Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          tGTMTmaNzigHZxh6MOIGgy2fXu34G/YGZCpuoxeC+BA=
Subject key identifier:   21:92:95:C3:84:BE:81:23:6F:99:52:7F:C2:B0:5B:CA:AF:6C:10:96
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019EC3A538DCBDEC0783A161EF6E528DB1A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1960
Signing time:             Sun 14 Jun 2026 01:00:45 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:45 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:45 +0000
Files and hashes:         1: 7501k10Hy5JYXI9pQLR83jOTyPg.roa (hash: 7y47FiiPEgMoM7qR+pPaLlmCa5gW8XrtUmVO6HZc48w=)
                          2: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: v5LDf6m2QzxdWIVvWEYTjfzY//dVivxBze9+WkQ3EIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:38:dc:bd:ec:07:83:a1:61:ef:6e:52:8d:b1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Jun 14 01:00:45 2026 GMT
            Not After : Jun 15 01:00:45 2026 GMT
        Subject: CN=219295c384be81236f99527fc2b05bcaaf6c1096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:f2:a0:56:5a:2c:73:40:97:6d:ba:89:1f:
                    7a:10:c2:1f:aa:d2:14:a2:ca:87:5c:83:be:49:28:
                    1b:a8:53:f5:64:45:62:3f:79:c7:5e:a4:d9:18:9d:
                    30:47:18:59:b6:d4:22:d7:f0:25:ba:a2:13:18:db:
                    36:0e:13:49:3e:9d:91:ed:ce:36:f8:4b:35:12:90:
                    f8:ef:55:32:73:f8:e8:d2:ce:28:b8:00:d9:dd:b4:
                    b5:8b:8c:e6:a7:61:a8:97:0c:10:92:9a:6f:81:10:
                    54:2b:08:11:df:2c:36:29:24:28:a8:17:2f:02:32:
                    02:96:94:37:53:cd:04:7d:c4:87:03:3e:3d:8f:bc:
                    73:96:23:05:90:e4:34:8f:9c:28:2f:2a:09:cb:ba:
                    e6:5f:b1:9d:97:c2:e3:84:01:e5:d1:20:4b:3d:c1:
                    ba:81:d3:c2:6a:10:54:1d:5d:7e:02:e4:09:ca:84:
                    03:89:35:63:ae:fd:12:da:e3:fc:64:e5:71:fe:51:
                    5a:02:66:9c:3b:08:cd:ca:96:7f:5f:7c:ae:6d:fe:
                    1c:c4:aa:36:e2:f3:d1:43:3a:58:33:1d:d7:b3:80:
                    60:5c:70:fb:3b:f7:bd:20:e7:59:7d:a7:0b:80:aa:
                    55:1b:f1:a6:41:48:ca:b6:50:83:30:95:46:a2:bf:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:95:C3:84:BE:81:23:6F:99:52:7F:C2:B0:5B:CA:AF:6C:10:96
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:27:05:0c:94:8d:1f:36:b4:67:83:43:16:d7:9f:dc:17:
         87:e9:6d:af:45:72:27:5c:71:4b:4a:68:94:ee:6b:ac:4d:bf:
         fe:c7:cb:1d:01:65:9c:b2:e9:75:04:9b:aa:11:5b:0b:36:84:
         ba:cc:02:1a:53:08:25:c5:8b:8d:7f:1f:8c:49:22:3e:0b:7c:
         10:c6:ce:5e:87:3a:67:ba:1c:32:ee:4d:07:ea:15:8d:c7:10:
         73:a8:5c:7e:3a:bd:fa:a7:e2:91:3c:51:cf:8d:fa:53:5b:a8:
         fd:31:0a:47:8b:1b:75:b8:61:bf:7b:3e:72:fc:2e:33:96:90:
         47:da:bd:d3:78:72:9a:96:5a:18:bf:2e:d1:53:f4:52:bb:b0:
         c4:18:da:5a:4c:d7:e8:bb:9f:74:d4:70:81:17:c1:14:9d:10:
         dd:c1:0b:f5:8e:f6:f6:fe:66:49:e5:2f:a6:eb:28:19:f3:d0:
         b1:95:1f:45:48:ff:a3:02:48:8d:c2:b3:9e:50:4b:a7:53:7d:
         ca:88:35:c8:a7:6d:a5:d8:ec:8a:d5:74:1e:95:50:67:0c:df:
         94:a7:f4:41:16:c3:f9:fd:51:79:48:94:c4:51:ed:c3:04:ab:
         9f:3d:5d:81:80:d8:0f:55:4e:8d:9b:d4:bb:de:51:2d:c4:64:
         a9:23:7b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpTjcvewHg6Fh725SjbGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODJlZWM0YjM0NzM4ZGY3MThkYTllMDE0M2E5ZDBlOTI0
MWE4NWMwHhcNMjYwNjE0MDEwMDQ1WhcNMjYwNjE1MDEwMDQ1WjAzMTEwLwYDVQQD
EygyMTkyOTVjMzg0YmU4MTIzNmY5OTUyN2ZjMmIwNWJjYWFmNmMxMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusLyoFZaLHNAl226iR96EMIfqtIU
osqHXIO+SSgbqFP1ZEViP3nHXqTZGJ0wRxhZttQi1/AluqITGNs2DhNJPp2R7c42
+Es1EpD471Uyc/jo0s4ouADZ3bS1i4zmp2GolwwQkppvgRBUKwgR3yw2KSQoqBcv
AjIClpQ3U80EfcSHAz49j7xzliMFkOQ0j5woLyoJy7rmX7Gdl8LjhAHl0SBLPcG6
gdPCahBUHV1+AuQJyoQDiTVjrv0S2uP8ZOVx/lFaAmacOwjNypZ/X3yubf4cxKo2
4vPRQzpYMx3Xs4BgXHD7O/e9IOdZfacLgKpVG/GmQUjKtlCDMJVGor9y/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGSlcOEvoEjb5lSf8KwW8qvbBCWMB8GA1UdIwQY
MBaAFBWC7sSzRzjfcY2p4BQ6nQ6SQahcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYt
MWQwZTZlOTgxMTc4LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYtMWQwZTZlOTgxMTc4
LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0QnBQyU
jR82tGeDQxbXn9wXh+ltr0VyJ1xxS0polO5rrE2//sfLHQFlnLLpdQSbqhFbCzaE
uswCGlMIJcWLjX8fjEkiPgt8EMbOXoc6Z7ocMu5NB+oVjccQc6hcfjq9+qfikTxR
z436U1uo/TEKR4sbdbhhv3s+cvwuM5aQR9q903hympZaGL8u0VP0UruwxBjaWkzX
6LufdNRwgRfBFJ0Q3cEL9Y729v5mSeUvpusoGfPQsZUfRUj/owJIjcKznlBLp1N9
yog1yKdtpdjsitV0HpVQZwzflKf0QRbD+f1ReUiUxFHtwwSrnz1dgYDYD1VOjZvU
u95RLcRkqSN7xg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:06 2026 by rpki-client