Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File:                     b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier:          ALC7tYlZZONdYzu1FK/MhWaqCUzHceWvmNJGI/KksmY=
Subject key identifier:   37:E4:A1:72:D6:25:16:48:47:CF:7A:5C:72:EF:3C:6D:CD:2D:99:1D
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer:       /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial:       019A4E189D7F496E5110E57FABD9AB8CD587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number:          07F5
Signing time:             Tue 04 Nov 2025 09:00:27 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:27 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:27 +0000
Files and hashes:         1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
                          2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: laa51Z3OJJznMv3nW1e+Of/Q3hvn0FP7NrUuTBV2/oQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:9d:7f:49:6e:51:10:e5:7f:ab:d9:ab:8c:d5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
        Validity
            Not Before: Nov  4 09:00:27 2025 GMT
            Not After : Nov  5 09:00:27 2025 GMT
        Subject: CN=37e4a172d625164847cf7a5c72ef3c6dcd2d991d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:2e:67:16:b5:17:6d:95:3f:87:a6:05:17:
                    1c:49:4e:bb:66:92:a4:66:7e:bd:bb:3e:0a:b1:79:
                    7e:1f:db:cc:ad:ca:de:4b:6d:f6:c7:e0:74:d4:46:
                    1c:4f:fe:59:77:59:ba:d4:85:61:d2:fc:fb:9a:c8:
                    25:1d:57:c8:67:bb:90:a5:d6:23:36:b2:62:43:43:
                    85:c6:b5:d0:b4:e1:3e:85:3a:91:43:14:dd:ab:b4:
                    a8:05:b1:b3:33:da:43:6f:21:0f:07:54:f6:95:d8:
                    75:6f:e7:be:ce:c4:bd:74:42:4e:c0:3c:88:d5:78:
                    57:41:a8:ce:11:88:85:db:b4:e1:94:de:85:62:1e:
                    75:c2:1c:df:6e:cf:3b:fc:08:9b:89:ad:94:9d:88:
                    cb:cc:cd:e4:d9:a4:af:93:80:ed:a7:9d:33:2f:3e:
                    a8:9d:84:ea:a9:53:d0:6a:b2:65:a3:61:d5:a6:54:
                    8d:c6:2e:66:78:36:ae:07:fb:ed:31:f4:85:2f:2e:
                    b3:9d:c9:00:b5:b9:15:e3:8d:4a:b9:28:34:dc:6a:
                    9b:35:4c:21:09:47:aa:4a:d6:b4:a6:e7:7a:d2:a5:
                    b5:47:5e:a7:6b:2e:09:ab:75:eb:19:d7:65:0b:96:
                    dd:c0:39:5f:94:fa:41:f3:91:b5:ee:d7:36:a5:5c:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:A1:72:D6:25:16:48:47:CF:7A:5C:72:EF:3C:6D:CD:2D:99:1D
            X509v3 Authority Key Identifier:
                keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:83:c3:82:4c:eb:bf:fb:39:16:c3:30:01:fe:cd:fa:12:04:
         27:f4:68:43:0b:23:19:d9:e6:0e:d5:aa:5c:96:7f:6b:44:e5:
         6d:3a:d7:d1:19:21:5d:26:d2:36:9a:f0:ab:f2:d7:5b:ac:c8:
         df:25:0e:e2:36:6b:f3:08:f4:69:0c:30:bf:88:eb:2d:a2:89:
         0f:20:3f:44:d9:b4:14:3a:15:f3:cc:89:32:a6:40:2c:ad:0b:
         b0:27:93:1f:b9:21:3f:60:dc:43:22:e6:44:34:c6:11:39:06:
         57:61:61:27:ee:af:6b:52:09:4b:06:fc:35:0a:45:12:33:5b:
         7e:0d:bd:b3:a1:14:63:1b:fc:79:bf:f6:58:e5:15:c7:c8:00:
         a3:01:3a:73:05:11:f8:fb:60:b9:48:0c:ad:4d:7f:fa:df:09:
         67:54:95:08:e5:b6:2e:b9:89:2e:49:59:fc:9d:1a:60:df:74:
         71:31:33:12:2f:bd:ab:32:64:52:db:a1:42:9b:6f:09:fe:92:
         07:19:9a:8f:6e:40:dd:b7:28:c4:39:c2:19:8f:74:15:8d:e9:
         0b:36:3d:ed:fe:0c:9b:05:b6:25:de:5c:9d:4b:11:53:36:e3:
         fc:ed:bc:3e:8e:fb:75:d8:e0:af:af:c3:25:c1:dd:d7:af:5e:
         3f:6f:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:46 2025 by rpki-client