=7ee01271e5e6c7f98aaf935e2e53f5a547b6ad19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:c9:fd:fd:1e:40:30:d9:39:77:8d:78:11: ec:6a:85:0e:3a:82:d5:78:0c:c2:d9:f4:7f:f7:1d: 40:56:d0:12:2e:03:0e:40:f3:84:91:b7:08:c1:8c: ec:ff:f0:31:a4:fb:bd:9d:e9:5e:f4:0b:84:54:5a: 2f:1b:47:50:e3:76:76:bf:96:f5:74:c6:dd:dc:a8: 7d:12:7a:a0:ab:2b:72:74:af:4f:01:0d:44:46:2d: 35:c6:95:15:d2:d6:e2:4e:1e:33:0c:6d:82:90:77: f3:01:f1:20:a5:f2:95:bb:e0:f9:76:a6:2c:7c:26: 74:8f:23:9f:19:95:59:38:3a:46:c1:22:a2:0d:ac: da:c5:1b:aa:74:72:ff:95:cc:13:eb:d8:d2:56:27: 24:4b:63:28:de:29:27:7d:6d:de:88:1d:81:50:12: f9:a2:bb:24:6d:f8:c4:3b:5b:56:4e:36:d3:8b:33: 39:74:d8:5b:fc:eb:8c:31:18:e7:b9:7a:81:99:aa: a7:ac:81:50:ac:ca:73:e8:11:5c:ba:14:60:fb:a2: 5a:ef:91:33:b3:55:49:57:e5:e0:bf:8e:72:1d:61: 87:08:67:cc:7b:83:dc:4b:c2:2e:5a:5a:df:e1:ce: 76:70:4b:4f:62:af:f2:69:3d:21:b7:30:db:c6:0a: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:12:71:E5:E6:C7:F9:8A:AF:93:5E:2E:53:F5:A5:47:B6:AD:19 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1a:79:3e:48:16:34:b5:e4:29:d0:83:62:41:e6:75:94:46: fc:bb:88:a8:12:94:41:34:5b:8f:eb:cb:8a:b2:d9:fa:1a:73: c4:6f:9a:33:d3:ea:bb:92:03:4d:b4:3c:73:c4:33:d6:d4:5f: 6a:9a:1f:de:14:35:cc:50:b5:bd:a7:56:db:b3:1a:04:7b:dd: df:9d:19:93:d5:3f:3c:f6:8f:ab:4a:d4:80:a1:0a:6a:ef:2d: 33:20:1d:c7:90:c7:97:85:fc:f1:0b:ca:09:f0:ef:e7:b0:ed: 27:30:e1:50:25:38:c1:90:ef:fe:77:2f:1b:6c:eb:65:46:19: 4d:d0:5b:38:0f:12:eb:57:68:a0:3a:70:d3:c7:b5:6d:3d:db: bb:ae:73:7a:be:f7:c2:91:3a:81:74:8c:fa:95:7b:6a:8f:2a: 18:41:c3:ea:f7:2e:28:05:31:1a:71:7e:df:d9:7f:4c:0b:b1: 43:89:7c:dd:78:63:3e:51:19:d0:83:03:bb:a0:50:a2:e9:be: 50:dd:33:bb:e8:64:9c:bf:b1:67:0d:66:e0:0b:67:67:5f:ae: ad:22:ec:1c:0e:16:e7:3c:d8:7f:f5:e0:2b:3b:e9:52:d7:ad: 54:96:66:c6:df:fd:34:f4:e2:00:92:be:0d:15:f2:a9:83:9b: 4e:2e:0d:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE97tfgE9y02oP07Qsf3v6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDE1MDUwMDI1WhcNMjYxMDE2MDUwMDI1WjAzMTEwLwYDVQQD Eyg3ZWUwMTI3MWU1ZTZjN2Y5OGFhZjkzNWUyZTUzZjVhNTQ3YjZhZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw7J/f0eQDDZOXeNeBHsaoUOOoLV eAzC2fR/9x1AVtASLgMOQPOEkbcIwYzs//AxpPu9nele9AuEVFovG0dQ43Z2v5b1 dMbd3Kh9EnqgqytydK9PAQ1ERi01xpUV0tbiTh4zDG2CkHfzAfEgpfKVu+D5dqYs fCZ0jyOfGZVZODpGwSKiDazaxRuqdHL/lcwT69jSVickS2Mo3iknfW3eiB2BUBL5 orskbfjEO1tWTjbTizM5dNhb/OuMMRjnuXqBmaqnrIFQrMpz6BFcuhRg+6Ja75Ez s1VJV+Xgv45yHWGHCGfMe4PcS8IuWlrf4c52cEtPYq/yaT0htzDbxgrKIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7gEnHl5sf5iq+TXi5T9aVHtq0ZMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxp5PkgW NLXkKdCDYkHmdZRG/LuIqBKUQTRbj+vLirLZ+hpzxG+aM9Pqu5IDTbQ8c8Qz1tRf apof3hQ1zFC1vadW27MaBHvd350Zk9U/PPaPq0rUgKEKau8tMyAdx5DHl4X88QvK CfDv57DtJzDhUCU4wZDv/ncvG2zrZUYZTdBbOA8S61dooDpw08e1bT3bu65zer73 wpE6gXSM+pV7ao8qGEHD6vcuKAUxGnF+39l/TAuxQ4l83XhjPlEZ0IMDu6BQoum+ UN0zu+hknL+xZw1m4AtnZ1+urSLsHA4W5zzYf/XgKzvpUtetVJZmxt/9NPTiAJK+ DRXyqYObTi4NZQ== -----END CERTIFICATE-----Generated at Thu Oct 15 10:31:15 2026 by rpki-client