Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File:                     zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier:          NuDn6YsmCCyXwFjzckU2PmZC/x5+CNapaO08PIYbZP8=
Subject key identifier:   C6:2C:D1:2C:9C:5A:E3:26:DD:80:21:F2:AC:6A:28:7F:AA:95:C6:AE
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer:       /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial:       019D98868A44B25060F56FD5B14DB0F6E2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number:          1646
Signing time:             Thu 16 Apr 2026 23:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:46 +0000
Files and hashes:         1: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (hash: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4=)
                          2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: /K0h1wvFbt7nUxAMgqmwwo9ZdOjtu3yL4jhkP1KvxY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:8a:44:b2:50:60:f5:6f:d5:b1:4d:b0:f6:e2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
        Validity
            Not Before: Apr 16 23:00:46 2026 GMT
            Not After : Apr 17 23:00:46 2026 GMT
        Subject: CN=c62cd12c9c5ae326dd8021f2ac6a287faa95c6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:39:93:a6:ea:f5:58:f2:2b:ba:35:44:5a:
                    d7:cb:ff:9d:e1:e5:3b:12:b3:6d:2f:3a:16:61:e8:
                    96:ba:fb:8b:05:04:79:1c:49:67:9b:b5:d9:49:3d:
                    c6:6f:4d:13:62:2a:d5:2e:e6:bb:a4:20:5c:95:99:
                    d3:66:ef:c0:2a:42:b8:0e:71:00:51:87:1a:d0:34:
                    75:41:b1:b7:b1:e6:bd:89:df:1b:91:8c:31:d8:78:
                    89:d9:53:b9:6a:1b:91:77:72:82:b1:2c:09:c5:56:
                    85:1c:a3:82:f8:30:13:be:d8:94:d2:89:ef:77:27:
                    06:eb:3e:d7:64:bf:77:e6:bb:cf:cb:5e:be:85:44:
                    af:84:72:b8:49:3f:bc:93:60:68:d1:c5:9b:fb:ec:
                    9d:ff:a8:3f:24:e4:00:c3:23:c9:c5:95:4b:37:9f:
                    26:3a:65:e3:97:ea:18:2f:74:22:29:42:3c:9b:e7:
                    14:41:de:24:52:48:27:39:bc:d6:24:b6:48:0d:d2:
                    12:d0:1e:70:67:97:2b:42:cf:5f:5f:c7:ff:3b:c0:
                    71:79:15:5b:c6:a1:b9:ef:bb:1b:d8:ca:7e:c8:32:
                    c9:9a:26:30:26:15:fd:d3:d8:a3:7f:01:7b:75:3b:
                    a3:49:24:49:da:df:ed:86:d1:45:e8:90:65:aa:b5:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:D1:2C:9C:5A:E3:26:DD:80:21:F2:AC:6A:28:7F:AA:95:C6:AE
            X509v3 Authority Key Identifier:
                keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:38:83:8e:d9:22:71:e1:34:16:33:33:13:d9:b0:ac:79:e0:
         da:d3:15:dd:2d:48:b1:99:76:78:60:96:20:f5:db:ca:34:d7:
         c8:24:17:22:20:7c:1a:c1:de:da:3c:d8:d2:bb:28:c7:bf:79:
         7d:6a:30:05:d8:be:7d:20:8a:48:84:cf:fe:03:27:bc:84:c6:
         12:cc:90:dc:a2:37:40:9c:23:b8:2d:03:d4:86:0a:00:85:1d:
         f5:6e:a9:d3:84:c4:5b:7c:ad:d5:7f:fb:90:5b:03:1b:19:48:
         46:a1:b2:0e:26:b2:82:82:11:0b:39:10:87:eb:d0:bf:eb:70:
         02:a4:ac:06:dd:52:60:96:59:27:5f:d7:8f:74:fa:5d:cf:92:
         2f:e2:6b:46:33:d9:94:1c:4a:ea:57:f7:1b:bf:2c:46:28:ab:
         2e:d4:3c:35:8e:b1:d9:6f:69:a4:71:7e:7f:39:19:3c:fc:17:
         dc:d2:16:c7:6a:88:95:66:be:02:05:40:5d:51:83:78:14:b3:
         05:d1:dc:df:4f:9e:04:7b:1f:c4:ff:49:73:a9:c8:ef:ea:9b:
         07:3f:01:3b:7b:4b:1b:82:64:fd:a9:45:90:01:79:51:c4:91:
         36:c3:e6:2e:4d:09:4c:32:4d:2b:ba:7c:15:fc:2e:1c:dc:06:
         d9:cd:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:35 2026 by rpki-client