Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          0HNkn53jrlxOIERW1zcHwMJetU9+4LD4+nx0SX5yaQQ=
Subject key identifier:   EE:9F:20:90:DE:00:B2:68:06:24:85:83:4A:CD:CF:3D:30:24:47:A2
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       01989636F3F5E3126291CCA0A844BBD1324E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          162D
Signing time:             Sun 10 Aug 2025 23:00:40 +0000
Manifest this update:     Sun 10 Aug 2025 23:00:40 +0000
Manifest next update:     Mon 11 Aug 2025 23:00:40 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: A6n45riOZnZY3FEBtUAJ+mBayhdGBh0jVmCFXKQ+6YM=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:36:f3:f5:e3:12:62:91:cc:a0:a8:44:bb:d1:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Aug 10 23:00:40 2025 GMT
            Not After : Aug 11 23:00:40 2025 GMT
        Subject: CN=ee9f2090de00b268062485834acdcf3d302447a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:13:9d:7c:9f:be:97:14:e3:32:bd:32:76:
                    46:a0:ed:8c:42:27:c6:aa:30:b3:aa:4d:d9:b9:42:
                    9b:ab:f8:a8:e6:d4:48:a8:16:e4:bc:25:93:df:61:
                    bc:8e:0c:f7:fb:ad:ca:30:be:07:82:1f:17:f9:0c:
                    af:b3:29:7d:41:b2:2b:bf:ff:e6:39:7e:46:e4:9d:
                    06:76:c5:de:4b:38:46:ba:db:63:cb:38:32:85:a2:
                    e1:3d:e6:dc:ae:50:bd:34:62:d5:fa:8b:79:b0:b5:
                    2a:9b:fc:d9:81:5a:8f:e8:05:b9:ba:6d:cf:8b:f2:
                    ef:36:90:b6:fb:7b:a2:a8:14:6b:59:3e:1d:b6:4f:
                    79:d1:8f:54:9e:eb:52:38:8c:ee:67:49:0b:d3:c9:
                    55:35:54:d7:2d:88:9b:16:9b:89:be:59:11:a8:37:
                    24:2a:90:c1:b0:7c:4a:d6:e3:51:04:34:fa:33:02:
                    33:7f:39:08:8c:a0:ff:34:2e:d5:79:6a:c4:5a:52:
                    e0:25:d8:a4:df:f0:95:fe:d0:21:ea:be:d0:7a:a5:
                    63:6b:60:e5:96:23:06:51:8f:ec:91:53:d4:d4:68:
                    f7:ca:c7:ce:7a:c6:fb:ea:9a:fc:d9:df:8d:11:43:
                    dc:d3:8b:6f:38:5f:de:68:9b:bb:04:30:00:3f:d9:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:20:90:DE:00:B2:68:06:24:85:83:4A:CD:CF:3D:30:24:47:A2
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:7b:86:11:70:d8:ab:ca:97:c4:9f:59:bb:45:d3:4f:8b:
         f7:9c:33:6b:3e:5f:0b:b5:29:1b:91:2d:29:af:ad:67:1e:66:
         a3:22:55:37:ba:91:d6:32:d5:a2:6e:b4:20:e3:65:ac:ab:5c:
         f9:73:e5:05:37:dc:6c:c0:8c:eb:87:f8:61:69:8a:50:69:67:
         13:9e:5b:8d:4a:ce:36:9d:2e:32:c0:4f:57:f7:b5:d8:dd:56:
         d8:0c:3d:e8:d6:7e:8d:0c:b4:65:05:be:28:fd:36:af:79:b5:
         9a:79:ef:a8:12:86:fa:a5:07:01:37:07:6a:f6:f4:f0:43:d1:
         a6:f7:98:56:3e:a9:41:b6:d5:a2:6c:3f:82:66:19:26:77:30:
         8b:2d:50:be:1f:04:46:8e:96:53:97:63:f7:6c:e3:dc:1f:d7:
         32:16:a4:27:d3:43:72:62:27:d5:36:3c:e5:58:14:c0:88:5c:
         d1:4d:69:fd:90:9e:b7:86:d3:01:4c:26:f8:45:95:08:b7:58:
         cd:7c:b8:44:b5:88:98:5d:3f:1e:d5:6b:78:ee:d4:91:3b:8a:
         76:d0:35:74:79:89:7f:9f:a2:b9:ab:ca:2f:35:46:f3:42:f1:
         6e:45:0d:e2:e3:21:d0:36:2c:5a:7f:b0:64:29:bd:3e:a6:61:
         26:82:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:49 2025 by rpki-client