Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File:                     rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier:          rTEMoGsNGc+svVutTdOWfoAyvNEernPGMxhMgypqewk=
Subject key identifier:   08:F2:44:74:45:C3:55:00:7F:B6:B2:EE:29:26:69:86:88:BA:DA:BE
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer:       /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial:       019D9A3EC471428CBEADEC4DFB1ACD2306A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number:          1083
Signing time:             Fri 17 Apr 2026 07:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:37 +0000
Files and hashes:         1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: jvHbzB9AY+7MQ6OTgCclo0eAC3vH89aw+McXAOUZC3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:c4:71:42:8c:be:ad:ec:4d:fb:1a:cd:23:06:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
        Validity
            Not Before: Apr 17 07:01:37 2026 GMT
            Not After : Apr 18 07:01:37 2026 GMT
        Subject: CN=08f2447445c355007fb6b2ee2926698688badabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:7d:2b:99:b6:fa:33:07:3d:84:dd:4e:28:
                    76:87:34:81:58:03:63:cc:c1:22:02:96:0a:1e:e6:
                    83:4d:9e:49:e2:92:a6:2e:79:b7:92:76:78:ae:00:
                    45:6f:e9:72:c8:a0:44:44:90:48:a8:2f:be:ab:8b:
                    9f:61:4e:d9:dc:0a:6a:ea:b9:6c:ef:22:2a:6c:a6:
                    12:5d:7a:a4:46:36:25:0a:63:f2:7b:12:b5:43:f2:
                    b5:21:76:da:05:95:ea:85:fc:84:2b:c9:62:ae:b8:
                    54:4f:a7:65:f7:1a:0a:d3:d7:fd:e1:c3:db:d2:a5:
                    51:2e:ad:c3:36:57:ce:f7:5d:d1:89:18:a7:f5:5b:
                    27:fc:7d:a3:69:41:d1:b3:df:d3:59:6d:9d:b1:12:
                    d4:fa:0a:9e:6c:8b:b3:61:fe:a3:e6:0a:80:f0:4e:
                    4a:bb:87:1f:7f:87:a1:12:23:69:99:b7:59:89:0b:
                    5c:93:89:ea:08:60:70:60:91:21:b5:a0:62:49:b9:
                    4c:8e:40:79:e2:58:30:7f:47:d0:63:be:67:01:bd:
                    82:5d:aa:ed:99:66:bd:e4:12:02:f0:3a:1c:ac:27:
                    e1:f4:9b:cf:2c:94:b2:73:e1:e6:9b:ae:17:32:0e:
                    6d:a9:49:d3:fd:76:ab:07:32:e1:68:ee:2c:33:e1:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:44:74:45:C3:55:00:7F:B6:B2:EE:29:26:69:86:88:BA:DA:BE
            X509v3 Authority Key Identifier:
                keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:9e:94:9a:25:20:81:d4:5c:7e:7c:95:19:11:be:f8:cd:
         ce:5b:b8:89:13:13:8c:7c:92:d3:bf:a2:c6:f9:c5:6f:dd:0d:
         52:5f:4c:58:ab:bd:b2:82:b8:07:6e:28:04:a3:8e:56:df:33:
         2a:b3:c3:8b:6e:69:fc:8b:fd:27:97:f9:20:17:71:46:66:89:
         c3:6b:b7:06:ed:cf:97:4c:56:72:6c:a5:58:bd:ae:87:3f:1d:
         6e:1f:69:b9:f9:9d:0f:86:20:55:2b:cd:69:6a:a3:f5:c6:67:
         67:d6:2a:6f:b2:6d:c7:95:ef:e6:e6:b7:58:86:e1:d1:7b:95:
         ec:cc:93:44:2f:17:6e:2a:bc:78:94:da:23:7a:fb:5c:9a:1d:
         81:57:1e:1c:67:35:a4:dc:02:d2:2c:6f:ef:84:7b:61:74:a7:
         f0:51:8f:92:39:b9:01:53:73:a7:db:51:7f:53:28:8d:24:69:
         6d:74:48:46:41:be:16:5b:61:47:2f:b1:29:47:14:8c:5a:72:
         52:b3:95:7c:a5:14:be:a9:e1:1a:bc:30:f9:cd:ad:9b:15:df:
         da:48:f9:47:be:ab:a1:26:0c:f8:78:15:81:6a:d7:ac:4d:bd:
         5d:47:83:44:1f:9f:04:42:ec:a9:f0:aa:0d:6f:6d:a3:25:55:
         17:50:25:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPsRxQoy+rexN+xrNIwanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh
YjFiZTAwHhcNMjYwNDE3MDcwMTM3WhcNMjYwNDE4MDcwMTM3WjAzMTEwLwYDVQQD
EygwOGYyNDQ3NDQ1YzM1NTAwN2ZiNmIyZWUyOTI2Njk4Njg4YmFkYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3F9K5m2+jMHPYTdTih2hzSBWANj
zMEiApYKHuaDTZ5J4pKmLnm3knZ4rgBFb+lyyKBERJBIqC++q4ufYU7Z3Apq6rls
7yIqbKYSXXqkRjYlCmPyexK1Q/K1IXbaBZXqhfyEK8lirrhUT6dl9xoK09f94cPb
0qVRLq3DNlfO913RiRin9Vsn/H2jaUHRs9/TWW2dsRLU+gqebIuzYf6j5gqA8E5K
u4cff4ehEiNpmbdZiQtck4nqCGBwYJEhtaBiSblMjkB54lgwf0fQY75nAb2CXart
mWa95BIC8DocrCfh9JvPLJSyc+Hmm64XMg5tqUnT/XarBzLhaO4sM+EU7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjyRHRFw1UAf7ay7ikmaYaIutq+MB8GA1UdIwQY
MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt
NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw
LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKc2elJol
IIHUXH58lRkRvvjNzlu4iRMTjHyS07+ixvnFb90NUl9MWKu9soK4B24oBKOOVt8z
KrPDi25p/Iv9J5f5IBdxRmaJw2u3Bu3Pl0xWcmylWL2uhz8dbh9pufmdD4YgVSvN
aWqj9cZnZ9Yqb7Jtx5Xv5ua3WIbh0XuV7MyTRC8Xbiq8eJTaI3r7XJodgVceHGc1
pNwC0ixv74R7YXSn8FGPkjm5AVNzp9tRf1MojSRpbXRIRkG+FlthRy+xKUcUjFpy
UrOVfKUUvqnhGrww+c2tmxXf2kj5R76roSYM+HgVgWrXrE29XUeDRB+fBELsqfCq
DW9toyVVF1Al1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:25 2026 by rpki-client