$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: JbycJQMMFINvjLcX4hSNnm++PYuS+JgBwVEJ266J1i8= Subject key identifier: 94:AF:5D:BA:1B:25:C8:5F:65:AF:92:A2:68:23:F3:27:82:65:8C:3C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A194D64CDAAAB22981B09925EF3790523A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1538 Signing time: Sun 01 Nov 2026 02:00:34 +0000 Manifest this update: Sun 01 Nov 2026 02:00:34 +0000 Manifest next update: Mon 02 Nov 2026 02:00:34 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: J66AScxvQoEVgSuWmdWcOozaILaqN34WvUvcepwFhTs=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:94:d6:4c:da:aa:b2:29:81:b0:99:25:ef:37:90:52:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Nov 1 02:00:34 2026 GMT Not After : Nov 2 02:00:34 2026 GMT Subject: CN=94af5dba1b25c85f65af92a26823f32782658c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:8a:12:81:ed:40:bd:37:e8:2a:d4:ab:e8: f1:a4:e8:bb:42:d2:2a:a5:aa:4a:b3:b9:8c:11:71: 9a:ab:33:36:56:19:58:08:77:11:13:f2:0f:7b:2f: 81:17:9c:53:ae:52:56:b0:d3:b7:90:90:84:93:ea: 11:b6:45:8b:44:3c:f4:ee:43:80:09:73:1f:11:f8: 7e:5d:8c:54:1c:f8:23:21:ee:72:81:bd:00:59:bb: 89:c4:aa:3b:4f:d0:57:0b:cb:f9:12:2a:5b:2b:de: 76:8d:fb:88:f6:9d:ff:02:48:4d:7b:db:a3:b0:a9: e8:dd:e2:f2:b9:9d:34:55:da:ae:41:64:77:ed:de: f1:aa:ab:be:38:c5:0b:36:ad:c3:9f:4a:2a:86:79: 36:8f:2f:9d:82:5e:75:54:78:7a:29:e9:95:b0:30: 8d:dc:03:41:f9:32:b9:bc:c1:2f:0d:0e:90:ab:a2: b1:bb:14:89:5a:6c:11:54:fd:78:58:a8:0b:1c:5c: 0e:94:87:8c:a0:14:9e:7d:a3:3a:f5:31:97:2f:c5: a8:76:89:e5:68:f3:8d:f1:03:99:91:3f:74:96:4f: ef:a3:d7:a9:49:2f:52:bf:72:fd:e6:6c:e0:24:69: 61:43:81:c3:1c:db:ff:38:db:b1:1c:f5:4d:8a:b2: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AF:5D:BA:1B:25:C8:5F:65:AF:92:A2:68:23:F3:27:82:65:8C:3C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9c:42:8d:e6:e5:e8:06:8d:12:9d:3b:ba:ab:b7:25:96:57: 47:2d:5c:cc:b2:f1:d2:9c:62:ba:b7:e3:da:87:29:dd:17:27: 3d:9b:aa:f1:62:9c:de:3d:04:36:d5:c3:3a:c5:bb:46:a0:3f: 91:0d:81:28:9e:af:13:f6:1c:c1:46:59:6b:ba:1f:7e:73:e0: 94:f9:9e:2e:35:06:f1:9d:63:6b:6c:29:08:28:16:df:8d:0a: 4a:ba:75:71:03:41:13:d1:ed:08:2c:88:43:c1:65:9e:46:cd: 20:64:66:6c:f6:42:d6:3f:6d:79:dd:04:99:1c:54:3b:f0:eb: 59:e9:5e:6f:aa:16:df:a6:21:92:e5:d7:17:e6:63:e3:44:3e: aa:80:dc:5c:fd:22:1c:2f:ad:0e:0c:8b:ec:32:96:e4:ca:9a: bb:49:7a:f9:4e:76:91:a8:ea:95:7a:28:5f:8f:aa:60:ba:2b: d0:ea:b5:12:a8:1d:0f:32:ae:b6:68:66:ca:4c:9a:a6:e1:0f: 69:e6:36:c0:b7:b8:e1:47:2e:6a:df:6c:ad:36:78:27:da:0d: 4e:5a:e9:f7:f0:4e:6d:a7:63:d9:2e:f6:01:bc:c2:8e:04:35: 2c:2f:0d:f4:20:41:e5:a6:18:80:08:6d:0b:85:e3:43:8a:67: 5d:d7:4c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGU1kzaqrIpgbCZJe83kFI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMTAxMDIwMDM0WhcNMjYxMTAyMDIwMDM0WjAzMTEwLwYDVQQD Eyg5NGFmNWRiYTFiMjVjODVmNjVhZjkyYTI2ODIzZjMyNzgyNjU4YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMeKEoHtQL036CrUq+jxpOi7QtIq papKs7mMEXGaqzM2VhlYCHcRE/IPey+BF5xTrlJWsNO3kJCEk+oRtkWLRDz07kOA CXMfEfh+XYxUHPgjIe5ygb0AWbuJxKo7T9BXC8v5EipbK952jfuI9p3/AkhNe9uj sKno3eLyuZ00VdquQWR37d7xqqu+OMULNq3Dn0oqhnk2jy+dgl51VHh6KemVsDCN 3ANB+TK5vMEvDQ6Qq6KxuxSJWmwRVP14WKgLHFwOlIeMoBSefaM69TGXL8Wodonl aPON8QOZkT90lk/vo9epSS9Sv3L95mzgJGlhQ4HDHNv/ONuxHPVNirK9TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSvXbobJchfZa+Somgj8yeCZYw8MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5xCjebl 6AaNEp07uqu3JZZXRy1czLLx0pxiurfj2ocp3RcnPZuq8WKc3j0ENtXDOsW7RqA/ kQ2BKJ6vE/YcwUZZa7offnPglPmeLjUG8Z1ja2wpCCgW340KSrp1cQNBE9HtCCyI Q8FlnkbNIGRmbPZC1j9ted0EmRxUO/DrWeleb6oW36YhkuXXF+Zj40Q+qoDcXP0i HC+tDgyL7DKW5Mqau0l6+U52kajqlXooX4+qYLor0Oq1EqgdDzKutmhmykyapuEP aeY2wLe44Ucuat9srTZ4J9oNTlrp9/BObadj2S72AbzCjgQ1LC8N9CBB5aYYgAht C4XjQ4pnXddM/w== -----END CERTIFICATE-----Generated at Sun Nov 1 05:51:17 2026 by rpki-client