$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: lSp9A/Z7AmKwsyYFo7qoEVuWMJqNGPxuizCbzPUPjYE= Subject key identifier: 06:5B:73:1A:E7:AB:00:0A:FC:12:AC:75:F8:1D:FC:02:29:9F:5C:A1 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01A0BE79CD39210E9AEF2012C5782BA1E99D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 14C9 Signing time: Sun 20 Sep 2026 11:00:48 +0000 Manifest this update: Sun 20 Sep 2026 11:00:48 +0000 Manifest next update: Mon 21 Sep 2026 11:00:48 +0000 Files and hashes: 1: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 2: I0ycopSi6_q86tsS_2ZsGMaSE7E.roa (hash: X5k67tgIigX44haykK5HKygDUVpwt1sPzwvIgtRhgUo=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 6: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 7: PujNlKftYzeQaE0MnZm0EPh4AFY.roa (hash: KOYoiHizuILiOcTb5DR0niku+PQ57DIf210w8rlbdQY=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (hash: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: hGsJFZRPp0Cuh5Qwqqgk/Zc4fSeP6AlRCNDAtx90hYU=) 16: kELckgtwVoSvJeEmqDzRwJ_w8M4.roa (hash: ryrV6l1reh0IiB1vVcw5FXf5SQ2NaFZbF4Pl/NJCuQ4=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:79:cd:39:21:0e:9a:ef:20:12:c5:78:2b:a1:e9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Sep 20 11:00:48 2026 GMT Not After : Sep 21 11:00:48 2026 GMT Subject: CN=065b731ae7ab000afc12ac75f81dfc02299f5ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:bf:51:7c:89:8d:84:cf:9c:35:25:ae:74: 05:3a:99:56:cc:5d:ce:38:f6:34:4b:e4:8f:ad:ed: 84:c0:61:d4:31:53:11:c2:e4:a9:26:16:c3:0e:24: 49:38:8b:d2:06:e9:19:1f:93:7c:65:bf:f0:e5:d7: 05:a2:af:c3:f7:92:b9:03:1c:76:4d:b2:d1:ac:95: 00:0d:e8:ef:58:f4:b3:93:ef:2b:3a:ca:bb:92:89: cd:6b:ec:9f:c7:5f:67:4e:2b:f0:df:95:70:fd:34: 6c:d3:04:a5:d2:dd:19:e5:31:57:8d:66:17:c9:75: 1c:cb:40:65:80:48:a7:9f:a7:28:15:10:63:6c:38: 55:10:eb:b2:ad:e2:30:be:a8:c1:6e:63:ba:87:ff: 0f:b1:2f:b0:c2:43:f1:f1:04:7e:88:11:ee:1d:f8: b8:02:bd:21:79:b2:b4:48:5b:b1:fd:6f:04:01:0d: 24:d9:b1:f5:f0:d9:b6:96:f8:23:92:43:70:54:bb: 5c:24:18:4c:65:78:2a:c6:3c:9b:87:4d:fa:5a:c6: d2:08:7c:c0:f4:1c:c1:3d:6f:93:ad:06:1d:5b:90: da:b8:2c:96:36:f8:a3:ce:30:8c:3b:fa:5d:7d:ad: 89:5a:5c:bc:a9:be:86:ff:8f:f4:13:49:c7:95:e4: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:73:1A:E7:AB:00:0A:FC:12:AC:75:F8:1D:FC:02:29:9F:5C:A1 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0c:01:cc:47:1b:42:1b:e1:a2:b8:7a:b7:87:02:0c:d5:2d: 9d:40:0a:a9:41:b2:aa:c3:ad:34:71:d2:a0:6f:ca:94:e1:2e: 83:34:9c:4d:70:44:b5:57:e6:f2:b1:cc:a2:29:b8:89:33:7b: a6:dc:fd:05:61:3e:05:a2:4e:ff:a6:1d:2d:fd:28:67:97:b0: 79:e6:10:14:ac:cf:17:0f:60:0e:ce:b7:cf:59:89:29:28:fc: 6d:6e:9a:5d:eb:1e:0b:86:7c:01:89:cf:6f:bc:9e:bb:0e:fc: 12:bb:b2:3e:7d:25:70:b9:57:ac:e1:81:78:25:73:f8:56:d9: 0c:d6:0e:ec:44:59:93:0c:44:18:d9:d5:4e:1a:4f:a1:23:de: 74:46:ed:aa:50:06:99:6a:b7:b0:23:b1:ce:a6:2b:dd:12:99: 89:ef:be:2b:44:f3:a9:a5:eb:11:8a:e4:b3:32:12:37:57:2e: 6b:a7:d8:72:1d:6c:94:a4:9e:71:ce:d3:71:8c:5f:1b:b6:fc: 9c:83:56:14:59:99:c3:dc:bb:00:66:89:56:59:02:0c:88:ae: 95:db:8a:75:98:e4:0f:2c:1a:20:32:59:3b:8c:d7:cd:c1:0f: aa:69:9e:5d:9e:b2:34:64:b7:0c:04:31:61:8a:aa:5f:a8:34: 38:38:7f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+ec05IQ6a7yASxXgroemdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwOTIwMTEwMDQ4WhcNMjYwOTIxMTEwMDQ4WjAzMTEwLwYDVQQD EygwNjViNzMxYWU3YWIwMDBhZmMxMmFjNzVmODFkZmMwMjI5OWY1Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYS/UXyJjYTPnDUlrnQFOplWzF3O OPY0S+SPre2EwGHUMVMRwuSpJhbDDiRJOIvSBukZH5N8Zb/w5dcFoq/D95K5Axx2 TbLRrJUADejvWPSzk+8rOsq7konNa+yfx19nTivw35Vw/TRs0wSl0t0Z5TFXjWYX yXUcy0BlgEinn6coFRBjbDhVEOuyreIwvqjBbmO6h/8PsS+wwkPx8QR+iBHuHfi4 Ar0hebK0SFux/W8EAQ0k2bH18Nm2lvgjkkNwVLtcJBhMZXgqxjybh036WsbSCHzA 9BzBPW+TrQYdW5DauCyWNvijzjCMO/pdfa2JWly8qb6G/4/0E0nHleQmrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZbcxrnqwAK/BKsdfgd/AIpn1yhMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgwBzEcb Qhvhorh6t4cCDNUtnUAKqUGyqsOtNHHSoG/KlOEugzScTXBEtVfm8rHMoim4iTN7 ptz9BWE+BaJO/6YdLf0oZ5eweeYQFKzPFw9gDs63z1mJKSj8bW6aXeseC4Z8AYnP b7yeuw78EruyPn0lcLlXrOGBeCVz+FbZDNYO7ERZkwxEGNnVThpPoSPedEbtqlAG mWq3sCOxzqYr3RKZie++K0TzqaXrEYrkszISN1cua6fYch1slKSecc7TcYxfG7b8 nINWFFmZw9y7AGaJVlkCDIiulduKdZjkDywaIDJZO4zXzcEPqmmeXZ6yNGS3DAQx YYqqX6g0ODh/+Q== -----END CERTIFICATE-----Generated at Sun Sep 20 20:14:49 2026 by rpki-client