Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          792X0xOJgkYNyNJUq/rLvXbN9pLaVyVh/HY7T4K3Xz0=
Subject key identifier:   F2:E9:50:FF:40:39:14:21:6B:4F:EE:90:0D:0B:D8:19:8B:94:67:2A
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019D37C0A306B8D9D07322D7A05E14372F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 04:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:04 +0000
Files and hashes:         1: 7501k10Hy5JYXI9pQLR83jOTyPg.roa (hash: 7y47FiiPEgMoM7qR+pPaLlmCa5gW8XrtUmVO6HZc48w=)
                          2: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: K+JI4OOR4kBLcqTD8aXyf712HFticqXFh1iH/z6yW88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:a3:06:b8:d9:d0:73:22:d7:a0:5e:14:37:2f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Mar 29 04:01:04 2026 GMT
            Not After : Mar 30 04:01:04 2026 GMT
        Subject: CN=f2e950ff403914216b4fee900d0bd8198b94672a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:28:c3:b5:7f:c9:ea:6b:8d:8b:ba:f7:5f:
                    71:b3:17:cd:55:4d:89:a1:40:e6:e3:b4:ba:48:45:
                    a4:5a:9a:30:6d:f3:58:87:15:8d:4a:3a:96:bb:9f:
                    fe:19:75:74:9c:6f:32:28:f9:4d:f7:5c:60:62:53:
                    c7:27:bb:41:f3:cc:5a:b9:68:bb:e7:0c:15:02:8c:
                    6d:03:c6:e0:54:89:81:a3:04:60:55:8c:87:d8:93:
                    a9:9a:b4:95:e0:e6:31:4e:28:bd:32:78:96:41:88:
                    9e:0c:0e:e2:8d:58:1c:4d:07:9e:98:d8:0a:4c:38:
                    28:45:e6:18:f5:a4:a2:b0:dd:45:e9:f9:c9:13:0d:
                    98:56:e7:68:80:60:eb:e8:d9:2d:a5:84:d5:47:cc:
                    c0:38:00:22:a1:c8:a9:cf:61:f7:d7:f1:ae:01:d9:
                    f0:ac:0e:a5:da:31:0c:f3:97:e2:62:c6:79:6a:d8:
                    7d:2d:be:03:8b:f8:37:a0:fa:2d:1f:71:64:37:a2:
                    42:c3:d4:0a:4f:bb:4a:17:51:81:5c:76:3d:f2:14:
                    09:bb:2e:f0:dd:aa:58:39:b8:94:81:12:e5:87:4b:
                    49:b5:df:15:22:0c:cd:5d:59:ba:e8:31:5f:46:76:
                    72:00:98:e7:90:a1:ed:a3:67:f4:e6:fa:67:8d:5a:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:50:FF:40:39:14:21:6B:4F:EE:90:0D:0B:D8:19:8B:94:67:2A
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:33:12:26:3a:ea:97:b7:7d:dc:e3:4d:8f:f2:21:89:17:d6:
         ab:ed:1d:69:92:ca:00:c7:96:50:cc:91:5f:dc:25:e3:77:dd:
         41:e0:96:f7:74:cb:68:a7:b1:8b:a3:93:38:c6:f4:b3:75:0e:
         53:5d:8b:ce:d4:9b:b4:5d:6d:93:48:3d:1c:e5:f7:29:76:ee:
         eb:c2:09:f8:2e:b8:72:25:42:88:f0:04:6e:67:0c:56:cd:54:
         6f:11:a4:04:d2:68:53:2f:80:d4:93:44:16:75:58:a2:b8:fa:
         5d:91:58:e7:8e:4c:12:c8:cd:7b:1e:8a:4c:45:66:e0:1b:66:
         95:28:30:09:67:35:7e:11:ba:6d:0d:a5:3e:c2:c3:a6:ba:d2:
         04:03:7d:f6:37:b8:c4:0b:81:04:16:9f:ad:f1:8a:37:52:2b:
         57:03:f2:56:59:77:fb:be:98:df:c3:c8:28:ef:06:07:c5:42:
         fd:9e:c0:33:fa:39:bb:0b:bb:e4:a3:99:0e:82:3d:1b:8e:ee:
         51:76:46:83:cd:fc:76:65:7e:ab:74:33:9f:cd:79:ac:61:10:
         90:40:e1:09:32:70:e4:ec:41:39:a3:cb:4b:10:39:75:6b:ff:
         21:2d:7d:05:52:b9:1f:ff:74:cd:15:16:b8:8b:24:a7:b3:22:
         65:ed:91:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:01 2026 by rpki-client