Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          e5+LyRWSdBYxbLDiZoLCc9BJt4L5IYWuMLS5QX8pqMc=
Subject key identifier:   FF:C9:86:9B:45:17:00:22:B3:DF:EE:B1:B4:1B:7B:2A:E8:6D:F9:5A
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       01A1901E6669015488B407E2D1689F2C64D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1AD3
Signing time:             Sat 31 Oct 2026 04:01:13 +0000
Manifest this update:     Sat 31 Oct 2026 04:01:13 +0000
Manifest next update:     Sun 01 Nov 2026 04:01:13 +0000
Files and hashes:         1: 7501k10Hy5JYXI9pQLR83jOTyPg.roa (hash: 7y47FiiPEgMoM7qR+pPaLlmCa5gW8XrtUmVO6HZc48w=)
                          2: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: oXiP17FIJ828gJyRYAfNYmXRNKHYedHdUEusBtPnVpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:1e:66:69:01:54:88:b4:07:e2:d1:68:9f:2c:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Oct 31 04:01:13 2026 GMT
            Not After : Nov  1 04:01:13 2026 GMT
        Subject: CN=ffc9869b45170022b3dfeeb1b41b7b2ae86df95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:c7:17:48:34:66:ea:2b:93:a8:56:4c:65:
                    32:97:4b:c7:c9:45:f7:96:db:ec:54:3e:f1:95:06:
                    dd:9c:1b:4a:de:f8:fe:46:d3:0e:b8:db:c6:34:1e:
                    4d:b2:4f:3a:2c:8c:b3:29:67:f7:7d:d6:0c:66:ce:
                    61:f6:e2:e5:d0:27:59:e7:3c:1e:63:50:97:48:f4:
                    3a:5c:85:32:19:3b:b2:28:13:17:19:82:e7:f5:35:
                    bd:2c:7b:68:ab:55:4a:da:be:6d:a4:36:d5:b2:87:
                    d5:60:67:58:7a:c4:d4:7e:98:56:94:eb:de:58:ae:
                    c8:ca:cc:d0:c0:97:cf:3d:bf:df:c3:4c:e6:81:c0:
                    63:59:81:96:ba:5f:c4:6e:aa:9c:18:49:b9:57:47:
                    e8:d8:82:4d:16:6f:9b:4c:4a:c4:13:18:60:d2:f1:
                    37:e1:a6:79:a3:7e:dd:0d:1e:ca:6c:28:93:25:98:
                    63:db:56:01:35:31:30:3f:c1:b4:e3:56:e5:94:67:
                    91:58:d7:8d:9d:ca:3b:8e:7c:03:f5:04:08:00:99:
                    c6:f1:86:32:a9:b4:12:51:7a:c5:e0:31:c1:07:48:
                    1c:a6:50:22:94:59:1c:9e:65:86:ba:ff:d3:5f:48:
                    bf:5b:0c:e7:d4:f1:7f:09:51:91:e1:64:ba:91:ee:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:86:9B:45:17:00:22:B3:DF:EE:B1:B4:1B:7B:2A:E8:6D:F9:5A
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:86:0f:60:9d:6f:8b:19:e7:92:7a:49:6b:6e:aa:ff:8d:39:
         bd:f4:90:87:6f:71:d9:46:37:90:1f:3e:e7:b9:9c:04:d2:d9:
         17:44:d4:70:b4:83:b4:61:b1:76:ff:19:15:f4:e0:98:0c:85:
         6b:07:17:ee:e5:d6:5a:b2:f3:ff:0f:22:f6:87:2a:fb:18:8f:
         5d:d4:2e:39:fd:bf:e9:58:31:97:6e:9e:06:ac:04:a2:99:88:
         a3:c9:39:65:14:00:b0:df:04:91:e7:d3:a4:c7:15:22:29:ba:
         74:ee:15:d4:0f:a8:32:44:44:2a:8d:4a:81:1a:98:6d:f2:30:
         03:27:74:45:a9:08:ad:12:66:c9:c9:dd:a8:6f:5e:25:10:6f:
         b5:73:3f:cf:c1:93:19:5b:d2:9f:44:7d:94:ac:ac:7f:af:48:
         eb:51:c3:9e:2d:81:d8:71:49:1f:b5:06:75:47:7e:5f:ac:80:
         97:d1:13:18:47:8b:44:e2:2e:59:4a:2a:36:30:60:15:af:9a:
         4f:b5:fa:a9:de:0b:d9:5b:5d:9d:45:bd:e4:14:dc:c6:5c:9b:
         ae:fb:db:10:b8:fd:ef:fc:a5:ec:9f:93:06:9b:fa:3a:67:f7:
         93:7d:8a:6e:31:ef:39:e0:3e:ee:20:c1:69:2b:df:af:83:a4:
         c3:f6:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:45 2026 by rpki-client