Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File:                     b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier:          A9xBn5nb9PJCzYQ9RMUGDiPkDwseBY2owhwUZK9rg6g=
Subject key identifier:   D0:77:44:FA:28:C4:D2:C8:7F:B2:B0:0C:6A:E9:5D:4C:8D:7B:CB:67
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer:       /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial:       019922C3A74ADFA561FC97A6899EEDE3191E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number:          075A
Signing time:             Sun 07 Sep 2025 06:01:11 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:11 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:11 +0000
Files and hashes:         1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
                          2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: 0TG5RzpN8X0bxj2XwfkEifBc9bUap0CPMpuDYr+36jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:a7:4a:df:a5:61:fc:97:a6:89:9e:ed:e3:19:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
        Validity
            Not Before: Sep  7 06:01:11 2025 GMT
            Not After : Sep  8 06:01:11 2025 GMT
        Subject: CN=d07744fa28c4d2c87fb2b00c6ae95d4c8d7bcb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:e6:f3:4d:2a:d7:1a:e8:8a:47:00:17:39:
                    d3:25:1a:37:5f:96:07:06:72:28:6d:61:98:21:cd:
                    b5:ae:54:43:9e:12:64:0a:a3:fd:42:d8:35:2b:ca:
                    4d:41:7e:8f:10:01:72:ba:cc:e7:ef:56:62:49:ef:
                    c2:e8:93:28:5a:0f:3a:d1:3a:2a:a1:16:a3:63:c5:
                    0b:3c:ce:73:b7:d0:99:01:ff:39:8a:1f:ad:a9:dc:
                    67:cc:80:7c:55:19:5f:e6:09:ea:d6:47:7f:3d:48:
                    69:95:e8:67:bc:bd:35:60:b1:0e:03:4f:5b:9a:ee:
                    ab:35:8a:61:ff:e7:0d:cd:0d:03:78:fa:a3:c7:52:
                    3b:59:9c:57:60:ec:d6:96:1e:c6:87:da:1f:ef:59:
                    23:a4:3d:c4:24:48:8b:fa:dc:d7:50:66:1d:97:3a:
                    34:59:2c:5a:0b:76:e5:8e:00:93:1c:98:13:72:c6:
                    bb:43:37:4a:41:7b:f1:b8:2d:9c:e8:97:28:0b:17:
                    b4:89:e5:05:96:67:6e:c7:ea:88:96:df:63:a0:76:
                    5d:5a:72:c6:26:d1:87:e5:72:dc:6c:ed:55:0b:db:
                    ab:60:1b:66:7f:29:04:68:10:ed:98:aa:89:95:ab:
                    1e:5a:4d:b6:d6:23:f5:7d:61:47:03:20:c3:7e:df:
                    69:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:44:FA:28:C4:D2:C8:7F:B2:B0:0C:6A:E9:5D:4C:8D:7B:CB:67
            X509v3 Authority Key Identifier:
                keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:b4:7d:59:b6:26:c3:4f:42:de:9e:44:df:1e:d5:bc:17:
         e6:87:01:16:93:06:13:56:9e:65:39:3d:de:a4:da:e6:83:68:
         83:1d:48:a1:aa:0a:32:bc:c1:55:ee:ec:00:2a:66:fc:cb:b2:
         ef:02:4f:3d:1e:2e:70:a1:11:d1:5e:87:e2:e9:2e:e6:49:d6:
         f1:9e:b1:82:8f:2f:81:ed:61:96:a4:c9:18:3c:a1:08:55:1b:
         c0:92:11:a4:dc:11:b6:49:7c:64:ce:08:c0:de:b9:9f:4c:23:
         ff:5d:b7:18:30:fb:92:17:37:09:38:89:b3:7b:92:39:23:97:
         76:9f:ef:52:b0:be:6c:21:7e:61:77:3c:91:fb:aa:47:4d:64:
         e8:06:65:30:b0:72:8e:22:a3:9f:d2:bf:04:c0:0f:62:aa:60:
         a1:54:58:23:a2:68:75:14:a4:e5:b3:8b:91:ff:c0:dc:06:3f:
         11:67:63:06:10:41:2f:de:3d:62:05:b9:77:32:88:b1:ba:86:
         f9:3a:72:3d:65:05:a5:c3:2f:d0:17:76:26:51:29:5d:d2:7c:
         4d:c4:6d:b1:5e:7e:87:ac:2e:4a:4b:f2:a2:38:5c:f0:d4:d3:
         c7:89:83:01:43:4b:30:93:e3:59:8f:77:07:9d:6d:3b:29:36:
         9a:17:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:46 2025 by rpki-client