Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File:                     b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier:          gnob5zLo4S2uoH/CmtTjt6MIDBIQFfrWBLmC24mmptE=
Subject key identifier:   60:00:C7:7D:7F:2C:99:3E:CA:64:BC:80:28:91:42:1D:D9:2A:0F:D3
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer:       /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial:       01974B8DB81CEC030573EB0228BD272AC160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number:          0666
Signing time:             Sat 07 Jun 2025 18:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:08 +0000
Files and hashes:         1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
                          2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: vbQBLsid0+0w4tAC8ddBH3bg8PBQAvCIYmGor4sh754=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:b8:1c:ec:03:05:73:eb:02:28:bd:27:2a:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
        Validity
            Not Before: Jun  7 18:01:08 2025 GMT
            Not After : Jun  8 18:01:08 2025 GMT
        Subject: CN=6000c77d7f2c993eca64bc802891421dd92a0fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:70:4d:e5:7a:80:34:af:16:aa:ee:ab:dd:
                    ef:f2:71:da:ce:45:d8:5a:82:8f:c0:92:fc:11:54:
                    46:56:5d:78:7d:da:9b:76:1f:54:02:8a:dd:ab:e4:
                    6f:04:79:a4:b5:11:83:19:69:d3:55:a4:c1:8e:41:
                    b7:e8:da:20:ea:1b:d5:9f:c8:c6:b8:76:bf:05:e6:
                    19:c2:06:f4:e2:43:00:36:b9:69:6a:78:3b:1b:dc:
                    da:cd:af:57:0a:28:4e:17:33:63:ca:99:5e:2c:8e:
                    19:3d:63:f8:8d:49:a5:ea:6f:b2:30:97:0a:85:bd:
                    9c:82:0f:90:43:07:81:05:de:00:42:26:27:50:1f:
                    dd:d5:25:f7:8e:3d:c0:4b:f2:41:18:13:71:4e:24:
                    13:0c:c5:f0:50:fc:8b:27:67:17:34:b0:fa:56:a6:
                    ae:5d:15:45:5f:3a:be:df:55:5f:9a:11:77:a6:2a:
                    f6:ae:1e:95:e1:11:2a:31:cf:ee:ca:a5:e7:46:f3:
                    70:31:fa:a1:c0:61:7a:a0:ce:aa:32:fc:a9:55:a0:
                    b2:d7:24:2a:30:f7:4e:ef:b9:63:a2:0e:56:1e:84:
                    0e:9a:d6:42:b8:dc:52:3a:4d:1f:3c:b1:74:ef:26:
                    1b:ec:61:3c:78:cc:87:e3:cc:93:0e:21:f2:7d:75:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:00:C7:7D:7F:2C:99:3E:CA:64:BC:80:28:91:42:1D:D9:2A:0F:D3
            X509v3 Authority Key Identifier:
                keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:da:29:db:6f:08:6a:07:87:5e:93:54:a1:48:6c:7c:0a:ca:
         8e:bb:c6:1f:73:d7:33:a6:0f:4a:6d:b7:34:81:72:35:40:19:
         00:55:db:52:aa:50:e4:ca:b2:fc:ff:4a:10:40:fd:cd:56:69:
         e8:3b:9f:03:e6:68:26:5c:ac:f2:4d:7a:1f:60:58:90:d0:7b:
         d1:88:eb:d4:95:9e:88:6d:bc:00:1b:e7:e4:34:99:fa:a2:fd:
         6b:23:5c:f6:3e:1f:7e:c3:88:47:19:85:71:ba:49:89:89:97:
         a2:0d:3e:97:f1:f5:58:f7:33:52:7e:f9:ca:b9:cc:d5:07:d1:
         13:ba:7a:da:4b:5e:bc:2f:83:38:9d:61:26:f6:b0:04:72:d3:
         e8:fc:65:c7:0f:3a:b4:96:0f:69:f0:8f:7f:b6:9f:d8:97:b0:
         3d:be:17:39:1d:79:db:69:18:3d:15:e8:c3:2e:dc:3e:fa:a7:
         05:e6:61:b3:d5:ba:3f:bc:65:56:52:a7:c7:ad:3a:d0:b2:a1:
         21:18:70:aa:03:a3:11:a0:e6:39:1e:63:a1:d7:93:69:62:ba:
         39:86:81:df:5f:aa:52:cb:4d:3c:3c:e4:a2:fb:70:8c:f9:85:
         04:20:e1:60:91:a5:b7:7e:d3:58:60:71:3e:35:37:07:cf:2b:
         01:c8:c0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjbgc7AMFc+sCKL0nKsFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmNlMTZmZmQ2YTliYTljNTczMTQ1NThhNDQ3ZmFiZjZj
NWMwZGEwHhcNMjUwNjA3MTgwMTA4WhcNMjUwNjA4MTgwMTA4WjAzMTEwLwYDVQQD
Eyg2MDAwYzc3ZDdmMmM5OTNlY2E2NGJjODAyODkxNDIxZGQ5MmEwZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8FwTeV6gDSvFqruq93v8nHazkXY
WoKPwJL8EVRGVl14fdqbdh9UAordq+RvBHmktRGDGWnTVaTBjkG36Nog6hvVn8jG
uHa/BeYZwgb04kMANrlpang7G9zaza9XCihOFzNjypleLI4ZPWP4jUml6m+yMJcK
hb2cgg+QQweBBd4AQiYnUB/d1SX3jj3AS/JBGBNxTiQTDMXwUPyLJ2cXNLD6Vqau
XRVFXzq+31VfmhF3pir2rh6V4REqMc/uyqXnRvNwMfqhwGF6oM6qMvypVaCy1yQq
MPdO77ljog5WHoQOmtZCuNxSOk0fPLF07yYb7GE8eMyH48yTDiHyfXWAZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAAx31/LJk+ymS8gCiRQh3ZKg/TMB8GA1UdIwQY
MBaAFG/84W/9apupxXMUVYpEf6v2xcDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2Yt
MTBkMDJhNzEwMjE2LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81NDU2MGYtOWYzOS00NjlkLTgwY2YtMTBkMDJhNzEwMjE2
LzEvYl96aGJfMXFtNm5GY3hSVmlrUl9xX2JGd05vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENop228I
ageHXpNUoUhsfArKjrvGH3PXM6YPSm23NIFyNUAZAFXbUqpQ5Mqy/P9KEED9zVZp
6DufA+ZoJlys8k16H2BYkNB70Yjr1JWeiG28ABvn5DSZ+qL9ayNc9j4ffsOIRxmF
cbpJiYmXog0+l/H1WPczUn75yrnM1QfRE7p62ktevC+DOJ1hJvawBHLT6Pxlxw86
tJYPafCPf7af2JewPb4XOR1522kYPRXowy7cPvqnBeZhs9W6P7xlVlKnx6060LKh
IRhwqgOjEaDmOR5jodeTaWK6OYaB31+qUstNPDzkovtwjPmFBCDhYJGlt37TWGBx
PjU3B88rAcjANw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:07 2025 by rpki-client