$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: hJPvJRkeVE9l+nA7KtloZrK8RhNaeo1a42TSMZm2dcI= Subject key identifier: 39:17:8F:10:8D:02:7C:C1:AD:52:16:B8:D9:B7:53:F5:E6:B2:ED:FC Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A08E322D82E27906C48FFA039D37DD8EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14B0 Signing time: Fri 11 Sep 2026 02:00:48 +0000 Manifest this update: Fri 11 Sep 2026 02:00:48 +0000 Manifest next update: Sat 12 Sep 2026 02:00:48 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: lnA+Sektul8szhFMpFRKFdZpJfyn7z4nHdT/sNyGACs=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8e:32:2d:82:e2:79:06:c4:8f:fa:03:9d:37:dd:8e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 11 02:00:48 2026 GMT Not After : Sep 12 02:00:48 2026 GMT Subject: CN=39178f108d027cc1ad5216b8d9b753f5e6b2edfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:04:51:88:97:3c:39:b0:f8:4e:93:5f:2d: 2d:eb:c8:a1:11:63:4e:98:52:94:03:22:f0:9e:77: de:9d:0a:bc:c6:33:19:17:b2:a1:f6:96:c8:e5:33: bc:15:b1:d0:8c:8d:ea:07:3c:2f:cc:d9:82:b1:37: 05:44:1d:52:5d:af:11:07:d1:89:22:1c:19:66:88: a6:c4:d5:cb:aa:55:39:6b:84:b2:ba:c0:5d:62:df: e6:2f:c7:2d:f6:9a:8c:d1:ff:69:07:b5:ff:96:f1: f3:9c:94:06:f9:0e:df:96:db:67:6b:13:ef:77:b8: 0e:ff:24:19:58:03:4c:10:d1:df:80:11:e9:e4:45: 8f:5a:81:fc:4b:0a:47:ea:99:11:68:61:54:bb:1e: e9:06:01:34:bc:41:64:c2:ff:80:83:4a:03:11:a1: 7e:b5:9e:6a:36:01:54:c7:bd:8f:75:bd:79:53:5b: 68:83:80:d2:97:85:93:dc:a2:bd:df:d5:d4:5a:79: 98:71:10:64:0c:c6:d8:8d:c0:6c:31:63:b2:7d:7d: 2e:ae:ab:05:bc:2f:24:2b:4f:2c:41:5e:5c:79:fc: 0d:5f:08:0d:cf:9d:0d:f3:22:56:bd:53:ab:90:ac: a8:76:a8:10:48:22:f0:74:ca:45:a5:19:28:19:33: dd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:8F:10:8D:02:7C:C1:AD:52:16:B8:D9:B7:53:F5:E6:B2:ED:FC X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c8:11:06:bd:0a:0d:a6:e1:ad:72:5a:16:5d:c1:95:bb:13: 94:b0:3f:c6:97:64:62:cd:bf:aa:10:83:53:51:1d:28:c8:97: 0c:57:64:47:f9:47:3f:61:41:4b:ae:75:00:e9:f1:2a:b1:e2: bc:85:be:59:e9:91:9c:4b:82:92:cf:3a:75:71:6b:31:14:57: 87:14:16:10:bf:50:16:75:57:d7:85:95:ce:7a:ac:bb:62:e6: 19:83:28:cc:2a:31:88:74:f0:85:86:64:23:c0:8a:46:90:58: 10:d5:29:72:89:f2:46:d9:22:bf:ae:a7:10:ea:8e:4f:49:36: 3b:35:5b:61:8b:6c:a3:a9:e4:1b:70:b7:85:18:93:00:db:ff: f4:2a:11:48:81:6f:c2:f4:f8:8b:58:ad:a3:16:a5:e2:58:f2: 30:5e:93:be:04:bc:ab:cc:77:e2:cb:18:f1:6e:7d:37:fa:b7: 7f:dc:0a:ca:4b:f9:21:7f:41:1b:64:cf:3c:bb:3b:da:21:cb: fb:1b:7e:c1:7c:ee:ef:b9:a0:69:4b:e8:af:71:a0:7e:96:5a: f9:c3:e6:d0:ed:05:c9:2b:4e:6a:1c:32:c5:b4:05:bc:21:f1: da:ae:d6:f1:5a:41:1b:f6:5d:ff:96:f2:8c:e8:41:3b:5a:87: 3d:14:d4:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCOMi2C4nkGxI/6A5033Y7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTExMDIwMDQ4WhcNMjYwOTEyMDIwMDQ4WjAzMTEwLwYDVQQD EygzOTE3OGYxMDhkMDI3Y2MxYWQ1MjE2YjhkOWI3NTNmNWU2YjJlZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhoEUYiXPDmw+E6TXy0t68ihEWNO mFKUAyLwnnfenQq8xjMZF7Kh9pbI5TO8FbHQjI3qBzwvzNmCsTcFRB1SXa8RB9GJ IhwZZoimxNXLqlU5a4SyusBdYt/mL8ct9pqM0f9pB7X/lvHznJQG+Q7flttnaxPv d7gO/yQZWANMENHfgBHp5EWPWoH8SwpH6pkRaGFUux7pBgE0vEFkwv+Ag0oDEaF+ tZ5qNgFUx72Pdb15U1tog4DSl4WT3KK939XUWnmYcRBkDMbYjcBsMWOyfX0urqsF vC8kK08sQV5cefwNXwgNz50N8yJWvVOrkKyodqgQSCLwdMpFpRkoGTPdiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkXjxCNAnzBrVIWuNm3U/Xmsu38MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsgRBr0K DabhrXJaFl3BlbsTlLA/xpdkYs2/qhCDU1EdKMiXDFdkR/lHP2FBS651AOnxKrHi vIW+WemRnEuCks86dXFrMRRXhxQWEL9QFnVX14WVznqsu2LmGYMozCoxiHTwhYZk I8CKRpBYENUpconyRtkiv66nEOqOT0k2OzVbYYtso6nkG3C3hRiTANv/9CoRSIFv wvT4i1itoxal4ljyMF6TvgS8q8x34ssY8W59N/q3f9wKykv5IX9BG2TPPLs72iHL +xt+wXzu77mgaUvor3GgfpZa+cPm0O0FyStOahwyxbQFvCHx2q7W8VpBG/Zd/5by jOhBO1qHPRTU9Q== -----END CERTIFICATE-----Generated at Fri Sep 11 09:26:04 2026 by rpki-client