$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 3xqUievwSPW+X187hyfD9ReweGDMvYDcsvd4Xw58m7A= Subject key identifier: F8:88:E3:72:C8:8E:58:B7:C7:26:5F:4C:83:59:FF:B8:20:3D:6A:A7 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A18D1D2D2DCFC308663519F5F22B4AE9C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1534 Signing time: Fri 30 Oct 2026 14:01:01 +0000 Manifest this update: Fri 30 Oct 2026 14:01:01 +0000 Manifest next update: Sat 31 Oct 2026 14:01:01 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: R0EO9IFwLptWRT+bfZ/cIioiXGwXAerK7N1ZFyBIDSM=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Oct 2026 08:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:8d:1d:2d:2d:cf:c3:08:66:35:19:f5:f2:2b:4a:e9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Oct 30 14:01:01 2026 GMT Not After : Oct 31 14:01:01 2026 GMT Subject: CN=f888e372c88e58b7c7265f4c8359ffb8203d6aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:a8:08:86:77:13:c5:0e:48:76:c7:cc:86: 23:fa:47:23:b7:4b:a7:55:66:6c:22:55:8a:7a:be: 19:2a:3c:88:19:b8:8a:87:89:2b:b2:34:cd:dd:8a: 54:0c:35:61:6a:9c:e4:15:a4:96:55:e1:2e:0e:7f: 13:35:11:63:63:73:8a:3e:ba:31:8d:b6:39:86:79: ca:7b:cd:27:64:f0:8f:77:bd:1e:fd:fb:13:86:6b: 89:f4:b6:99:d0:58:7a:62:e6:2b:d2:e5:26:98:0a: b9:b2:3c:7f:0d:90:4e:bd:2d:75:e9:0b:f9:39:b5: 7e:4a:95:ff:61:11:29:25:47:9c:ab:96:0c:28:11: 60:0c:2c:88:d5:0e:3d:0a:27:33:bc:b1:ac:9d:d1: 73:46:c1:e3:7d:eb:31:be:ac:ca:b3:9f:71:0c:07: 6b:35:75:8d:2c:04:7d:06:1d:a0:fa:d8:6b:e4:c8: d7:9a:b0:77:d9:cf:fd:6b:fe:94:67:18:b9:c6:f3: dd:76:54:a2:92:e4:2d:88:0d:92:af:ca:3f:39:80: e8:1f:0c:d7:45:a7:62:5c:07:46:2b:ce:57:95:67: 09:5d:e3:b8:a6:cf:44:5a:fa:97:c9:c6:e7:9f:fd: 12:27:b5:98:35:c1:be:c5:00:17:c6:90:01:48:1e: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:88:E3:72:C8:8E:58:B7:C7:26:5F:4C:83:59:FF:B8:20:3D:6A:A7 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9f:f8:c7:37:c0:9e:7a:df:4b:db:4d:3c:a0:a0:c6:a4:0d: f0:2b:c4:30:32:c3:d8:8f:7c:4f:38:52:2a:d3:5a:52:7e:de: 5b:7d:86:a6:f3:b6:5a:84:9c:da:ec:30:5d:5c:ec:14:42:56: 94:47:4f:55:3c:11:5d:19:df:ff:f7:3b:0c:45:74:40:b9:2d: 3b:17:c9:cd:02:51:bc:b9:86:b8:be:de:ef:c1:1d:71:ee:4f: aa:50:17:76:0d:0d:09:8e:54:ca:21:2d:b3:ba:2a:fa:b1:5b: c2:13:7f:7c:6b:d8:a9:08:d1:12:7b:6c:5d:7c:69:34:a8:72: ef:46:73:7f:42:fc:fe:d4:28:fa:01:23:7d:8f:3a:6d:d8:e8: 71:7f:75:66:da:66:40:b6:a9:2a:f1:63:94:2c:55:83:fc:0c: 16:e1:80:cc:34:be:13:f9:5a:0a:86:3a:b0:91:e4:3e:e5:fd: 01:dd:56:4a:93:13:e7:5a:0e:86:5b:03:12:99:eb:be:51:c9: 08:d8:36:00:c7:89:54:67:7a:16:6b:76:a3:05:b5:60:f1:25: 96:1b:f8:ff:b4:8b:38:97:7d:c0:af:ac:75:21:91:31:fa:4e: d0:1c:84:ae:cc:93:c2:c6:43:0f:26:68:ff:a3:2d:d8:0f:a4: e3:75:76:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGNHS0tz8MIZjUZ9fIrSunHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYxMDMwMTQwMTAxWhcNMjYxMDMxMTQwMTAxWjAzMTEwLwYDVQQD EyhmODg4ZTM3MmM4OGU1OGI3YzcyNjVmNGM4MzU5ZmZiODIwM2Q2YWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdCoCIZ3E8UOSHbHzIYj+kcjt0un VWZsIlWKer4ZKjyIGbiKh4krsjTN3YpUDDVhapzkFaSWVeEuDn8TNRFjY3OKProx jbY5hnnKe80nZPCPd70e/fsThmuJ9LaZ0Fh6YuYr0uUmmAq5sjx/DZBOvS116Qv5 ObV+SpX/YREpJUecq5YMKBFgDCyI1Q49CiczvLGsndFzRsHjfesxvqzKs59xDAdr NXWNLAR9Bh2g+thr5MjXmrB32c/9a/6UZxi5xvPddlSikuQtiA2Sr8o/OYDoHwzX RadiXAdGK85XlWcJXeO4ps9EWvqXycbnn/0SJ7WYNcG+xQAXxpABSB6H1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiI43LIjli3xyZfTINZ/7ggPWqnMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ/4xzfA nnrfS9tNPKCgxqQN8CvEMDLD2I98TzhSKtNaUn7eW32GpvO2WoSc2uwwXVzsFEJW lEdPVTwRXRnf//c7DEV0QLktOxfJzQJRvLmGuL7e78Edce5PqlAXdg0NCY5UyiEt s7oq+rFbwhN/fGvYqQjREntsXXxpNKhy70Zzf0L8/tQo+gEjfY86bdjocX91Ztpm QLapKvFjlCxVg/wMFuGAzDS+E/laCoY6sJHkPuX9Ad1WSpMT51oOhlsDEpnrvlHJ CNg2AMeJVGd6Fmt2owW1YPEllhv4/7SLOJd9wK+sdSGRMfpO0ByErsyTwsZDDyZo /6Mt2A+k43V2jQ== -----END CERTIFICATE-----Generated at Fri Oct 30 18:10:14 2026 by rpki-client