$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: LeHx6lJGktXDl6ZCx/WvNWdV2aZlZbioEKQwXPsMMvA= Subject key identifier: D4:A7:A2:FC:0D:EF:F3:28:12:5C:90:E3:F7:05:E0:DF:F2:39:20:D0 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019E1D59B9DFEFC467C7AD1EE99D8452F5FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 136A Signing time: Tue 12 May 2026 18:01:19 +0000 Manifest this update: Tue 12 May 2026 18:01:19 +0000 Manifest next update: Wed 13 May 2026 18:01:19 +0000 Files and hashes: 1: 2FTZk29N4ByQY45BtJSQSIVpVRM.roa (hash: rAVovOm/njZtMMmGMfPRxJdixQBe2en8/pj68uz5a98=) 2: 94DmWvO75aSCrTILT7xO5QfIZ4Q.roa (hash: yowEVWaH5JasWlMxUT7Mgz1/3iSP8rVz/KjlsGeBATs=) 3: Lw_o47E9qYaZtJPZjp5m1M1e0_o.roa (hash: TnHpGib6gDq3lP3ubauOs2iA7D/xB8DKvaZF7GPTkuk=) 4: MRCItQ1B9948OVdVK1kL96AGPQI.roa (hash: ZQgpMxwvj3QAdwytn7kSRtX4MaK4Pcv8MlZ4Lzpi3Pg=) 5: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (hash: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k=) 6: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (hash: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo=) 7: OxJM60qRQUOtdqYrv27xs3_kv9k.roa (hash: w3ZIUcbiJQn/X+ANNYduQprQtRgqv43tl64iIBJ+uVs=) 8: PyHODj5n0DejAoWrQZBIRXaXo6Y.roa (hash: 3ofBNW8DPxuvHoS9tkTr0YH1zUrrGyXEWYQ/aOGrjNI=) 9: RTPP9X2zvoR_qL8VtqZr6WEHKzw.roa (hash: bz39/MS5H8r1qd18PCFQ3+2kRu1MJoP1Vd1Xyr//BW0=) 10: WGYchnyCAbqQd8pzwZhRwcjvgv8.roa (hash: I9YjzWZ/pqf8yScr+6TqbtawBHd4EYuPwRC5bUBqVQw=) 11: Wz0IiveJRR3iZ_TFadI3Bt6mJJE.roa (hash: CImcnKPxhqg5cF+ps6Yupe+fhV0VE9C6rzuLTV7FS3Q=) 12: X2QsnfxAM9ScjVh_AzAztNDaXJg.roa (hash: L4YEdLYOkjYPPZMBRJDRYkJkVBQq0athDIG3eYPShmM=) 13: Z_IuqEKKfXuEOIP93u24e6BLk0E.roa (hash: 9YG/wmkjQ+naLweN0fWYFNb6KTTbRHlNigN8yWNOBNk=) 14: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: hDXuPZCHRf98dVt7jb8V83Cbn8SquAZIfFFUoxPZMZo=) 15: htqKUhJyQNt1qA3G44rlxCxq60M.roa (hash: id0wxN4WW72w7KuwB5zxXQt9wJQv2b/0iQarjkgrnuM=) 16: t4R25ZXPVStjauKJN0GTtODr3yU.roa (hash: g5h7UJb9yZQYOvckJX3+K/kTtGb30JhlTLu3Ss9IriI=) 17: u26dzWx1WsuAyPhRE3IG1GMmdJc.roa (hash: gEHPHjFqESUZPon7FHlszrJPYiDLqkhRmgKIOhvsfGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:b9:df:ef:c4:67:c7:ad:1e:e9:9d:84:52:f5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 12 18:01:19 2026 GMT Not After : May 13 18:01:19 2026 GMT Subject: CN=d4a7a2fc0deff328125c90e3f705e0dff23920d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:2f:45:32:ff:3a:09:49:18:da:1b:69:5c: 7d:6c:e7:e9:80:31:a1:03:07:4d:af:a0:9a:41:01: fd:80:1d:5a:6d:bd:6d:fa:8d:78:91:da:92:72:b2: f2:2f:5f:91:84:58:09:05:8f:00:5c:74:ff:f0:96: 0b:45:02:9c:d8:88:76:3b:05:1c:64:5c:e4:d0:ee: f4:ce:3a:9c:54:0c:61:6f:1f:df:cf:a6:3a:50:d4: a3:88:56:c9:65:80:85:78:39:cd:ae:ec:72:1c:61: 74:d7:7a:26:90:a1:01:8f:ed:be:c2:dd:d9:08:55: 27:87:d0:f5:e5:b8:06:5a:78:96:5c:ca:4b:ab:3c: 56:ba:dd:97:96:e8:eb:ed:c0:34:27:4f:88:5e:ae: e8:16:4d:fe:1e:d7:8e:ea:fa:8e:6f:8e:03:8e:05: 9a:81:84:f2:d7:db:5e:e1:a1:05:a5:60:34:4b:92: 97:50:5b:22:a5:e6:a8:10:c1:d6:fb:9c:54:1b:ee: d9:92:43:3a:a3:56:1f:43:61:90:d7:28:c5:7b:ce: 54:e5:f3:ae:d1:1b:07:f6:c0:75:35:e3:14:9d:75: e4:56:3b:5c:14:4f:a4:0b:e0:1e:c2:6a:7c:d4:72: 1f:e2:e6:38:70:de:ae:96:21:8f:3c:de:fb:a4:83: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:A2:FC:0D:EF:F3:28:12:5C:90:E3:F7:05:E0:DF:F2:39:20:D0 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:13:d0:8c:a1:6a:7f:2d:58:d7:78:81:43:d2:96:47:3b:a0: 5a:4d:bb:0e:f4:c7:78:7e:b3:b3:84:ce:81:f5:a9:96:d1:37: fa:a7:cb:b3:6b:01:70:8d:11:8a:5d:19:22:e3:4a:97:86:a3: 5b:f5:f3:18:d3:ee:e0:14:f5:dd:5e:a2:10:f5:bf:b1:de:45: b7:91:a7:54:b3:2c:d2:6a:91:95:2b:bc:76:e8:e3:9a:e7:b4: 0e:57:cc:87:4a:dd:59:23:9d:59:c9:40:70:33:5d:16:86:70: 0b:7f:0f:0c:4a:4e:af:d3:10:61:7f:19:25:31:3f:5b:0d:d5: 83:24:36:52:d2:8f:0c:ad:d2:c5:0e:ad:b4:b1:c4:3d:5a:92: cd:cb:3b:37:6c:bb:5e:5f:28:9c:31:d3:08:64:dd:4f:fa:60: e7:78:a0:cd:3c:0e:d1:0e:aa:0e:b0:62:a4:f3:3a:3a:45:d2: e5:42:22:75:c4:1e:78:cb:4b:d7:30:ba:41:8b:63:1a:e7:7b: d0:cc:05:ea:72:ba:4a:7e:4f:26:f5:dc:90:69:4a:ae:91:a0: 89:6c:9d:e4:d8:38:12:5c:fa:fe:91:9e:b7:02:f2:dd:49:b1: aa:bc:6b:33:28:61:2e:db:5e:a6:fa:b0:68:9b:9a:d6:77:a0: db:5c:f2:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWbnf78Rnx60e6Z2EUvX/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwNTEyMTgwMTE5WhcNMjYwNTEzMTgwMTE5WjAzMTEwLwYDVQQD EyhkNGE3YTJmYzBkZWZmMzI4MTI1YzkwZTNmNzA1ZTBkZmYyMzkyMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqAvRTL/OglJGNobaVx9bOfpgDGh AwdNr6CaQQH9gB1abb1t+o14kdqScrLyL1+RhFgJBY8AXHT/8JYLRQKc2Ih2OwUc ZFzk0O70zjqcVAxhbx/fz6Y6UNSjiFbJZYCFeDnNruxyHGF013omkKEBj+2+wt3Z CFUnh9D15bgGWniWXMpLqzxWut2Xlujr7cA0J0+IXq7oFk3+HteO6vqOb44DjgWa gYTy19te4aEFpWA0S5KXUFsipeaoEMHW+5xUG+7ZkkM6o1YfQ2GQ1yjFe85U5fOu 0RsH9sB1NeMUnXXkVjtcFE+kC+Aewmp81HIf4uY4cN6uliGPPN77pIOAvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSnovwN7/MoElyQ4/cF4N/yOSDQMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRPQjKFq fy1Y13iBQ9KWRzugWk27DvTHeH6zs4TOgfWpltE3+qfLs2sBcI0Ril0ZIuNKl4aj W/XzGNPu4BT13V6iEPW/sd5Ft5GnVLMs0mqRlSu8dujjmue0DlfMh0rdWSOdWclA cDNdFoZwC38PDEpOr9MQYX8ZJTE/Ww3VgyQ2UtKPDK3SxQ6ttLHEPVqSzcs7N2y7 Xl8onDHTCGTdT/pg53igzTwO0Q6qDrBipPM6OkXS5UIidcQeeMtL1zC6QYtjGud7 0MwF6nK6Sn5PJvXckGlKrpGgiWyd5Ng4Elz6/pGetwLy3UmxqrxrMyhhLttepvqw aJua1neg21zyPg== -----END CERTIFICATE-----Generated at Wed May 13 04:13:16 2026 by rpki-client