$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft File: gho_IfsMKU1tSlKbLx29S9ERm9c.mft (raw, json) Hash identifier: oe1olA/lgs+hllnCpZvXuzKyyTWhJh/0awI3CCCxIWg= Subject key identifier: 4B:23:88:1E:4F:E1:CD:31:34:3B:CD:18:91:7B:6F:12:FA:D1:AD:1C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 0197B77CAE56FDEEC6BBA59268B3395DE785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft Manifest number: 1017 Signing time: Sat 28 Jun 2025 17:01:31 +0000 Manifest this update: Sat 28 Jun 2025 17:01:31 +0000 Manifest next update: Sun 29 Jun 2025 17:01:31 +0000 Files and hashes: 1: 0RQ-WrGaW_a3SUMuIWvBi3re8Us.roa (hash: Vm0Yp0DBpXgsUlIoix2wYlP8daTTxgpllg8xunuDANo=) 2: 2c-138nK4yanjA_nFYFgRI3qkq8.roa (hash: eVkYs1Oz0s5AD5JOgKA2ZQfEyufJILyJFXY8+OH1Q4o=) 3: 3KNmMvvNnWz-gbQdS7pSD6NeSj8.roa (hash: 19Nj6yvWJYRr/APzHhAxi9EkGzAdWa0wPSZ7epiybNI=) 4: AWu3FimnriCBdHwo3g5MMDT1qE4.roa (hash: mO4hJXcIgDGlzI8xRSm/HtygAZ7WHc+oV+0VaCAIGc0=) 5: Giz24KLfpQkd7xs-DD95CPsPmOY.roa (hash: KQH/GuWZf651hnMRpwoGbmUFOnlVdGar78D6Hk0TRqM=) 6: Ls5gcPMX-M4WgeGybLOeWexgrwI.roa (hash: ddCFP8hel+nThr/Av/RaZ8w2aK3ehVlzvIwAydR9dmQ=) 7: N6KXHzVWixEktWPnU9eEkzBiRXA.roa (hash: ZeBA7mXHpgozatB0IZbSJ9v+AumsoGr7uGRE7BfY82k=) 8: WisrqhFtyIb2JbL0GIaBAVHWLTE.roa (hash: Y/GRGegzBf5aloGYHapUwpHTKh2vmOFKcBbghRvqMYw=) 9: dGrI4BE8oPWh3DjqR5EL1omnmFE.roa (hash: fh9dXwWPLeOX+9MGqs4zz/wpDF+snGcI3Q6bKbn3R34=) 10: fgKPPdW8bX1X6qK_GJWLhKliu3w.roa (hash: KwDL7D8DQXv/HgQm93E74+FZwYXZspxr0ZPQdGjc5BA=) 11: gho_IfsMKU1tSlKbLx29S9ERm9c.crl (hash: jztCRWGy2f5XJZpRG6FeEGIQDVNlBaBZNfZn7xYjRF4=) 12: jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa (hash: NDB0B6hhi9OkQwxq6X1dXNT80uauDo2rv8POlRS3xgc=) 13: lVD1-s3z_VEryG-EOJaasXYliY0.roa (hash: h8oMIjXYTJbKfdwIFG8fjlG+UgURPlIi2HuuI8oOKSE=) 14: lwed3ihcQQrFsvv8k908fUPl3CM.roa (hash: Ug53jrAOg0K9fodJftRbAh41xK8TfAJeCOUBqHsGwb8=) 15: o7aaJIA1Lgq0zCdQCsOjEWzmMK0.roa (hash: WUPkYWF0I4A0srltNNQaHCMFjlD7ESqkAZxhm9FU4mI=) 16: q90aS9463wXYf4Sgoia8t4bKeN8.roa (hash: hvm9v4WmHwSkZ/edm7ru3afucj0r+/esuU2s4VhpOe8=) 17: qj6JzLV6yUCof1sB2xKr6dnriHk.roa (hash: OwtdnJIJzWn+DFiZhfavSFxynDXz7xR6fT1mm0Xe21w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:ae:56:fd:ee:c6:bb:a5:92:68:b3:39:5d:e7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jun 28 17:01:31 2025 GMT Not After : Jun 29 17:01:31 2025 GMT Subject: CN=4b23881e4fe1cd31343bcd18917b6f12fad1ad1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:5a:11:87:f9:90:82:7e:eb:93:d2:8f:d0: c5:8c:28:0b:e1:6f:93:21:a4:e3:fb:22:4e:a0:14: 85:90:ea:9f:ee:38:25:94:bc:21:0f:82:dc:3d:4a: 5c:5c:22:81:14:8b:56:49:22:8d:0b:5b:52:cf:31: 58:9a:63:e3:11:14:e0:ae:2c:9d:d4:09:b7:95:08: 