$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: 6fwee2/jEMOxVBV2mVajKBF4xhpzTCzjZ2ChsYyyVhg= Subject key identifier: 5B:82:9B:98:C7:FE:EC:4F:4C:4F:65:99:D7:26:A9:6A:37:B0:18:CB Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 01969F760A07936DEB6D8E8DBEA1B5F7A5AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 0F86 Signing time: Mon 05 May 2025 08:00:35 +0000 Manifest this update: Mon 05 May 2025 08:00:35 +0000 Manifest next update: Tue 06 May 2025 08:00:35 +0000 Files and hashes: 1: 0RQ-WrGaW_a3SUMuIWvBi3re8Us.roa (hash: Vm0Yp0DBpXgsUlIoix2wYlP8daTTxgpllg8xunuDANo=) 2: 2c-138nK4yanjA_nFYFgRI3qkq8.roa (hash: eVkYs1Oz0s5AD5JOgKA2ZQfEyufJILyJFXY8+OH1Q4o=) 3: 3KNmMvvNnWz-gbQdS7pSD6NeSj8.roa (hash: 19Nj6yvWJYRr/APzHhAxi9EkGzAdWa0wPSZ7epiybNI=) 4: AWu3FimnriCBdHwo3g5MMDT1qE4.roa (hash: mO4hJXcIgDGlzI8xRSm/HtygAZ7WHc+oV+0VaCAIGc0=) 5: Giz24KLfpQkd7xs-DD95CPsPmOY.roa (hash: KQH/GuWZf651hnMRpwoGbmUFOnlVdGar78D6Hk0TRqM=) 6: Ls5gcPMX-M4WgeGybLOeWexgrwI.roa (hash: ddCFP8hel+nThr/Av/RaZ8w2aK3ehVlzvIwAydR9dmQ=) 7: N6KXHzVWixEktWPnU9eEkzBiRXA.roa (hash: ZeBA7mXHpgozatB0IZbSJ9v+AumsoGr7uGRE7BfY82k=) 8: WisrqhFtyIb2JbL0GIaBAVHWLTE.roa (hash: Y/GRGegzBf5aloGYHapUwpHTKh2vmOFKcBbghRvqMYw=) 9: dGrI4BE8oPWh3DjqR5EL1omnmFE.roa (hash: fh9dXwWPLeOX+9MGqs4zz/wpDF+snGcI3Q6bKbn3R34=) 10: fgKPPdW8bX1X6qK_GJWLhKliu3w.roa (hash: KwDL7D8DQXv/HgQm93E74+FZwYXZspxr0ZPQdGjc5BA=) 11: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: sujFSeaBvEKt39vB9gV7jin6O/y6AQ5vtc5JkvtKz3o=) 12: jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa (hash: NDB0B6hhi9OkQwxq6X1dXNT80uauDo2rv8POlRS3xgc=) 13: lVD1-s3z_VEryG-EOJaasXYliY0.roa (hash: h8oMIjXYTJbKfdwIFG8fjlG+UgURPlIi2HuuI8oOKSE=) 14: lwed3ihcQQrFsvv8k908fUPl3CM.roa (hash: Ug53jrAOg0K9fodJftRbAh41xK8TfAJeCOUBqHsGwb8=) 15: o7aaJIA1Lgq0zCdQCsOjEWzmMK0.roa (hash: WUPkYWF0I4A0srltNNQaHCMFjlD7ESqkAZxhm9FU4mI=) 16: q90aS9463wXYf4Sgoia8t4bKeN8.roa (hash: hvm9v4WmHwSkZ/edm7ru3afucj0r+/esuU2s4VhpOe8=) 17: qj6JzLV6yUCof1sB2xKr6dnriHk.roa (hash: OwtdnJIJzWn+DFiZhfavSFxynDXz7xR6fT1mm0Xe21w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:76:0a:07:93:6d:eb:6d:8e:8d:be:a1:b5:f7:a5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: May 5 08:00:35 2025 GMT Not After : May 6 08:00:35 2025 GMT Subject: CN=5b829b98c7feec4f4c4f6599d726a96a37b018cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:22:fa:76:f5:96:72:5d:9b:5e:b2:91:af: 38:98:d0:30:12:2c:32:f8:04:ca:0e:a1:ab:0a:63: 43:71:6a:0b:34:d8:db:2c:29:48:e9:e9:64:ce:6a: 99:11:c4:c8:2d:3a:84:5d:c4:91:6a:a8:ca:cf:76: 90:98:7d:8a:49:56:c7:bc:f9:2c:98:7c:6d:17:26: a4:be:f6:05:1b:28:2a:3d:91:f0:cd:38:cc:15:79: