$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: fVvtoIUv+zI3HlEjxEa3u33AQZk4LaAjuHWbi0c2eHg= Subject key identifier: 67:30:99:46:55:90:7C:37:35:27:80:B7:DF:9C:5D:94:9C:D8:F5:53 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019CBEBAD4D622E0E83CFD8AED499683DDEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 12B3 Signing time: Thu 05 Mar 2026 16:00:41 +0000 Manifest this update: Thu 05 Mar 2026 16:00:41 +0000 Manifest next update: Fri 06 Mar 2026 16:00:41 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: XNVwZESHYsx6LgwXKzuXEB+O6GgyGchY45tdUt9rOuQ=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:be:ba:d4:d6:22:e0:e8:3c:fd:8a:ed:49:96:83:dd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Mar 5 16:00:41 2026 GMT Not After : Mar 6 16:00:41 2026 GMT Subject: CN=6730994655907c37352780b7df9c5d949cd8f553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:3c:27:31:09:90:a7:35:77:7a:57:c0:14: 28:45:d6:41:bb:61:12:df:a1:f8:e7:fe:fb:43:03: 93:02:3f:ee:57:76:04:e7:1e:00:7f:33:bf:b1:74: e0:99:85:1e:32:fa:cd:df:4c:56:e4:79:6d:ac:12: a8:3b:23:20:f6:24:8f:35:36:78:ed:29:9a:a1:0c: 9b:f2:04:46:18:3a:66:d9:8b:7b:4f:f0:74:29:c9: fb:02:b9:09:13:3f:ca:9c:12:2f:39:63:e4:fb:f0: 25:5f:f1:d5:1e:b7:44:80:65:7e:bc:a1:fb:79:f5: 00:6a:e8:32:f1:92:c6:11:4e:c5:63:0a:27:c3:5e: 3d:ba:51:e9:b4:ae:19:16:88:08:82:ba:e2:5b:44: b2:12:58:5e:5e:b4:a2:58:d0:c7:ac:56:50:a8:f5: 30:68:5c:c5:db:4f:1f:47:ad:24:4c:ef:3f:1e:75: 58:a5:12:2c:76:9c:dc:d4:bd:f6:48:b8:ae:d3:27: a5:04:f5:e8:35:d1:83:30:be:8b:7e:5e:92:72:3c: f4:d8:79:46:07:c2:0f:ed:e2:01:15:1a:a7:7e:43: 82:3b:76:c3:0e:57:60:f4:be:d7:fd:be:8c:cd:2c: 35:ed:47:0e:6e:90:5c:5e:e3:a2:b1:9b:24:e5:1f: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:30:99:46:55:90:7C:37:35:27:80:B7:DF:9C:5D:94:9C:D8:F5:53 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:62:95:b3:5e:e4:d2:4f:03:55:f2:8a:2b:bc:3b:4e:69:28: 15:45:c1:f6:e5:58:4e:c7:7d:31:f9:e3:b5:72:7a:7d:7a:9a: 96:62:07:2a:77:80:30:74:65:aa:8a:63:ce:58:14:e9:ca:be: 71:78:d0:54:d1:b2:60:50:24:58:e8:90:47:5b:67:11:27:10: 20:89:b4:96:3e:47:07:15:3f:95:bb:3e:39:9a:2f:43:fb:ab: 47:02:9f:3b:9b:7f:a1:1e:2b:44:10:35:82:12:a2:49:42:b7: 50:f6:d5:62:5b:4d:e0:65:6c:b9:30:5e:15:e1:ff:9b:95:54: b7:94:7e:26:b7:f1:50:fa:88:54:78:c4:97:cb:5c:cb:b2:ab: 74:8e:fb:97:67:98:1a:70:25:24:c2:53:d1:6c:0c:41:79:f8: a4:41:f3:db:5b:37:82:f8:9f:12:92:cb:c6:64:9e:67:36:c2: d4:0b:a6:cb:aa:9a:c7:82:09:66:06:03:7d:d7:3c:30:3d:cf: 46:33:37:88:9d:09:ac:63:0a:4f:51:45:9f:d2:ca:1a:01:52: 83:d4:c5:cb:b7:2c:02:fd:a6:d6:42:63:8f:bb:90:34:c7:e9: 09:71:af:4c:08:af:e1:6c:d7:00:f7:ae:74:f4:d4:e1:a4:b3: a1:80:72:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy+utTWIuDoPP2K7UmWg93vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMzA1MTYwMDQxWhcNMjYwMzA2MTYwMDQxWjAzMTEwLwYDVQQD Eyg2NzMwOTk0NjU1OTA3YzM3MzUyNzgwYjdkZjljNWQ5NDljZDhmNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6A8JzEJkKc1d3pXwBQoRdZBu2ES 36H45/77QwOTAj/uV3YE5x4AfzO/sXTgmYUeMvrN30xW5HltrBKoOyMg9iSPNTZ4 7SmaoQyb8gRGGDpm2Yt7T/B0Kcn7ArkJEz/KnBIvOWPk+/AlX/HVHrdEgGV+vKH7 efUAaugy8ZLGEU7FYwonw149ulHptK4ZFogIgrriW0SyElheXrSiWNDHrFZQqPUw aFzF208fR60kTO8/HnVYpRIsdpzc1L32SLiu0yelBPXoNdGDML6Lfl6Scjz02HlG B8IP7eIBFRqnfkOCO3bDDldg9L7X/b6MzSw17UcObpBcXuOisZsk5R96KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcwmUZVkHw3NSeAt9+cXZSc2PVTMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGKVs17k 0k8DVfKKK7w7TmkoFUXB9uVYTsd9MfnjtXJ6fXqalmIHKneAMHRlqopjzlgU6cq+ cXjQVNGyYFAkWOiQR1tnEScQIIm0lj5HBxU/lbs+OZovQ/urRwKfO5t/oR4rRBA1 ghKiSUK3UPbVYltN4GVsuTBeFeH/m5VUt5R+JrfxUPqIVHjEl8tcy7KrdI77l2eY GnAlJMJT0WwMQXn4pEHz21s3gvifEpLLxmSeZzbC1Aumy6qax4IJZgYDfdc8MD3P RjM3iJ0JrGMKT1FFn9LKGgFSg9TFy7csAv2m1kJjj7uQNMfpCXGvTAiv4WzXAPeu dPTU4aSzoYBy0A== -----END CERTIFICATE-----Generated at Fri Mar 6 00:45:05 2026 by rpki-client