$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: Psyfbsjs3YtW7RxIycvwrb5q67bDwKeXncjjLaszaEE= Subject key identifier: 7C:F0:09:B8:26:4F:34:84:82:72:29:92:30:BA:74:79:D8:41:11:AB Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 0198D73B1B4F9708910A4E6ADB3480740B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 10AC Signing time: Sat 23 Aug 2025 14:00:31 +0000 Manifest this update: Sat 23 Aug 2025 14:00:31 +0000 Manifest next update: Sun 24 Aug 2025 14:00:31 +0000 Files and hashes: 1: 0RQ-WrGaW_a3SUMuIWvBi3re8Us.roa (hash: Vm0Yp0DBpXgsUlIoix2wYlP8daTTxgpllg8xunuDANo=) 2: 2c-138nK4yanjA_nFYFgRI3qkq8.roa (hash: eVkYs1Oz0s5AD5JOgKA2ZQfEyufJILyJFXY8+OH1Q4o=) 3: 3KNmMvvNnWz-gbQdS7pSD6NeSj8.roa (hash: 19Nj6yvWJYRr/APzHhAxi9EkGzAdWa0wPSZ7epiybNI=) 4: AWu3FimnriCBdHwo3g5MMDT1qE4.roa (hash: mO4hJXcIgDGlzI8xRSm/HtygAZ7WHc+oV+0VaCAIGc0=) 5: Giz24KLfpQkd7xs-DD95CPsPmOY.roa (hash: KQH/GuWZf651hnMRpwoGbmUFOnlVdGar78D6Hk0TRqM=) 6: Ls5gcPMX-M4WgeGybLOeWexgrwI.roa (hash: ddCFP8hel+nThr/Av/RaZ8w2aK3ehVlzvIwAydR9dmQ=) 7: N6KXHzVWixEktWPnU9eEkzBiRXA.roa (hash: ZeBA7mXHpgozatB0IZbSJ9v+AumsoGr7uGRE7BfY82k=) 8: WisrqhFtyIb2JbL0GIaBAVHWLTE.roa (hash: Y/GRGegzBf5aloGYHapUwpHTKh2vmOFKcBbghRvqMYw=) 9: dGrI4BE8oPWh3DjqR5EL1omnmFE.roa (hash: fh9dXwWPLeOX+9MGqs4zz/wpDF+snGcI3Q6bKbn3R34=) 10: fgKPPdW8bX1X6qK_GJWLhKliu3w.roa (hash: KwDL7D8DQXv/HgQm93E74+FZwYXZspxr0ZPQdGjc5BA=) 11: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: bDwZZjxgpL5XMlCr3suxKAUzHFHaHQKH69RyI4Ktv6I=) 12: jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa (hash: NDB0B6hhi9OkQwxq6X1dXNT80uauDo2rv8POlRS3xgc=) 13: lVD1-s3z_VEryG-EOJaasXYliY0.roa (hash: h8oMIjXYTJbKfdwIFG8fjlG+UgURPlIi2HuuI8oOKSE=) 14: lwed3ihcQQrFsvv8k908fUPl3CM.roa (hash: Ug53jrAOg0K9fodJftRbAh41xK8TfAJeCOUBqHsGwb8=) 15: o7aaJIA1Lgq0zCdQCsOjEWzmMK0.roa (hash: WUPkYWF0I4A0srltNNQaHCMFjlD7ESqkAZxhm9FU4mI=) 16: q90aS9463wXYf4Sgoia8t4bKeN8.roa (hash: hvm9v4WmHwSkZ/edm7ru3afucj0r+/esuU2s4VhpOe8=) 17: qj6JzLV6yUCof1sB2xKr6dnriHk.roa (hash: OwtdnJIJzWn+DFiZhfavSFxynDXz7xR6fT1mm0Xe21w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:1b:4f:97:08:91:0a:4e:6a:db:34:80:74:0b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Aug 23 14:00:31 2025 GMT Not After : Aug 24 14:00:31 2025 GMT Subject: CN=7cf009b8264f34848272299230ba7479d84111ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:75:b4:f5:2a:b9:21:0b:99:ab:77:ef:da: 9d:23:dd:b7:74:b2:b4:b0:32:ee:2b:96:bb:80:d7: 34:b2:75:5c:5a:0f:82:26:b3:ec:91:9d:f1:f0:79: c8:5f:bb:9f:6d:13:ba:22:0d:33:6d:0a:43:9c:3e: 6b:d2:48:d9:21:4a:be:ff:09:a3:81:9e:98:83:bb: 69:7f:64:ff:b4:f7:8b:34:de:5e:8a:6f:89:d1:dd: 