$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: spO8rLl77P8NZJYWrIJ4VEphL3qgGQHHnfvRibWyk8k= Subject key identifier: E7:59:0A:53:81:2A:60:B8:B8:DF:93:65:7B:60:3E:04:71:E5:86:2B Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019CD3F8CEC4D80F9E1E2162EBCDBE6CF85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 12BE Signing time: Mon 09 Mar 2026 19:00:24 +0000 Manifest this update: Mon 09 Mar 2026 19:00:24 +0000 Manifest next update: Tue 10 Mar 2026 19:00:24 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: 81yZhIJmlshArQUOG+H1NrLG6kbK6t0bWrZmIGarODU=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 15:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d3:f8:ce:c4:d8:0f:9e:1e:21:62:eb:cd:be:6c:f8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Mar 9 19:00:24 2026 GMT Not After : Mar 10 19:00:24 2026 GMT Subject: CN=e7590a53812a60b8b8df93657b603e0471e5862b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:85:bf:07:94:5d:79:4e:af:99:38:f3:81: d9:ab:ae:92:88:d1:f9:8e:c3:0b:3a:65:72:3f:d2: bc:a6:8a:86:d8:6f:28:a5:25:39:2f:21:d1:d2:44: e2:68:69:0c:16:a3:d7:be:2c:87:c3:d7:e7:12:d8: 44:64:8d:dc:61:bf:e2:e6:55:4d:bf:ff:2c:d9:83: 9d:51:e8:71:b8:ae:c2:90:af:df:99:c0:b7:a4:fe: 75:b4:99:90:e7:69:0d:f5:ca:a6:94:28:18:c9:c7: 97:14:e3:be:c1:7e:8c:16:38:7b:5f:b0:fc:95:38: 3b:25:0a:15:6f:f7:f3:6c:6d:db:25:98:03:ed:21: 35:24:4f:bb:14:09:b9:a0:2a:35:d1:b0:c9:ae:ff: 62:f7:a7:5b:56:c0:04:55:f9:0b:a7:36:29:e8:e5: 27:23:14:92:9c:c1:e2:7e:71:c2:44:c3:0a:69:b5: d6:ad:e0:a9:52:ea:de:70:e7:53:32:91:cc:c2:79: bb:99:c7:3b:fa:0b:4b:3d:dc:50:72:33:bb:bc:8c: d2:6b:42:63:0e:bc:cc:20:88:2e:b6:e8:bb:55:73: a1:17:bc:c9:c6:44:74:fa:f0:38:5d:21:37:b9:42: be:d1:d0:e8:87:5b:44:20:17:03:29:c7:5c:b0:80: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:59:0A:53:81:2A:60:B8:B8:DF:93:65:7B:60:3E:04:71:E5:86:2B X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:90:89:48:5d:13:f4:1e:95:4a:13:ae:d1:7b:d2:60:46:3c: 92:f2:85:91:a4:d7:05:1b:c2:98:ca:f8:e4:b7:d0:f1:1d:ea: 79:38:cd:06:25:bb:45:c7:c9:0e:12:ce:4d:34:20:70:9c:06: 7f:c4:a0:2f:f9:d5:3b:6f:30:16:5e:ba:5f:4a:2c:e5:25:0b: 53:5c:5c:86:64:11:f0:d7:17:c4:59:5d:e4:c2:d0:e7:dd:ff: b1:78:2e:e9:92:df:b8:f1:4d:de:6f:e2:ea:02:b0:7b:d0:05: bf:67:0d:08:f1:bc:b6:3b:db:db:da:80:d1:2b:98:45:f7:15: 0b:2a:c9:48:48:b7:1f:80:e5:50:93:eb:4c:57:04:9e:cb:74: fa:1c:db:be:5c:25:52:ee:0b:04:94:21:a4:90:3e:5d:c7:21: 37:82:bd:37:34:68:48:9d:49:34:ff:e8:ae:14:86:82:55:cf: 97:fd:ad:9c:57:40:79:62:af:02:0a:68:08:f5:44:1e:35:f1: 6d:a9:a3:60:6b:80:14:b0:ef:61:22:6c:a9:be:56:db:b0:db: 7e:0b:9d:00:81:ec:d3:03:49:92:b6:f5:50:6d:9f:90:a8:22: e3:79:3b:1e:08:f1:d4:20:74:8b:75:af:c7:6c:2c:ca:34:97: 73:7c:79:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzT+M7E2A+eHiFi682+bPhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMzA5MTkwMDI0WhcNMjYwMzEwMTkwMDI0WjAzMTEwLwYDVQQD EyhlNzU5MGE1MzgxMmE2MGI4YjhkZjkzNjU3YjYwM2UwNDcxZTU4NjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXmFvweUXXlOr5k484HZq66SiNH5 jsMLOmVyP9K8poqG2G8opSU5LyHR0kTiaGkMFqPXviyHw9fnEthEZI3cYb/i5lVN v/8s2YOdUehxuK7CkK/fmcC3pP51tJmQ52kN9cqmlCgYyceXFOO+wX6MFjh7X7D8 lTg7JQoVb/fzbG3bJZgD7SE1JE+7FAm5oCo10bDJrv9i96dbVsAEVfkLpzYp6OUn IxSSnMHifnHCRMMKabXWreCpUurecOdTMpHMwnm7mcc7+gtLPdxQcjO7vIzSa0Jj DrzMIIgutui7VXOhF7zJxkR0+vA4XSE3uUK+0dDoh1tEIBcDKcdcsIBnjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdZClOBKmC4uN+TZXtgPgRx5YYrMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZCJSF0T 9B6VShOu0XvSYEY8kvKFkaTXBRvCmMr45LfQ8R3qeTjNBiW7RcfJDhLOTTQgcJwG f8SgL/nVO28wFl66X0os5SULU1xchmQR8NcXxFld5MLQ593/sXgu6ZLfuPFN3m/i 6gKwe9AFv2cNCPG8tjvb29qA0SuYRfcVCyrJSEi3H4DlUJPrTFcEnst0+hzbvlwl Uu4LBJQhpJA+XcchN4K9NzRoSJ1JNP/orhSGglXPl/2tnFdAeWKvAgpoCPVEHjXx bamjYGuAFLDvYSJsqb5W27DbfgudAIHs0wNJkrb1UG2fkKgi43k7Hgjx1CB0i3Wv x2wsyjSXc3x5Tw== -----END CERTIFICATE-----Generated at Mon Mar 9 21:56:25 2026 by rpki-client