Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          kJjxZpdftLh0dKGara7fYaNgjWDldN+9MJprbvxP2bY=
Subject key identifier:   20:D2:19:63:89:00:AF:C5:6F:98:65:0B:A1:05:4D:AA:5A:49:E7:2F
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019A526384C7429711A3BE7C471C6C1A485B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1713
Signing time:             Wed 05 Nov 2025 05:00:45 +0000
Manifest this update:     Wed 05 Nov 2025 05:00:45 +0000
Manifest next update:     Thu 06 Nov 2025 05:00:45 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: 671AMCzmV/cdr8cmct47GP5Na6xmOfqJgbMq9zQnm3Y=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:63:84:c7:42:97:11:a3:be:7c:47:1c:6c:1a:48:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Nov  5 05:00:45 2025 GMT
            Not After : Nov  6 05:00:45 2025 GMT
        Subject: CN=20d219638900afc56f98650ba1054daa5a49e72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:40:ef:c6:5b:c2:42:62:f0:ce:fa:7f:41:d4:
                    a5:0e:14:db:ca:84:84:dd:47:75:02:79:a1:c2:c5:
                    c2:1b:15:3b:db:5c:eb:87:de:72:89:ae:78:e6:79:
                    35:22:69:e3:36:c5:36:ea:df:a6:f9:15:7e:7b:ba:
                    5e:7a:1a:36:80:e3:be:0d:4f:7b:69:fa:b3:69:63:
                    2f:0d:3d:37:d7:fc:cb:ac:0a:ef:d0:fd:46:9c:14:
                    dd:89:b7:30:f7:c7:85:99:a8:37:d0:73:c7:aa:fe:
                    28:38:ff:31:94:0b:df:64:0f:06:35:6c:f3:8c:b0:
                    7b:90:7d:a3:0f:dd:0e:6c:7b:52:5d:15:9c:ec:d9:
                    73:57:eb:6e:85:8f:26:40:bf:9b:e9:e3:1b:19:dc:
                    20:f6:98:04:89:c9:63:53:1e:28:7d:a2:f6:79:a8:
                    85:c8:d3:da:93:c2:18:e5:03:69:be:8a:86:06:2c:
                    8f:0b:50:f4:57:e2:45:80:b0:59:74:23:6e:67:5f:
                    41:ac:15:b9:43:5f:bd:b9:2d:77:a1:17:1d:21:e8:
                    93:99:c0:82:5a:38:e8:de:32:c5:e8:98:d2:90:39:
                    f1:79:a5:a0:28:a8:14:b2:0a:78:5e:2d:21:4b:52:
                    89:6d:37:ce:83:10:57:05:b7:60:4e:3f:bb:65:55:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D2:19:63:89:00:AF:C5:6F:98:65:0B:A1:05:4D:AA:5A:49:E7:2F
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:ae:89:8f:46:d8:18:0b:34:a9:37:3b:29:12:36:3e:3b:
         0d:7e:d2:40:28:06:a7:3d:90:11:fd:6b:5a:24:1b:d8:6c:1d:
         22:f9:ae:d3:04:4c:06:c3:db:77:94:b8:3f:ff:ac:40:d7:13:
         ea:ec:e1:bd:ec:05:c7:75:cc:56:9d:ba:14:09:e5:eb:92:fa:
         6a:fa:57:be:4f:fd:9f:86:ed:23:f9:a1:78:c0:aa:79:63:36:
         e7:9d:d1:ab:ac:e5:17:b5:f2:ef:17:4a:8d:1a:44:93:da:a2:
         57:f7:22:c4:87:28:87:8a:46:e3:11:29:09:19:44:08:1e:08:
         10:38:fd:48:b9:43:c1:25:6b:6d:47:ce:47:7e:f1:63:95:51:
         9c:ad:37:3d:15:8c:03:22:2f:ac:f2:82:91:dc:47:88:0c:55:
         fb:bc:bf:bf:36:b3:47:a9:e4:32:96:ec:2d:9a:ae:3f:62:29:
         fd:fe:42:db:51:76:da:57:55:18:1c:0c:63:98:41:50:e4:8e:
         d1:a7:d0:5f:77:4c:8b:6a:0d:ff:e2:0a:b1:41:f3:7f:9e:99:
         16:39:68:a6:66:51:a3:c9:3c:80:a9:b6:28:b5:09:75:4f:0e:
         a6:ee:1f:0a:c5:f4:45:7c:1f:fa:d9:03:59:67:e2:d6:4a:64:
         1e:1a:42:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY4THQpcRo758RxxsGkhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODJlZWM0YjM0NzM4ZGY3MThkYTllMDE0M2E5ZDBlOTI0
MWE4NWMwHhcNMjUxMTA1MDUwMDQ1WhcNMjUxMTA2MDUwMDQ1WjAzMTEwLwYDVQQD
EygyMGQyMTk2Mzg5MDBhZmM1NmY5ODY1MGJhMTA1NGRhYTVhNDllNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kDvxlvCQmLwzvp/QdSlDhTbyoSE
3Ud1AnmhwsXCGxU721zrh95yia545nk1ImnjNsU26t+m+RV+e7peeho2gOO+DU97
afqzaWMvDT031/zLrArv0P1GnBTdibcw98eFmag30HPHqv4oOP8xlAvfZA8GNWzz
jLB7kH2jD90ObHtSXRWc7NlzV+tuhY8mQL+b6eMbGdwg9pgEicljUx4ofaL2eaiF
yNPak8IY5QNpvoqGBiyPC1D0V+JFgLBZdCNuZ19BrBW5Q1+9uS13oRcdIeiTmcCC
Wjjo3jLF6JjSkDnxeaWgKKgUsgp4Xi0hS1KJbTfOgxBXBbdgTj+7ZVUlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDSGWOJAK/Fb5hlC6EFTapaSecvMB8GA1UdIwQY
MBaAFBWC7sSzRzjfcY2p4BQ6nQ6SQahcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYt
MWQwZTZlOTgxMTc4LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYtMWQwZTZlOTgxMTc4
LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzeuiY9G
2BgLNKk3OykSNj47DX7SQCgGpz2QEf1rWiQb2GwdIvmu0wRMBsPbd5S4P/+sQNcT
6uzhvewFx3XMVp26FAnl65L6avpXvk/9n4btI/mheMCqeWM2553Rq6zlF7Xy7xdK
jRpEk9qiV/cixIcoh4pG4xEpCRlECB4IEDj9SLlDwSVrbUfOR37xY5VRnK03PRWM
AyIvrPKCkdxHiAxV+7y/vzazR6nkMpbsLZquP2Ip/f5C21F22ldVGBwMY5hBUOSO
0afQX3dMi2oN/+IKsUHzf56ZFjlopmZRo8k8gKm2KLUJdU8Opu4fCsX0RXwf+tkD
WWfi1kpkHhpC0A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:33 2025 by rpki-client