Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File:                     rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier:          CqjzTuN5jMRhfvtHN6Qzlav3dqsFtXbd9dKy1nILqm8=
Subject key identifier:   A2:1B:74:20:AE:DB:39:D1:02:D1:B1:AA:F9:20:E9:AD:61:AE:63:7D
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer:       /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial:       0198D5BB7A7A3CB38F7FF3C055F132F8DA04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number:          0E0B
Signing time:             Sat 23 Aug 2025 07:01:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:30 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:30 +0000
Files and hashes:         1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: P1d4UcSn+eCF83eB/rSIV1pHrYz7FuEpAm6kbzxHbG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7a:7a:3c:b3:8f:7f:f3:c0:55:f1:32:f8:da:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
        Validity
            Not Before: Aug 23 07:01:30 2025 GMT
            Not After : Aug 24 07:01:30 2025 GMT
        Subject: CN=a21b7420aedb39d102d1b1aaf920e9ad61ae637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:eb:94:09:ee:8e:fc:65:19:ec:4b:8a:54:
                    7a:dd:4e:5c:c3:14:66:fe:10:8a:45:41:c9:ee:98:
                    5f:76:6a:02:1d:e6:0b:80:47:dd:dd:60:18:4c:21:
                    50:19:df:ed:6f:ec:cd:37:a7:c1:21:be:26:de:4b:
                    a0:af:06:57:9c:9a:85:67:ec:1e:81:5b:89:b1:af:
                    4d:b0:3c:8b:48:57:64:ac:24:b9:4a:b5:91:ee:e6:
                    03:5c:13:5e:f9:d1:03:83:33:a3:df:eb:52:68:0c:
                    72:f4:af:2c:2d:7a:03:d3:13:80:e4:33:ac:33:ee:
                    4a:c4:56:9d:4c:04:08:51:98:b5:98:ba:39:c1:34:
                    70:98:83:7a:fd:30:c8:5b:bb:c3:fa:b5:38:4f:b3:
                    78:bd:e8:8b:68:b2:68:fe:5a:5f:a4:5d:31:0a:c3:
                    7e:de:a8:3b:2c:01:66:d1:0d:d5:1a:9f:14:24:c5:
                    b8:1f:7e:e7:03:54:c6:1d:01:32:da:d9:8b:50:83:
                    be:7b:70:e8:ff:bd:f3:bf:13:74:14:3a:ce:f7:cd:
                    be:65:73:d6:20:20:4e:3c:8b:4c:07:1e:1f:62:79:
                    a3:ea:d9:09:10:d3:c4:68:87:0b:d6:99:9f:c9:cc:
                    a4:f5:86:a2:da:83:c6:bb:3c:48:8b:7c:89:1c:1a:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1B:74:20:AE:DB:39:D1:02:D1:B1:AA:F9:20:E9:AD:61:AE:63:7D
            X509v3 Authority Key Identifier:
                keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:93:9c:69:2c:87:9d:4b:7c:9d:8a:ca:04:5d:c7:7d:9a:
         9b:6c:a8:0d:ad:a3:a6:3f:5f:fd:a8:7a:bd:a8:f2:54:c5:23:
         f4:7c:1a:ef:08:ee:45:28:28:87:87:f7:32:74:96:09:66:8a:
         d9:47:4e:d2:0e:7c:4f:33:86:8d:8b:c1:93:49:36:bb:b7:5b:
         c4:c8:b1:f7:45:70:d0:18:b0:fb:d2:3a:ec:93:0a:94:22:48:
         ef:99:51:85:8d:c6:59:b9:2f:43:6f:00:c5:c3:75:a8:39:e5:
         ff:25:04:2e:76:c3:2b:44:eb:1d:63:5f:41:61:c8:c4:de:3e:
         7c:7e:44:9c:c4:a1:31:d8:4c:09:2e:30:f2:51:40:5e:6a:f7:
         81:6a:a7:54:5d:f8:b9:06:7e:fc:94:85:b0:9c:30:3c:24:76:
         68:8c:e1:fb:77:27:37:29:47:5f:41:02:e7:c1:1d:db:a3:85:
         4f:aa:d2:d0:6e:bf:3c:48:4f:2b:c1:70:d1:7c:c9:b3:a3:4d:
         bf:c8:ea:7b:54:74:4b:b9:b1:bd:fb:f7:13:9f:43:c6:a7:87:
         8b:7e:52:fc:0e:7e:27:28:bb:e1:38:79:75:bd:03:ec:77:73:
         47:d9:cc:6e:48:e5:3f:fb:42:30:61:ad:da:f7:37:eb:4e:df:
         6a:d6:7a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu3p6PLOPf/PAVfEy+NoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh
YjFiZTAwHhcNMjUwODIzMDcwMTMwWhcNMjUwODI0MDcwMTMwWjAzMTEwLwYDVQQD
EyhhMjFiNzQyMGFlZGIzOWQxMDJkMWIxYWFmOTIwZTlhZDYxYWU2MzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGzrlAnujvxlGexLilR63U5cwxRm
/hCKRUHJ7phfdmoCHeYLgEfd3WAYTCFQGd/tb+zNN6fBIb4m3kugrwZXnJqFZ+we
gVuJsa9NsDyLSFdkrCS5SrWR7uYDXBNe+dEDgzOj3+tSaAxy9K8sLXoD0xOA5DOs
M+5KxFadTAQIUZi1mLo5wTRwmIN6/TDIW7vD+rU4T7N4veiLaLJo/lpfpF0xCsN+
3qg7LAFm0Q3VGp8UJMW4H37nA1TGHQEy2tmLUIO+e3Do/73zvxN0FDrO982+ZXPW
ICBOPItMBx4fYnmj6tkJENPEaIcL1pmfycyk9Yai2oPGuzxIi3yJHBpGtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIbdCCu2znRAtGxqvkg6a1hrmN9MB8GA1UdIwQY
MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt
NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw
LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy2TnGks
h51LfJ2KygRdx32am2yoDa2jpj9f/ah6vajyVMUj9Hwa7wjuRSgoh4f3MnSWCWaK
2UdO0g58TzOGjYvBk0k2u7dbxMix90Vw0Biw+9I67JMKlCJI75lRhY3GWbkvQ28A
xcN1qDnl/yUELnbDK0TrHWNfQWHIxN4+fH5EnMShMdhMCS4w8lFAXmr3gWqnVF34
uQZ+/JSFsJwwPCR2aIzh+3cnNylHX0EC58Ed26OFT6rS0G6/PEhPK8Fw0XzJs6NN
v8jqe1R0S7mxvfv3E59DxqeHi35S/A5+Jyi74Th5db0D7HdzR9nMbkjlP/tCMGGt
2vc3607fatZ62w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:46 2025 by rpki-client