Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          Q4nen/OAEiIzghK+Qw57wW1N/R7eplimnRpA59bzAJg=
Subject key identifier:   C0:14:F9:32:43:75:42:E4:28:17:2C:E3:A1:82:46:ED:EA:43:53:FA
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019930B57D0215D850719C63227DF5A3D847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          167D
Signing time:             Tue 09 Sep 2025 23:00:24 +0000
Manifest this update:     Tue 09 Sep 2025 23:00:24 +0000
Manifest next update:     Wed 10 Sep 2025 23:00:24 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: bxKqcieRvErK6ocmO6dCDCCPByyt9l+0eRWtER3H2Eo=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:b5:7d:02:15:d8:50:71:9c:63:22:7d:f5:a3:d8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Sep  9 23:00:24 2025 GMT
            Not After : Sep 10 23:00:24 2025 GMT
        Subject: CN=c014f932437542e428172ce3a18246edea4353fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:64:13:a6:2a:d2:dd:67:57:92:af:ff:19:
                    f3:5e:67:98:d2:39:ed:ae:e3:43:8d:5b:cb:aa:e1:
                    9f:39:a3:a9:70:e8:7d:b7:e5:2a:c2:5a:80:f2:b0:
                    f7:39:75:16:62:7a:53:6e:95:a5:0c:4b:00:ae:b5:
                    90:44:ad:09:90:3f:2e:75:7e:22:a6:f3:0d:22:36:
                    1d:28:43:58:cf:8e:8e:53:47:fc:cb:d7:39:3a:2f:
                    37:f2:f8:3b:44:4b:90:e6:f2:cc:e7:80:22:b8:d4:
                    df:0d:b0:56:e3:4d:ac:28:51:2c:0f:75:61:a6:62:
                    d8:ab:47:2b:06:6a:4d:f6:36:5d:57:c8:55:e8:ad:
                    99:25:88:e9:07:d1:7e:a6:f6:c8:2c:1f:42:e0:7a:
                    17:e8:c0:93:98:2b:ce:b2:e2:21:dc:32:00:ed:40:
                    0c:c8:fe:aa:1b:a6:16:71:54:19:e0:9b:53:be:d2:
                    6c:68:b2:f9:79:2a:dc:be:b1:ff:3c:3c:ea:a3:fc:
                    41:50:a6:db:69:c9:79:3b:73:57:2d:31:de:37:e8:
                    74:1a:5a:66:c3:f3:e7:94:ad:04:14:8a:7f:25:1f:
                    bf:49:4c:06:24:bd:b4:19:76:39:fa:28:06:ac:2d:
                    c8:26:55:71:e9:61:47:29:7f:23:f1:60:22:a8:36:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:F9:32:43:75:42:E4:28:17:2C:E3:A1:82:46:ED:EA:43:53:FA
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:8c:36:9f:b2:21:a4:29:f4:60:10:4f:b2:a8:ac:22:bc:05:
         75:b2:10:68:9d:25:ce:e3:9e:e4:10:80:6d:d3:97:f4:85:7b:
         d4:f2:76:af:db:21:b6:f8:49:69:dc:1e:08:5d:3a:7f:a9:e2:
         42:83:b4:e2:e0:23:b2:5a:5e:08:a2:9b:62:b4:ff:fe:da:9a:
         72:97:ad:7b:4f:80:78:25:11:ca:12:40:ee:e7:c7:f3:b0:ee:
         3e:68:ec:2f:82:92:69:36:f3:91:63:fd:3d:1d:be:58:f2:77:
         20:31:8f:61:1e:92:c9:1f:a9:8e:bc:2f:0c:11:f3:f8:91:a6:
         77:2f:4f:cc:c7:e0:20:75:4d:51:88:bf:5d:11:53:6a:7d:ec:
         d6:24:7f:21:12:95:ca:be:bd:0e:7b:98:4f:b8:a0:d2:77:34:
         31:18:60:76:5a:88:dc:35:2e:18:9f:44:85:a2:98:b5:ac:77:
         85:56:c9:84:64:f4:82:c2:c0:51:8f:d1:18:22:30:3e:8e:4e:
         90:17:8f:22:56:c4:50:5e:c1:24:ad:db:3b:fd:54:7e:f2:ea:
         bf:5d:68:02:51:69:2b:68:6c:5c:00:09:36:5a:07:91:b0:50:
         93:9b:14:2f:b9:c2:77:44:f2:48:05:03:32:72:60:07:cf:d4:
         d1:72:cc:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwtX0CFdhQcZxjIn31o9hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODJlZWM0YjM0NzM4ZGY3MThkYTllMDE0M2E5ZDBlOTI0
MWE4NWMwHhcNMjUwOTA5MjMwMDI0WhcNMjUwOTEwMjMwMDI0WjAzMTEwLwYDVQQD
EyhjMDE0ZjkzMjQzNzU0MmU0MjgxNzJjZTNhMTgyNDZlZGVhNDM1M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyNkE6Yq0t1nV5Kv/xnzXmeY0jnt
ruNDjVvLquGfOaOpcOh9t+UqwlqA8rD3OXUWYnpTbpWlDEsArrWQRK0JkD8udX4i
pvMNIjYdKENYz46OU0f8y9c5Oi838vg7REuQ5vLM54AiuNTfDbBW402sKFEsD3Vh
pmLYq0crBmpN9jZdV8hV6K2ZJYjpB9F+pvbILB9C4HoX6MCTmCvOsuIh3DIA7UAM
yP6qG6YWcVQZ4JtTvtJsaLL5eSrcvrH/PDzqo/xBUKbbacl5O3NXLTHeN+h0Glpm
w/PnlK0EFIp/JR+/SUwGJL20GXY5+igGrC3IJlVx6WFHKX8j8WAiqDYQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAU+TJDdULkKBcs46GCRu3qQ1P6MB8GA1UdIwQY
MBaAFBWC7sSzRzjfcY2p4BQ6nQ6SQahcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYt
MWQwZTZlOTgxMTc4LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYtMWQwZTZlOTgxMTc4
LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Yw2n7Ih
pCn0YBBPsqisIrwFdbIQaJ0lzuOe5BCAbdOX9IV71PJ2r9shtvhJadweCF06f6ni
QoO04uAjslpeCKKbYrT//tqacpete0+AeCURyhJA7ufH87DuPmjsL4KSaTbzkWP9
PR2+WPJ3IDGPYR6SyR+pjrwvDBHz+JGmdy9PzMfgIHVNUYi/XRFTan3s1iR/IRKV
yr69DnuYT7ig0nc0MRhgdlqI3DUuGJ9EhaKYtax3hVbJhGT0gsLAUY/RGCIwPo5O
kBePIlbEUF7BJK3bO/1UfvLqv11oAlFpK2hsXAAJNloHkbBQk5sUL7nCd0TySAUD
MnJgB8/U0XLMjQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:35:28 2025 by rpki-client