Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File:                     zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier:          pr8MZuwlWcmNi/nJSFSJqyWVoYZoUft+Ky5esbw9EVY=
Subject key identifier:   13:57:8A:51:AE:2D:3B:31:FF:DD:61:B9:BA:EA:1D:3D:FC:64:E7:8C
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer:       /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial:       019EC1EDAF0C0EF9AE6F0F9E6FA19D7A8006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number:          16E0
Signing time:             Sat 13 Jun 2026 17:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:39 +0000
Files and hashes:         1: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (hash: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4=)
                          2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: WAV3s3OWnZ1+fF0yS6dzmCroX0mHnUvDrQi1zg/GQvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:af:0c:0e:f9:ae:6f:0f:9e:6f:a1:9d:7a:80:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
        Validity
            Not Before: Jun 13 17:00:39 2026 GMT
            Not After : Jun 14 17:00:39 2026 GMT
        Subject: CN=13578a51ae2d3b31ffdd61b9baea1d3dfc64e78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:9c:fc:1b:fc:06:07:74:0b:6a:8d:43:41:
                    12:e2:3c:17:89:9f:84:43:72:7b:fd:7c:b3:e1:78:
                    33:1c:92:fb:f1:b1:33:94:10:c2:71:9c:d4:3b:ad:
                    6b:5a:5c:c3:5e:c5:d6:b0:aa:c6:0a:1b:26:54:29:
                    a6:48:89:8e:31:53:aa:a2:46:87:d0:4b:1e:ec:b6:
                    8c:db:14:3c:0c:a0:29:9c:d3:52:fc:0e:2d:43:89:
                    07:5a:03:e7:66:f5:f3:28:4b:e1:6a:d5:e0:d8:c7:
                    f0:b8:ca:1c:a0:94:f9:a1:34:37:96:d4:6f:b6:8d:
                    41:05:b5:10:91:a5:60:3d:d3:a7:d8:a8:de:3f:ac:
                    05:a7:7c:7b:9c:fc:a1:4d:23:75:9d:58:c6:77:9d:
                    41:bd:56:7d:60:25:c2:56:cd:99:52:1c:bf:2b:a5:
                    6c:8f:42:a6:d6:d4:08:4d:5d:f6:1f:79:d6:8c:bd:
                    9b:c1:20:2f:6d:f7:20:0a:a1:25:b1:b4:cc:b6:04:
                    a1:15:4f:88:a0:21:9a:b1:23:8f:64:89:1f:4a:d9:
                    a5:5d:b0:55:09:56:65:32:61:72:8e:96:93:2b:ba:
                    1c:4b:86:3c:65:76:e0:1d:1b:78:50:60:87:a4:82:
                    ef:23:9c:49:d2:bc:3d:dc:97:dd:86:19:42:3d:b3:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:57:8A:51:AE:2D:3B:31:FF:DD:61:B9:BA:EA:1D:3D:FC:64:E7:8C
            X509v3 Authority Key Identifier:
                keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:67:8b:0c:20:9d:cb:3e:4e:f3:e3:3c:a3:d6:a6:a7:d7:23:
         0c:cf:5a:aa:7b:a6:22:8d:46:7a:f6:d0:67:cb:bf:98:5f:7f:
         62:6b:61:cf:d7:90:99:52:6f:a7:1d:a3:af:bb:a9:0b:f0:9b:
         4a:15:01:c7:23:6f:8d:2c:c3:4e:33:de:40:3a:35:84:23:f0:
         62:c1:06:0b:e3:db:86:b2:35:f0:fb:74:4d:cd:f6:eb:d5:ab:
         39:b0:a3:b7:db:d4:e6:b8:93:23:12:54:3a:69:3d:39:3b:d0:
         bf:17:4a:41:73:92:e2:7f:92:0f:52:64:1d:ef:5e:61:24:0c:
         9f:f8:02:2d:a4:f2:f7:89:9c:9a:c3:94:19:9c:22:43:de:5e:
         58:60:eb:35:c4:6d:cd:42:18:c8:34:91:90:d5:44:e1:12:c8:
         2e:08:d2:34:7c:92:c6:c1:26:08:80:ba:8a:65:11:10:6f:bd:
         90:7a:3d:ce:0a:44:ce:bf:24:3e:1e:66:7f:c2:a3:68:35:f4:
         8f:11:c6:6e:b0:1e:63:8d:09:aa:60:cf:d7:0f:cc:45:9a:f0:
         15:be:29:d2:64:9a:e8:bd:f6:43:ad:15:c8:d6:94:cf:d7:c2:
         df:27:da:e9:f1:26:47:59:9b:79:d6:1f:6a:ad:ca:01:95:56:
         d3:c6:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:12 2026 by rpki-client