$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: m+br7eXOV8aJ9BcFYl645uVopG0WtjBWpjU4sHAcPW0= Subject key identifier: C9:73:72:B5:FE:FE:44:42:7A:8E:16:04:C7:92:7A:1A:07:CE:C0:AA Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019E7A0B67F01F33289BDF61B622DDE81DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 139A Signing time: Sat 30 May 2026 18:00:28 +0000 Manifest this update: Sat 30 May 2026 18:00:28 +0000 Manifest next update: Sun 31 May 2026 18:00:28 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: j1v2cIPdHr2y3kt1UTOfoAn17N2LZx3Cg52GkmKgllY=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 31 May 2026 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:7a:0b:67:f0:1f:33:28:9b:df:61:b6:22:dd:e8:1d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 30 18:00:28 2026 GMT Not After : May 31 18:00:28 2026 GMT Subject: CN=c97372b5fefe44427a8e1604c7927a1a07cec0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:76:6d:88:96:59:78:d5:50:d0:9e:b8:a4: 26:e3:52:25:6b:38:b1:a7:75:36:dc:8b:01:5c:6b: 10:d2:e9:52:3f:eb:6a:db:13:ce:1d:01:74:44:73: bf:5b:a8:02:e7:5b:c1:bd:95:48:07:c5:d2:49:c7: d4:4b:6e:0c:8d:69:6c:90:51:31:58:da:af:46:6b: 6f:e4:4a:32:8b:b2:e0:41:f1:95:55:09:9a:6a:26: d5:07:19:f5:47:33:7c:2f:35:15:d1:e4:01:d2:91: 70:ae:15:25:79:10:42:e4:10:0d:d9:cf:69:4d:c6: 8b:79:42:20:92:d7:5f:da:e6:a8:2e:1d:a3:d1:5b: 6e:79:36:90:b1:58:97:79:4b:4b:16:90:bb:a6:e5: 7c:ed:f3:a3:47:aa:a4:11:9b:eb:29:0c:3c:82:36: d4:80:08:f5:2c:06:4d:d6:e6:19:d6:6b:8e:6e:87: ab:a2:b9:61:d6:37:44:6f:d7:89:51:08:eb:2e:b3: 2a:32:84:be:3c:4b:e2:14:66:15:b9:7b:3f:e4:24: 94:e4:24:0d:bb:6d:dd:a1:90:b0:6a:d5:8b:f4:ba: b8:28:be:a9:3f:3b:e2:d6:94:2e:c7:27:28:e8:88: 79:ed:83:94:f6:24:59:53:7a:6f:16:1c:88:22:fd: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:72:B5:FE:FE:44:42:7A:8E:16:04:C7:92:7A:1A:07:CE:C0:AA X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f6:ca:54:be:ac:39:2c:57:a9:46:82:e7:84:4e:52:42:d1: cc:e1:19:45:bc:df:01:4c:d3:1e:be:15:aa:63:4c:e0:89:36: 29:de:ed:ce:58:0a:a0:3a:38:4c:b9:fc:87:77:69:ba:67:a3: 0f:20:c7:3f:85:86:36:1b:9b:1c:e4:e7:a3:68:08:e2:b5:02: 08:40:84:39:b6:f9:2d:fa:96:6a:33:3f:29:c3:04:7b:72:05: d6:e9:5d:b5:07:bc:7e:e7:da:44:06:3d:c8:18:5f:a6:3a:9b: 4f:65:fd:d9:bb:a9:05:a0:63:5e:90:dc:f6:12:55:65:de:e7: 45:06:fa:9a:be:76:94:3e:4d:cb:04:60:70:ec:17:3d:b5:7d: 1e:33:bc:69:b8:d8:76:ab:c6:9a:ca:9b:46:6e:e1:4a:42:f9: 5f:18:90:d5:54:f5:3e:51:0b:a4:71:cf:ae:cd:89:e9:80:ba: ba:7f:df:39:e5:83:ff:36:3f:5c:da:16:65:6e:6e:ef:84:1c: da:e1:92:0f:3a:d0:f8:88:7d:ab:5c:2b:9f:a3:90:f3:ab:de: 95:1f:68:08:75:48:7c:6d:61:db:90:5d:cf:e5:3c:84:d7:f7: e9:0a:7b:53:04:3a:1f:bf:b6:a7:c5:fd:04:ea:a7:3c:96:74: bf:05:29:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ56C2fwHzMom99htiLd6B3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNTMwMTgwMDI4WhcNMjYwNTMxMTgwMDI4WjAzMTEwLwYDVQQD EyhjOTczNzJiNWZlZmU0NDQyN2E4ZTE2MDRjNzkyN2ExYTA3Y2VjMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1352bYiWWXjVUNCeuKQm41Ilazix p3U23IsBXGsQ0ulSP+tq2xPOHQF0RHO/W6gC51vBvZVIB8XSScfUS24MjWlskFEx WNqvRmtv5Eoyi7LgQfGVVQmaaibVBxn1RzN8LzUV0eQB0pFwrhUleRBC5BAN2c9p TcaLeUIgktdf2uaoLh2j0VtueTaQsViXeUtLFpC7puV87fOjR6qkEZvrKQw8gjbU gAj1LAZN1uYZ1muOboerorlh1jdEb9eJUQjrLrMqMoS+PEviFGYVuXs/5CSU5CQN u23doZCwatWL9Lq4KL6pPzvi1pQuxyco6Ih57YOU9iRZU3pvFhyIIv2rdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlzcrX+/kRCeo4WBMeSehoHzsCqMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/bKVL6s OSxXqUaC54ROUkLRzOEZRbzfAUzTHr4VqmNM4Ik2Kd7tzlgKoDo4TLn8h3dpumej DyDHP4WGNhubHOTno2gI4rUCCECEObb5LfqWajM/KcMEe3IF1uldtQe8fufaRAY9 yBhfpjqbT2X92bupBaBjXpDc9hJVZd7nRQb6mr52lD5NywRgcOwXPbV9HjO8abjY dqvGmsqbRm7hSkL5XxiQ1VT1PlELpHHPrs2J6YC6un/fOeWD/zY/XNoWZW5u74Qc 2uGSDzrQ+Ih9q1wrn6OQ86velR9oCHVIfG1h25Bdz+U8hNf36Qp7UwQ6H7+2p8X9 BOqnPJZ0vwUpIA== -----END CERTIFICATE-----Generated at Sat May 30 19:24:05 2026 by rpki-client