e0:3c:9b:c2:a0:f4:9a:01:93:87:52:a8:48:8e:4e: 82:fc:c3:9a:fd:89:52:c7:1c:18:d6:3d:81:5c:8c: 07:79:05:78:41:37:4d:9b:e1:a4:f3:bb:1b:34:f5: 91:93:a4:d5:ad:69:07:fe:44:7f:af:96:11:b2:62: 0b:0f:b2:11:ed:f8:78:61:52:39:62:9c:af:d1:b1: be:e6:3e:ba:14:f1:d5:ba:8e:ad:de:8c:7a:ec:6d: 71:53:0a:37:57:f0:9e:ad:76:c9:ea:ba:ec:89:e4: a7:c5:1a:77:66:d7:be:84:96:5f:7a:71:32:08:66: d3:72:ae:d8:3c:9f:de:3f:3f:55:b0:62:32:0f:3c: 5a:e8:67:bf:95:4f:14:00:99:8f:b8:c0:82:a1:f4: 3c:4a:6e:4f:d4:2e:bf:4e:8d:98:8a:18:a1:bc:85: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:9B:98:C7:FE:EC:4F:4C:4F:65:99:D7:26:A9:6A:37:B0:18:CB X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:cb:0a:ec:21:44:00:50:10:34:05:37:02:09:63:2f:7f:49: ba:62:9c:83:58:8f:b1:6f:77:a9:37:ff:37:4d:eb:16:15:4f: 58:f4:34:4f:d9:30:b6:b7:89:14:c7:fb:e6:04:01:50:fd:d6: cc:a5:41:0c:5f:f2:3a:9c:02:62:13:3b:86:3f:3a:13:e8:f4: ae:61:3f:09:93:a1:15:44:4d:42:1f:ba:cc:d3:5c:6d:74:2a: 26:ed:b9:17:0c:38:40:81:bd:6b:cf:b3:ff:d4:ba:6b:9e:11: e8:3b:de:ac:69:ef:86:b7:ed:92:d0:e5:81:23:bc:41:81:0d: 3e:1b:37:1a:4e:c0:a4:88:45:73:48:5b:6a:3f:ea:43:25:d5: 4b:27:0d:5b:58:5f:d8:d4:06:62:a7:0d:25:72:a4:83:3a:59: 63:06:cb:b7:66:5b:07:a9:5a:e1:83:b3:bf:20:c1:59:3d:f1: b9:90:5b:74:32:56:7a:67:70:64:c9:0e:05:08:f7:29:f5:12: 9a:d0:b8:96:4f:8e:28:96:3d:bc:cd:a4:48:d5:04:d7:88:57: c0:61:05:7f:7d:2e:5f:3b:80:c6:25:c1:04:2f:f2:43:9e:d0: 3b:41:11:9c:eb:7b:f1:75:91:f7:8a:6f:f7:a4:d9:1b:7e:80: f6:3b:14:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZafdgoHk23rbY6NvqG196WsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjUwNTA1MDgwMDM1WhcNMjUwNTA2MDgwMDM1WjAzMTEwLwYDVQQD Eyg1YjgyOWI5OGM3ZmVlYzRmNGM0ZjY1OTlkNzI2YTk2YTM3YjAxOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Mi+nb1lnJdm16yka84mNAwEiwy +ATKDqGrCmNDcWoLNNjbLClI6elkzmqZEcTILTqEXcSRaqjKz3aQmH2KSVbHvPks mHxtFyakvvYFGygqPZHwzTjMFXngPJvCoPSaAZOHUqhIjk6C/MOa/YlSxxwY1j2B XIwHeQV4QTdNm+Gk87sbNPWRk6TVrWkH/kR/r5YRsmILD7IR7fh4YVI5Ypyv0bG+ 5j66FPHVuo6t3ox67G1xUwo3V/CerXbJ6rrsieSnxRp3Zte+hJZfenEyCGbTcq7Y PJ/ePz9VsGIyDzxa6Ge/lU8UAJmPuMCCofQ8Sm5P1C6/To2YihihvIWFnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuCm5jH/uxPTE9lmdcmqWo3sBjLMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMsK7CFE AFAQNAU3AgljL39JumKcg1iPsW93qTf/N03rFhVPWPQ0T9kwtreJFMf75gQBUP3W zKVBDF/yOpwCYhM7hj86E+j0rmE/CZOhFURNQh+6zNNcbXQqJu25Fww4QIG9a8+z /9S6a54R6DverGnvhrftktDlgSO8QYENPhs3Gk7ApIhFc0hbaj/qQyXVSycNW1hf 2NQGYqcNJXKkgzpZYwbLt2ZbB6la4YOzvyDBWT3xuZBbdDJWemdwZMkOBQj3KfUS mtC4lk+OKJY9vM2kSNUE14hXwGEFf30uXzuAxiXBBC/yQ57QO0ERnOt78XWR94pv 96TZG36A9jsUNA== -----END CERTIFICATE-----Generated at Mon May 5 10:38:03 2025 by rpki-client