Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          ot94rra0HgNbEXFYh2dfd9CBhkti1imle+wOikSsXjI=
Subject key identifier:   80:85:05:C3:9C:A4:F8:7D:4C:30:25:D5:F4:18:A3:A4:B6:D8:76:EA
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       0198D5F1526577424B19F6DDCCE601B3766E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 08:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:18 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: GqFKEsWti5LutCzYemDikLfHoXmsl/FLiSIEdYi+uEQ=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:52:65:77:42:4b:19:f6:dd:cc:e6:01:b3:76:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Aug 23 08:00:18 2025 GMT
            Not After : Aug 24 08:00:18 2025 GMT
        Subject: CN=808505c39ca4f87d4c3025d5f418a3a4b6d876ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:dc:1b:2c:06:df:32:5c:8e:30:b8:7e:54:
                    7a:39:75:eb:0b:da:b0:3d:fb:80:1f:e7:39:00:87:
                    d9:21:4f:2c:b1:14:16:d1:00:64:6b:5e:6a:ce:5c:
                    35:fe:6a:22:7d:ec:2c:06:44:83:46:aa:f8:e2:1f:
                    ab:59:fb:16:15:c3:22:16:32:bb:ca:1c:12:32:5d:
                    11:ed:34:07:d5:99:bb:e2:87:cf:f4:2f:00:75:79:
                    d3:a5:0b:d1:95:32:89:73:7a:09:13:bd:e5:e3:9e:
                    c9:b1:df:e9:87:e7:65:62:0e:97:c2:9f:43:e7:f1:
                    5c:52:16:e9:e9:bd:b0:a4:15:e8:20:1b:b1:2b:6f:
                    64:49:81:f6:5e:d4:1d:cb:1b:02:63:44:19:d0:00:
                    b6:1d:88:d6:de:89:46:92:0d:cf:bb:8c:26:25:cb:
                    10:f8:4d:63:64:7a:9e:ff:66:06:00:dd:d2:00:71:
                    01:82:8b:5a:70:75:60:2d:b1:2c:ce:d3:f8:04:ee:
                    f2:eb:61:65:0b:b9:2d:96:08:5a:56:ac:79:1b:94:
                    2d:0c:bf:44:04:18:5c:9a:e6:36:3c:02:8d:64:77:
                    45:0b:d3:e6:d7:1b:09:81:1c:8c:9f:2c:46:39:e3:
                    a4:19:07:db:70:c9:6c:e5:53:67:19:03:2b:cc:ec:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:85:05:C3:9C:A4:F8:7D:4C:30:25:D5:F4:18:A3:A4:B6:D8:76:EA
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:cc:94:a3:9f:00:79:80:f0:4e:72:f3:c4:b5:62:3d:97:
         d9:80:ea:fd:da:2a:ae:a6:07:85:ab:26:fb:27:d7:26:5c:37:
         7a:83:80:d5:bf:db:7f:d0:4e:da:30:f4:f5:ad:28:1b:85:79:
         59:9c:bd:31:1e:ca:1a:8b:80:05:2c:aa:c4:2c:7f:e0:18:1f:
         f9:c4:09:ba:3d:89:a6:e8:0c:3e:c4:16:c2:aa:05:67:5d:69:
         33:52:3c:09:d5:17:3b:ce:13:69:85:71:28:0e:aa:06:13:b5:
         b0:e4:1f:4d:72:ad:ca:7f:4e:25:a7:62:47:d1:64:3e:ae:f9:
         b2:24:04:cb:9e:fa:05:78:e2:7d:92:64:2c:0d:c8:ba:bd:52:
         dc:63:91:05:25:22:a2:04:a3:ec:0a:9d:89:2e:03:ae:10:37:
         f2:90:bb:6e:2d:d5:ef:1f:6e:fe:a9:80:28:e1:98:3a:43:6c:
         99:b8:51:4e:90:f7:a2:56:2e:dd:66:e6:28:00:7c:a8:52:58:
         5a:5b:b5:15:57:85:ad:fe:af:02:ba:e2:eb:b4:af:b6:17:75:
         cf:04:08:04:13:88:e5:80:d3:da:9f:8c:47:d1:8d:da:36:b2:
         a1:05:55:83:15:56:01:de:37:9b:ee:d9:27:c3:1d:0b:00:b3:
         bf:33:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:50 2025 by rpki-client