Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
File:                     b_zhb_1qm6nFcxRVikR_q_bFwNo.mft (raw, json)
Hash identifier:          QFw9/3fsba+H2FLVpkzYTwBM2xUmbOEtoPSAhK3z4WA=
Subject key identifier:   6A:92:C4:E9:70:D9:32:8C:63:D2:9E:D4:60:63:18:C8:A3:3C:7D:F6
Authority key identifier: 6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA
Certificate issuer:       /CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
Certificate serial:       01969FACADFCFA8BFB7612F2C5BA2F25D38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
Manifest number:          060D
Signing time:             Mon 05 May 2025 09:00:16 +0000
Manifest this update:     Mon 05 May 2025 09:00:16 +0000
Manifest next update:     Tue 06 May 2025 09:00:16 +0000
Files and hashes:         1: EGnmM2wVMqJLntTcgDGU7znYv7c.roa (hash: Bu3yW0I7bzwPNxcVAKRDv1V3C8AYG3+UWoK1onNW2P4=)
                          2: b_zhb_1qm6nFcxRVikR_q_bFwNo.crl (hash: XnyLnzpmjyTT00Vuux5gokcI03gFnE6+FrNy53UFrYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 09:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:ac:ad:fc:fa:8b:fb:76:12:f2:c5:ba:2f:25:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffce16ffd6a9ba9c57314558a447fabf6c5c0da
        Validity
            Not Before: May  5 09:00:16 2025 GMT
            Not After : May  6 09:00:16 2025 GMT
        Subject: CN=6a92c4e970d9328c63d29ed4606318c8a33c7df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:2f:30:bc:e5:15:66:5e:71:52:23:56:36:
                    43:aa:20:74:fb:f8:e5:9e:47:5b:6a:eb:b2:7b:f6:
                    32:b9:92:1a:40:c0:c1:29:47:86:4c:b7:d9:d9:c9:
                    b5:63:f9:83:2d:c8:f6:33:2f:89:b0:b9:af:bf:2d:
                    3a:35:16:b2:ff:b9:56:2a:fa:85:9e:69:f3:40:d4:
                    17:e9:0f:a0:68:44:ab:d8:6a:f2:7c:69:07:8c:f5:
                    ee:5e:47:1d:31:87:24:57:1c:aa:e5:5d:5c:90:9a:
                    59:3b:5c:e3:7f:44:d5:20:47:38:77:9c:1d:b8:fe:
                    d5:7c:f9:7f:ec:14:0a:85:16:6e:89:23:f5:db:e6:
                    85:5d:fa:62:c9:af:c8:dc:95:03:3b:91:43:ff:a8:
                    d4:f4:b9:48:b0:18:49:8f:66:9c:54:48:5d:94:bf:
                    ed:5c:aa:dc:80:17:8f:5c:b5:56:84:99:98:78:df:
                    58:a7:fb:d9:a2:d8:bf:87:b5:c8:4e:92:11:28:1b:
                    f5:12:08:f7:b3:0e:44:ec:00:e5:52:62:b7:3e:74:
                    f3:78:01:a9:79:c5:b7:fb:54:b5:31:8b:8b:2a:f2:
                    6e:76:5d:0d:72:7b:ca:16:3e:8f:6c:d4:77:ad:d6:
                    27:bc:1b:d0:16:fe:7f:23:08:a1:0b:e8:03:63:46:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:C4:E9:70:D9:32:8C:63:D2:9E:D4:60:63:18:C8:A3:3C:7D:F6
            X509v3 Authority Key Identifier:
                keyid:6F:FC:E1:6F:FD:6A:9B:A9:C5:73:14:55:8A:44:7F:AB:F6:C5:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_zhb_1qm6nFcxRVikR_q_bFwNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/54560f-9f39-469d-80cf-10d02a710216/1/b_zhb_1qm6nFcxRVikR_q_bFwNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:12:04:e3:cb:ef:80:db:17:4f:1b:49:82:59:88:af:f1:78:
         85:0b:2b:36:c0:96:e6:59:12:c9:59:07:61:60:c7:39:2c:36:
         d1:33:09:c0:47:66:e5:ef:fd:30:ae:7e:c8:42:52:74:7f:0d:
         05:47:fe:07:f9:ca:7f:0b:3c:07:9e:9a:e3:ad:29:6b:3d:e4:
         ea:aa:42:78:57:cc:2a:e5:ec:9d:aa:da:f5:a5:91:1b:5f:23:
         84:4a:6e:7d:4d:d9:d1:5c:a2:72:01:82:63:9c:4e:36:d2:2d:
         f1:12:50:a7:34:ab:1d:60:5c:85:72:5c:55:25:7e:f6:fe:44:
         e0:06:32:a9:a5:5d:ab:e6:9f:7b:ea:82:8b:a8:f8:29:8f:cc:
         b3:2a:d9:14:32:e9:29:8c:23:b9:30:ff:4f:b2:e3:a7:7f:b9:
         17:2f:b7:27:13:87:6d:e0:31:23:42:bd:aa:d3:c0:ac:bc:61:
         67:83:5c:37:f2:b5:df:27:fb:91:43:78:15:c3:0c:ec:f8:ba:
         15:f9:d6:af:c7:2b:59:09:38:c9:70:12:82:74:4f:7c:78:0c:
         c1:cc:67:45:29:b2:0d:d4:3b:2c:9e:0a:d1:3f:e8:ad:4e:f6:
         92:64:19:50:42:92:4f:f4:89:da:f1:23:f5:74:34:c2:e3:5b:
         a8:07:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:52:33 2025 by rpki-client