Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File:                     rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier:          bY/LqFHG+/Rs/JYYfrZlV1dAKt/JvtPt/XaW5f8gQuE=
Subject key identifier:   CB:C4:DF:CF:21:70:57:80:E6:48:66:ED:CD:4C:3F:BF:C6:80:B9:ED
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer:       /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial:       0197B7EAAC09408C41109A8C791120522B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number:          0D77
Signing time:             Sat 28 Jun 2025 19:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:39 +0000
Files and hashes:         1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: mFazHLhoQSELhoVvoL2Rdep4r0MARYqLPC7IISGL3ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:ac:09:40:8c:41:10:9a:8c:79:11:20:52:2b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
        Validity
            Not Before: Jun 28 19:01:39 2025 GMT
            Not After : Jun 29 19:01:39 2025 GMT
        Subject: CN=cbc4dfcf21705780e64866edcd4c3fbfc680b9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:e5:37:4f:39:0d:48:81:4b:e8:1d:81:e3:
                    05:05:3b:20:77:d6:dc:30:d7:ba:85:b8:9c:a9:82:
                    58:35:45:ca:d5:71:62:b9:00:58:7b:52:67:b3:07:
                    07:33:3f:ef:3b:28:fd:1f:9d:67:4e:9c:fc:34:a5:
                    6d:69:ea:3e:26:ae:91:56:47:41:49:d0:0a:72:2a:
                    67:ea:5e:7d:2d:48:58:df:d7:19:7b:72:94:36:28:
                    e2:86:e5:3f:37:a0:62:18:60:d5:d3:2c:fc:53:73:
                    b4:41:37:9a:ed:d1:6c:36:6e:06:6f:fe:2d:98:af:
                    0c:e3:aa:e4:f5:ed:4a:e8:4f:f1:66:a1:df:8d:83:
                    ec:af:25:24:5b:d7:9c:52:d1:79:ad:ff:22:38:32:
                    b2:e7:6e:85:31:e9:fa:b4:2e:26:f9:15:a9:36:22:
                    2e:c9:09:9f:55:ba:6c:cb:6a:39:5a:71:82:9e:75:
                    a8:d6:cc:9d:71:3f:02:58:53:d7:85:55:50:e2:d9:
                    03:83:bc:e4:21:9e:37:56:a9:33:04:97:b0:48:62:
                    aa:13:f4:fc:2a:89:d9:a0:a1:7c:ac:79:56:f3:60:
                    0d:7b:ca:5b:36:9a:b2:89:c1:bb:32:0a:e2:8d:59:
                    30:50:d3:61:f0:b7:e7:d4:d1:ad:45:ff:c4:d4:5f:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:DF:CF:21:70:57:80:E6:48:66:ED:CD:4C:3F:BF:C6:80:B9:ED
            X509v3 Authority Key Identifier:
                keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:38:82:34:ee:49:16:aa:1c:45:1d:b4:f8:45:25:74:61:ea:
         9d:3e:e6:2d:0f:42:a2:78:ac:aa:98:ed:7b:a2:d7:08:2e:30:
         09:ac:78:f5:1f:ae:c5:cb:99:2c:cf:40:6a:fb:63:ca:e5:af:
         6b:5d:df:22:50:14:7a:04:f8:c3:7c:57:6b:52:6e:0e:dc:2b:
         31:d7:dd:18:5f:eb:1f:3e:2a:ac:85:7e:4b:11:2a:2f:7f:b6:
         cc:80:64:e7:4c:58:99:30:7c:ec:d7:75:b8:49:69:5d:28:26:
         71:d5:2c:0f:54:c9:dd:f3:da:99:87:29:f2:1a:79:31:ac:fa:
         87:5c:4a:bc:4e:36:ab:65:ad:e9:82:1b:22:0e:68:21:e0:4f:
         9d:74:00:2a:63:b0:9b:b6:b7:42:be:e7:e0:02:2c:bc:cc:dd:
         ca:a8:62:91:87:08:08:65:6d:7b:cd:e2:86:bc:3d:dc:12:dd:
         58:ae:92:66:31:f4:31:b3:c9:cc:f0:35:b2:7d:38:0f:bd:1a:
         86:0c:a0:04:ed:0b:68:8d:9c:01:88:c4:9d:e3:58:a9:07:08:
         0e:19:6f:09:31:05:6b:42:cb:81:b2:9b:5a:c1:63:f9:8a:ed:
         cc:e7:3a:e0:7e:5b:a0:1d:72:ea:d1:00:0a:49:67:d5:5b:37:
         b0:f3:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:42 2025 by rpki-client