19:b3:10:70:e2:65:ea:ef:00:96:33:3b:df:ba:fe: 35:cc:00:13:b5:2a:48:95:a4:c1:ac:30:0a:b1:ce: da:c1:07:4a:be:42:11:32:b5:07:6d:d9:1a:71:cb: 70:67:b8:0f:48:62:13:5a:31:91:93:d1:53:50:be: 18:a0:f7:06:f7:c5:84:a9:62:4f:ac:96:7c:df:f6: 95:3d:4a:79:56:66:42:0d:24:54:2a:77:b7:7d:6c: 00:fd:7b:12:a7:a3:f8:92:a8:e8:c7:5b:43:35:bc: 3a:22:da:80:dd:ef:35:58:52:a1:79:c6:2c:07:19: 90:01:d8:9b:d3:f3:54:c1:74:f8:a9:85:a6:7f:52: d8:de:8b:56:bd:0a:2d:cb:23:d5:33:35:6c:65:82: e0:b9:8e:b7:21:33:fe:80:0c:2c:0e:f1:15:07:32: e3:38:13:70:ec:ca:9e:bf:20:da:5a:40:cd:5d:9e: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:88:1E:4F:E1:CD:31:34:3B:CD:18:91:7B:6F:12:FA:D1:AD:1C X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:41:91:4d:77:66:4b:d2:1b:c9:39:50:e4:fd:c9:a0:2c: 3b:7c:b5:5a:65:e5:69:37:d0:57:ac:0b:37:57:b7:56:29:12: ab:8f:15:a6:39:2c:fa:11:3f:bd:86:00:35:a8:c9:a0:bb:22: 89:9d:76:88:77:f0:82:20:9b:70:e2:2c:a6:6d:fd:0d:9c:66: 56:48:74:d8:e8:0c:00:64:93:06:1e:94:f9:80:9c:c5:48:5a: 84:96:09:ea:d3:c6:53:0d:9f:00:f8:14:f9:e6:57:30:17:3b: 01:df:12:fd:f0:08:63:db:3c:5e:f7:75:0f:ec:8a:f3:b0:45: 1a:10:fe:c1:b0:0d:d7:bc:c5:da:03:b4:bd:8b:f5:3a:8f:45: 5d:cd:76:1f:19:45:c5:a8:4a:51:05:76:9d:54:f5:6f:da:89: 8e:85:82:ec:7c:6d:c4:d8:cf:15:94:17:d0:79:f4:36:52:92: ad:be:51:d1:e6:72:9a:1f:6c:ec:98:41:60:21:c2:6c:bb:dc: 06:6c:b2:51:da:7e:78:e4:cb:ab:6b:90:10:40:1e:da:2c:10: 8b:b2:4b:9f:7b:5e:b1:74:1a:3e:55:3a:cd:fb:72:70:31:3e: 9c:09:35:71:87:96:13:4b:44:56:f3:85:77:84:33:83:a6:18: 16:67:cf:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fK5W/e7Gu6WSaLM5XeeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjUwNjI4MTcwMTMxWhcNMjUwNjI5MTcwMTMxWjAzMTEwLwYDVQQD Eyg0YjIzODgxZTRmZTFjZDMxMzQzYmNkMTg5MTdiNmYxMmZhZDFhZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizRaEYf5kIJ+65PSj9DFjCgL4W+T IaTj+yJOoBSFkOqf7jgllLwhD4LcPUpcXCKBFItWSSKNC1tSzzFYmmPjERTgriyd 1Am3lQgZsxBw4mXq7wCWMzvfuv41zAATtSpIlaTBrDAKsc7awQdKvkIRMrUHbdka cctwZ7gPSGITWjGRk9FTUL4YoPcG98WEqWJPrJZ83/aVPUp5VmZCDSRUKne3fWwA /XsSp6P4kqjox1tDNbw6ItqA3e81WFKhecYsBxmQAdib0/NUwXT4qYWmf1LY3otW vQotyyPVMzVsZYLguY63ITP+gAwsDvEVBzLjOBNw7MqevyDaWkDNXZ7JRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsjiB5P4c0xNDvNGJF7bxL60a0cMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4lBkU13 ZkvSG8k5UOT9yaAsO3y1WmXlaTfQV6wLN1e3VikSq48Vpjks+hE/vYYANajJoLsi iZ12iHfwgiCbcOIspm39DZxmVkh02OgMAGSTBh6U+YCcxUhahJYJ6tPGUw2fAPgU +eZXMBc7Ad8S/fAIY9s8Xvd1D+yK87BFGhD+wbAN17zF2gO0vYv1Oo9FXc12HxlF xahKUQV2nVT1b9qJjoWC7HxtxNjPFZQX0Hn0NlKSrb5R0eZymh9s7JhBYCHCbLvc BmyyUdp+eOTLq2uQEEAe2iwQi7JLn3tesXQaPlU6zftycDE+nAk1cYeWE0tEVvOF d4Qzg6YYFmfPFg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:20:21 2025 by rpki-client