Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File:                     b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier:          zSbuBN3sxld0/eqXCXFx/GvtfpE8HCuS4h7lN9ZaDRQ=
Subject key identifier:   5F:BB:96:4C:8D:CE:CC:58:BC:28:2C:FE:F7:4A:5F:15:6A:6B:F9:EB
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer:       /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial:       01976C6211130280D4CB0F46114DBEEF2B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number:          0677
Signing time:             Sat 14 Jun 2025 03:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:55 +0000
Files and hashes:         1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
                          2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: wSZ7/GWNqtw2+B5+hV9gOHJ2u2uLKyzMHovEVLXYx4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:11:13:02:80:d4:cb:0f:46:11:4d:be:ef:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
        Validity
            Not Before: Jun 14 03:00:55 2025 GMT
            Not After : Jun 15 03:00:55 2025 GMT
        Subject: CN=5fbb964c8dcecc58bc282cfef74a5f156a6bf9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:5e:9d:98:ff:3a:56:44:88:5c:56:90:e4:
                    5b:cc:0e:e0:e6:4d:39:37:d6:6c:73:2b:55:53:e5:
                    15:b6:91:f8:85:c6:d4:14:a0:44:8e:49:2c:80:79:
                    af:60:74:02:80:3b:82:42:8f:34:7b:89:6c:94:cb:
                    19:1d:0e:bb:a6:f0:f9:6f:5d:c5:0a:87:bd:70:39:
                    fe:84:72:4e:4b:81:31:2b:5e:a7:81:08:f1:35:ad:
                    77:58:b7:f1:19:68:fe:c2:d2:7f:f1:a7:b7:c4:c3:
                    9d:4b:2d:b8:1e:4a:f1:93:32:ac:ab:6d:75:f3:40:
                    60:a0:13:65:90:9a:88:ca:8a:13:e7:44:0d:57:e2:
                    0c:f6:f8:fe:b7:7b:89:1f:85:fd:f5:14:e7:90:6b:
                    3f:a3:dc:6b:bb:e3:b4:dc:32:17:24:b4:52:a9:ec:
                    b8:ca:83:93:bc:3c:0a:57:f3:31:d6:35:dc:b1:59:
                    89:2d:12:af:6e:cd:ee:7d:fb:aa:13:91:bd:04:14:
                    8f:51:b3:ad:12:a6:06:ca:ac:5c:90:09:92:15:9d:
                    58:e0:a1:65:c1:36:ff:e9:3f:29:13:43:06:6e:91:
                    64:39:5f:0d:ef:90:72:74:76:f4:1f:7d:2f:6f:6c:
                    da:af:0f:e5:b4:ce:f5:cb:35:03:9e:d0:9e:94:34:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:96:4C:8D:CE:CC:58:BC:28:2C:FE:F7:4A:5F:15:6A:6B:F9:EB
            X509v3 Authority Key Identifier:
                keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f8:ee:a7:08:73:aa:9e:19:54:da:dd:7f:d9:d0:a6:0a:92:
         bb:9f:e6:00:89:f3:1f:3f:c9:a8:9d:4b:63:79:8a:09:cc:52:
         20:2d:c5:a6:9b:25:cc:66:36:08:f4:1e:c2:63:a1:ca:f3:f9:
         cf:41:01:6c:fe:e4:b4:f4:5f:b1:a5:96:80:0f:da:17:11:95:
         d9:8c:42:f7:c3:a4:af:dd:03:99:37:8c:0c:34:26:1b:8f:91:
         b9:17:36:d5:ab:ab:9a:f8:cf:5e:00:eb:b4:d1:15:a0:22:81:
         7c:48:fd:54:22:99:c1:3d:79:b5:23:b4:d6:ef:44:a8:08:34:
         f0:e0:5f:d3:10:10:46:04:04:be:c0:96:c4:f1:3b:40:7f:d7:
         73:57:77:e0:4e:da:08:67:ab:7a:9e:64:e1:ec:75:85:89:bd:
         02:8d:8d:b6:eb:4a:6c:78:7e:9b:c9:74:86:0b:82:34:87:b0:
         2b:fe:0a:e3:aa:d5:4f:93:44:b5:33:08:4c:68:0b:08:74:a4:
         6b:9c:91:71:67:b3:7e:c3:2d:60:2a:e1:86:0a:55:6a:fe:a8:
         0d:e3:88:ef:1e:f0:6d:ea:3b:2f:dd:05:0b:fc:84:4f:6f:8d:
         98:41:87:9d:49:43:be:09:2e:56:2a:c3:68:1b:ae:50:a1:f2:
         41:9b:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:37:59 2025 by rpki-client