0e:d0:df:70:ce:7f:6b:a0:80:db:94:84:f4:38:3e: 49:6a:b4:fb:f2:d7:ab:ed:62:96:d3:1b:f7:df:05: a4:fa:97:35:ae:14:5d:48:92:a7:f5:25:96:cf:e5: 4b:af:6c:60:23:14:ed:31:e2:3c:05:fe:ff:a8:54: 17:6a:7f:2e:af:5a:bf:04:bf:78:3b:60:59:cb:cd: 36:13:79:ad:11:e4:b7:5d:dd:71:83:06:f2:4a:d8: 52:90:15:ab:33:db:62:9b:68:c1:a2:91:e2:3a:7b: 72:78:15:01:03:aa:ee:d7:2a:5e:4c:fb:2f:ab:3e: 3d:1c:3b:60:75:87:31:9f:0b:a7:cb:5b:a1:0b:50: 2f:1b:a5:16:b0:1e:08:f8:c1:99:11:58:b8:ec:f1: c8:ea:fb:97:1c:70:3a:12:82:48:ca:19:a8:e1:b6: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F0:09:B8:26:4F:34:84:82:72:29:92:30:BA:74:79:D8:41:11:AB X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6a:60:b9:d9:c9:9b:33:f3:6f:cb:2a:dd:11:02:8f:be:99: 2a:a8:77:c6:12:f9:8b:af:ea:5b:fa:26:91:86:09:45:85:6f: 57:9e:3f:26:07:bf:70:f8:c2:99:fb:52:73:6c:64:46:24:33: e4:46:fa:da:8e:ad:f4:6c:a5:61:39:e0:53:e2:db:b9:2b:ca: 73:9e:87:62:56:65:91:df:b2:18:51:cc:c5:b2:c8:01:8a:ef: 5e:28:4a:54:b3:3e:de:db:aa:fd:0a:ea:17:aa:83:2e:64:b2: e9:24:18:50:e0:10:b8:da:97:3c:80:eb:8e:4b:c6:32:26:cb: 75:14:6f:e3:8b:2a:06:ba:2a:10:4b:30:08:e6:0b:ee:59:2d: 96:96:a4:b6:da:d9:78:c4:a3:5c:3f:bd:31:76:ef:63:49:c2: 96:41:69:b3:21:b9:e0:7e:d5:8d:ef:11:1c:26:fc:2d:18:af: 8b:2b:e6:f4:d1:a4:69:bb:dd:6f:ef:ef:ec:35:d6:72:4e:1a: 75:0c:08:1d:9c:eb:82:f9:f1:ee:1f:8f:2c:20:93:53:51:b8: e0:0e:7d:16:53:28:15:04:aa:00:a8:de:e0:e3:d1:80:d6:db: f8:2a:14:15:5d:c2:c9:2d:6e:d7:c8:26:34:a7:f9:53:73:58: 19:20:41:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXOxtPlwiRCk5q2zSAdAt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjUwODIzMTQwMDMxWhcNMjUwODI0MTQwMDMxWjAzMTEwLwYDVQQD Eyg3Y2YwMDliODI2NGYzNDg0ODI3MjI5OTIzMGJhNzQ3OWQ4NDExMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBB1tPUquSELmat379qdI923dLK0 sDLuK5a7gNc0snVcWg+CJrPskZ3x8HnIX7ufbRO6Ig0zbQpDnD5r0kjZIUq+/wmj gZ6Yg7tpf2T/tPeLNN5eim+J0d0O0N9wzn9roIDblIT0OD5JarT78ter7WKW0xv3 3wWk+pc1rhRdSJKn9SWWz+VLr2xgIxTtMeI8Bf7/qFQXan8ur1q/BL94O2BZy802 E3mtEeS3Xd1xgwbySthSkBWrM9tim2jBopHiOntyeBUBA6ru1ypeTPsvqz49HDtg dYcxnwuny1uhC1AvG6UWsB4I+MGZEVi47PHI6vuXHHA6EoJIyhmo4bam0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzwCbgmTzSEgnIpkjC6dHnYQRGrMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWpgudnJ mzPzb8sq3RECj76ZKqh3xhL5i6/qW/omkYYJRYVvV54/Jge/cPjCmftSc2xkRiQz 5Eb62o6t9GylYTngU+LbuSvKc56HYlZlkd+yGFHMxbLIAYrvXihKVLM+3tuq/Qrq F6qDLmSy6SQYUOAQuNqXPIDrjkvGMibLdRRv44sqBroqEEswCOYL7lktlpakttrZ eMSjXD+9MXbvY0nClkFpsyG54H7Vje8RHCb8LRiviyvm9NGkabvdb+/v7DXWck4a dQwIHZzrgvnx7h+PLCCTU1G44A59FlMoFQSqAKje4OPRgNbb+CoUFV3CyS1u18gm NKf5U3NYGSBBkw== -----END CERTIFICATE-----Generated at Sat Aug 23 20:46:16 2025 by rpki-client