$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: p+ddVGI9Gt2lWKza+/hjT+fLbuQqp7jUyDyzrd6LrWk= Subject key identifier: 88:30:1D:B7:1E:9A:DB:C0:6D:6E:2C:DE:C4:5B:81:B1:D5:E9:69:85 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019CA97C7A5903A5E6C8F1167B67B933CC89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 12A8 Signing time: Sun 01 Mar 2026 13:00:33 +0000 Manifest this update: Sun 01 Mar 2026 13:00:33 +0000 Manifest next update: Mon 02 Mar 2026 13:00:33 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 6r3q3z9OFjrJ9qoUTQKhOroMbaM.roa (hash: 29mycutC5foPo3U8nHm9mrCTYw4984xkZIx+WiI1F9M=) 3: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 4: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 5: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 6: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 7: OKCXW7_MWWto3GWe7wi0avKoJxY.roa (hash: WqcSKwFHiTej52k827avLCbdmV9f2szfzxuzHTMps/4=) 8: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 9: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 10: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 11: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 12: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 13: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 14: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 15: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: FEOX2JqH6oTAlqav5rhLgRLtHwCPPl58f6vhH3Iy76M=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:7a:59:03:a5:e6:c8:f1:16:7b:67:b9:33:cc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Mar 1 13:00:33 2026 GMT Not After : Mar 2 13:00:33 2026 GMT Subject: CN=88301db71e9adbc06d6e2cdec45b81b1d5e96985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:8d:d2:06:1f:85:0d:d5:3e:e6:ad:80:9b: d9:b0:e5:26:87:8a:54:27:62:73:09:50:f3:2e:27: 90:01:6a:e3:5d:55:50:70:39:aa:e0:ed:ec:c4:e5: 4f:50:dc:18:35:f2:86:a9:98:d4:0d:6c:76:df:a9: de:b1:8b:e6:0f:a0:89:9f:2e:37:48:bb:35:67:ce: ce:58:e6:0c:40:e7:50:6e:ba:ee:97:4f:06:23:35: cf:dc:f4:1d:56:dc:50:29:6d:4c:6e:e6:56:63:8a: a1:01:ff:73:91:41:28:aa:90:b5:2c:54:37:90:98: 9c:e8:cd:04:8a:ef:e7:66:77:b3:1a:b8:77:7a:f0: 9d:c5:7d:cb:6b:d7:83:a1:48:10:15:c0:11:bb:81: e9:bb:7f:a8:7f:fc:5d:7f:e4:a3:cc:ec:9f:68:d2: 9f:15:f2:79:0e:19:1f:b2:0f:66:72:09:52:52:4e: ab:3b:44:35:89:d5:d0:e6:72:4a:23:e6:67:6d:71: 1b:5e:58:19:2c:d8:ca:b7:13:1e:45:61:6d:be:87: b8:d1:36:10:32:9b:47:85:40:bf:11:44:5a:8c:64: da:44:e7:d9:81:9b:c2:35:b5:25:c5:3f:02:4a:41: 69:d0:ca:4a:5d:e9:41:ed:98:ca:82:fd:6a:00:8f: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:1D:B7:1E:9A:DB:C0:6D:6E:2C:DE:C4:5B:81:B1:D5:E9:69:85 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9f:23:6e:42:12:94:34:37:aa:29:1a:8b:4c:95:8c:7e:77: e5:13:ea:65:d3:24:e5:b3:6d:12:98:98:78:2d:fa:91:7d:56: 17:8e:86:cc:d8:76:2f:6b:05:c6:d8:af:f9:c5:29:8a:8d:f1: 65:7c:8b:69:19:ae:e2:b1:5d:67:62:0e:c1:40:58:1a:13:08: 54:88:4a:a4:d8:91:5d:de:70:c9:dd:13:6e:4e:4d:a2:40:4d: bf:5f:f0:8c:9d:dd:ad:94:a3:e2:81:54:41:e6:90:b4:eb:aa: 8c:f0:0c:77:81:ac:e9:78:fe:e5:f1:cb:4f:f8:6c:c0:92:f0: 04:de:f4:5c:f3:69:82:bd:e9:82:d9:ac:32:e5:2b:f3:52:43: 46:e5:82:6a:f7:56:cb:68:6d:ec:d3:48:a0:5b:dd:4e:83:c0: 07:a4:de:b2:c4:c1:4e:06:87:ee:c8:5c:c6:64:7e:88:6d:86: 5e:7e:84:b8:b0:af:23:18:3d:c3:eb:a9:36:00:46:5d:fe:fc: 3b:0c:03:0f:f0:4a:ed:64:42:0a:b6:f3:9a:c1:49:5a:61:da: 32:7f:36:cd:2f:38:a9:97:f5:60:da:13:5f:88:22:cf:09:96: d9:8d:13:fe:5f:dd:13:c2:a0:f6:6e:f8:ea:a5:1a:9d:a1:32: b9:e0:14:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfHpZA6XmyPEWe2e5M8yJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMzAxMTMwMDMzWhcNMjYwMzAyMTMwMDMzWjAzMTEwLwYDVQQD Eyg4ODMwMWRiNzFlOWFkYmMwNmQ2ZTJjZGVjNDViODFiMWQ1ZTk2OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CiN0gYfhQ3VPuatgJvZsOUmh4pU J2JzCVDzLieQAWrjXVVQcDmq4O3sxOVPUNwYNfKGqZjUDWx236nesYvmD6CJny43 SLs1Z87OWOYMQOdQbrrul08GIzXP3PQdVtxQKW1MbuZWY4qhAf9zkUEoqpC1LFQ3 kJic6M0Eiu/nZnezGrh3evCdxX3La9eDoUgQFcARu4Hpu3+of/xdf+SjzOyfaNKf FfJ5Dhkfsg9mcglSUk6rO0Q1idXQ5nJKI+ZnbXEbXlgZLNjKtxMeRWFtvoe40TYQ MptHhUC/EURajGTaROfZgZvCNbUlxT8CSkFp0MpKXelB7ZjKgv1qAI9EPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgwHbcemtvAbW4s3sRbgbHV6WmFMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ8jbkIS lDQ3qikai0yVjH535RPqZdMk5bNtEpiYeC36kX1WF46GzNh2L2sFxtiv+cUpio3x ZXyLaRmu4rFdZ2IOwUBYGhMIVIhKpNiRXd5wyd0Tbk5NokBNv1/wjJ3drZSj4oFU QeaQtOuqjPAMd4Gs6Xj+5fHLT/hswJLwBN70XPNpgr3pgtmsMuUr81JDRuWCavdW y2ht7NNIoFvdToPAB6TessTBTgaH7shcxmR+iG2GXn6EuLCvIxg9w+upNgBGXf78 OwwDD/BK7WRCCrbzmsFJWmHaMn82zS84qZf1YNoTX4gizwmW2Y0T/l/dE8Kg9m74 6qUanaEyueAUPA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:49 2026 by rpki-client