Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          9FAPAd2KOCLyRQmflCoGZluRikdRZ/feVUnOs7zZIAw=
Subject key identifier:   59:9C:CD:E2:CE:A5:A4:38:9C:64:B5:E4:28:09:FC:04:66:93:A9:B3
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       01A10135AAE3E8612666195F28625A8E07F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1A89
Signing time:             Sat 03 Oct 2026 10:00:56 +0000
Manifest this update:     Sat 03 Oct 2026 10:00:56 +0000
Manifest next update:     Sun 04 Oct 2026 10:00:56 +0000
Files and hashes:         1: 7501k10Hy5JYXI9pQLR83jOTyPg.roa (hash: 7y47FiiPEgMoM7qR+pPaLlmCa5gW8XrtUmVO6HZc48w=)
                          2: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: EA0NkSN+RSgMtrDK1z5FxczIbqflsebpoXbA7JYda7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:35:aa:e3:e8:61:26:66:19:5f:28:62:5a:8e:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Oct  3 10:00:56 2026 GMT
            Not After : Oct  4 10:00:56 2026 GMT
        Subject: CN=599ccde2cea5a4389c64b5e42809fc046693a9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:63:ef:77:b0:35:31:22:4b:53:04:93:40:
                    91:9d:e0:69:f3:25:ef:10:86:76:be:7a:8e:fe:ba:
                    8f:93:60:3d:05:61:73:c5:99:1f:ea:f3:dd:2c:22:
                    da:70:8f:ff:c4:77:3e:34:45:84:ab:e1:3b:38:35:
                    5b:2c:3a:74:65:a1:a7:4a:de:cf:d3:4a:4f:af:6c:
                    b2:5e:97:bf:9c:a7:81:7e:e0:61:77:a1:cc:f1:03:
                    02:71:6f:80:0d:72:cf:c9:f5:1f:46:09:40:26:d7:
                    66:14:1e:b2:28:19:81:95:ac:cd:7f:1e:28:aa:af:
                    fb:be:72:a4:5d:9d:3b:94:42:47:31:76:8e:5c:da:
                    2b:a0:40:a5:d7:3d:ed:ae:40:66:09:d3:ca:33:05:
                    8f:08:b4:e7:7e:2d:3c:bc:d1:2d:f6:e4:5e:72:0a:
                    30:9b:50:3e:75:40:43:d9:38:17:35:de:1d:a7:93:
                    48:8d:db:11:f6:a8:d6:bc:6e:1e:58:c3:2d:46:64:
                    47:68:c9:7d:34:86:4a:36:6c:de:23:53:c1:f0:34:
                    2b:12:9f:61:8e:b6:32:36:d1:4c:5e:f6:9d:d1:cf:
                    cc:5d:12:6d:ea:b5:50:cc:a0:9c:f3:64:8c:2a:9c:
                    c4:2b:35:95:5f:2e:3f:0a:50:ff:98:48:79:ce:c0:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:CD:E2:CE:A5:A4:38:9C:64:B5:E4:28:09:FC:04:66:93:A9:B3
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:7c:e2:a8:37:67:2a:51:97:7b:ed:09:01:f4:bf:ec:ef:
         96:ec:48:42:c6:7e:67:78:04:de:56:d8:1b:37:fd:36:2d:8d:
         71:27:16:78:aa:5c:51:92:8d:59:2f:22:36:11:cd:2d:97:2e:
         de:a9:3e:19:89:f4:8a:58:fa:7b:de:8c:e2:48:a4:07:7b:d1:
         e4:ce:27:4d:22:0c:37:47:f7:18:b4:8b:a9:01:27:30:16:89:
         01:68:c5:a8:d9:d4:b2:32:31:8f:0e:61:11:7b:cb:6f:31:d2:
         af:1e:cd:45:24:de:49:ec:f8:22:20:f3:0c:0b:26:91:92:3c:
         1e:47:5a:62:8e:61:e2:c1:3b:06:14:2c:59:fa:3b:17:22:f4:
         a1:d3:14:5e:d1:d3:89:a4:be:86:8a:18:45:55:51:e1:b1:d9:
         1a:78:a8:45:39:6b:48:44:aa:5b:a5:dd:59:a7:b6:3c:63:a1:
         7e:bc:ef:73:fb:12:49:7f:f9:47:5f:82:af:d1:a4:96:1e:b9:
         66:6a:54:b0:28:a5:3f:a7:7b:cd:f6:d2:83:28:8b:f6:30:cf:
         f9:cf:b7:7d:b4:f3:e8:88:ec:10:66:1a:bb:48:23:db:4a:1f:
         52:88:96:5e:aa:73:9b:24:82:bb:08:9f:8c:a3:6c:c0:7d:23:
         94:75:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 18:41:25 2026 by rpki-client