$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Nz2IgjOp+T31BqsZseb3wtUO67YaEmHaOhMh9k/XIe4= Subject key identifier: BB:8F:42:A2:B5:88:EF:BE:95:E5:6D:B1:92:00:60:23:F8:E1:10:CF Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019E2ADDDD6AE18A1D2C0462281CA46414B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1371 Signing time: Fri 15 May 2026 09:00:43 +0000 Manifest this update: Fri 15 May 2026 09:00:43 +0000 Manifest next update: Sat 16 May 2026 09:00:43 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: hK135857WbL5GHsYciaOQVSXUpQ7gn49AZ+PdeKDnHk=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:dd:dd:6a:e1:8a:1d:2c:04:62:28:1c:a4:64:14:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 15 09:00:43 2026 GMT Not After : May 16 09:00:43 2026 GMT Subject: CN=bb8f42a2b588efbe95e56db192006023f8e110cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:4f:d2:f0:06:e2:2a:c1:88:76:26:41:80: 84:5a:09:a1:3c:c0:68:d2:f8:5d:43:ce:c6:c1:d7: d9:82:c6:14:2b:e5:25:02:61:42:9f:46:6b:94:f5: f7:db:49:c7:81:0b:51:d0:e3:b8:b9:d7:92:b6:48: 4c:16:f0:5f:7a:9e:80:dd:c1:cf:ae:d8:d4:88:6e: b6:d9:fe:63:47:cb:43:6a:b3:e0:75:ed:e2:db:44: 2d:e9:5c:6f:33:93:30:ef:97:67:c2:36:c7:c0:e9: 81:dd:9e:57:c2:e8:e0:25:2d:1e:ff:d4:1c:03:2b: 7b:19:cf:76:78:11:72:be:10:95:e0:66:ef:09:2b: 9a:32:00:a9:bb:43:00:9e:50:ef:dd:16:4b:a0:84: d5:1a:4d:b3:62:ba:3b:81:6f:74:77:72:55:5a:08: e9:51:bb:ce:d9:18:18:3e:65:9c:75:a4:2d:3c:0b: 3b:1f:81:26:fc:2d:2f:6d:47:eb:5b:3f:f6:6f:63: 0e:24:5a:f0:22:62:46:49:89:38:ae:71:0a:2d:55: 1b:3c:c4:6e:03:35:13:73:46:ca:c1:f6:b3:28:6a: a3:f8:d7:30:65:89:97:9a:06:29:dc:a9:f2:89:33: 34:87:4e:1b:38:77:6b:89:43:fb:a1:18:7e:b0:bf: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:42:A2:B5:88:EF:BE:95:E5:6D:B1:92:00:60:23:F8:E1:10:CF X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ef:5f:d0:0f:33:ee:fb:52:4c:fc:a7:40:08:9f:c7:38:7c: 15:3d:d0:95:25:4a:09:61:e0:26:53:ac:04:08:12:c3:8f:12: bd:12:e5:18:2d:ee:1e:45:76:08:d3:e4:10:37:9e:e3:79:c3: 96:60:89:8a:7c:6b:0e:af:9c:67:cc:4a:1f:cf:2b:1d:c4:8f: 96:21:bd:c3:f0:61:12:3f:92:88:39:f6:e4:71:de:c9:d4:8a: e1:5d:71:e0:67:1f:33:03:fc:76:4f:9f:36:90:34:d4:66:98: 1c:7b:75:fa:6b:0f:16:f0:ff:16:c1:5c:37:a2:98:1a:d0:54: 1d:28:86:1c:db:9e:74:d6:02:60:7b:36:7a:9e:db:02:e8:64: 18:d9:57:cc:b2:a2:9b:95:7e:77:a4:a9:6d:68:32:87:16:3e: 60:51:5a:83:8e:a5:ad:6a:d1:6b:40:d2:6d:3a:cf:c7:45:76: 30:71:52:46:e2:fd:6d:8f:97:5e:ed:06:04:f9:b7:b0:1a:b0: 12:7b:08:55:99:53:12:fa:ee:ba:a4:cc:27:a0:b8:49:de:b9: b7:f4:56:58:ea:1f:3d:8f:54:8b:fe:be:52:44:00:0e:95:ee: db:62:db:56:af:29:f9:91:61:4b:2c:fd:c0:5d:db:0e:5f:69: 63:79:7d:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4q3d1q4YodLARiKBykZBS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNTE1MDkwMDQzWhcNMjYwNTE2MDkwMDQzWjAzMTEwLwYDVQQD EyhiYjhmNDJhMmI1ODhlZmJlOTVlNTZkYjE5MjAwNjAyM2Y4ZTExMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5FP0vAG4irBiHYmQYCEWgmhPMBo 0vhdQ87GwdfZgsYUK+UlAmFCn0ZrlPX320nHgQtR0OO4udeStkhMFvBfep6A3cHP rtjUiG622f5jR8tDarPgde3i20Qt6VxvM5Mw75dnwjbHwOmB3Z5XwujgJS0e/9Qc Ayt7Gc92eBFyvhCV4GbvCSuaMgCpu0MAnlDv3RZLoITVGk2zYro7gW90d3JVWgjp UbvO2RgYPmWcdaQtPAs7H4Em/C0vbUfrWz/2b2MOJFrwImJGSYk4rnEKLVUbPMRu AzUTc0bKwfazKGqj+NcwZYmXmgYp3KnyiTM0h04bOHdriUP7oRh+sL8zkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuPQqK1iO++leVtsZIAYCP44RDPMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAse9f0A8z 7vtSTPynQAifxzh8FT3QlSVKCWHgJlOsBAgSw48SvRLlGC3uHkV2CNPkEDee43nD lmCJinxrDq+cZ8xKH88rHcSPliG9w/BhEj+SiDn25HHeydSK4V1x4GcfMwP8dk+f NpA01GaYHHt1+msPFvD/FsFcN6KYGtBUHSiGHNuedNYCYHs2ep7bAuhkGNlXzLKi m5V+d6SpbWgyhxY+YFFag46lrWrRa0DSbTrPx0V2MHFSRuL9bY+XXu0GBPm3sBqw EnsIVZlTEvruuqTMJ6C4Sd65t/RWWOofPY9Ui/6+UkQADpXu22LbVq8p+ZFhSyz9 wF3bDl9pY3l9mA== -----END CERTIFICATE-----Generated at Fri May 15 15:20:21 2026 by rpki-client