Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          wcWJt3U9aAQSePL/dXkttqI5aXFIrJyRtkDSWtmFzp4=
Subject key identifier:   BF:FA:20:F4:12:EE:09:25:D1:81:45:DF:E2:C1:FD:6E:57:F1:3D:F8
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       0196D43F1FF8CB2054704C1A6B4BE420ACFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          1544
Signing time:             Thu 15 May 2025 14:00:28 +0000
Manifest this update:     Thu 15 May 2025 14:00:28 +0000
Manifest next update:     Fri 16 May 2025 14:00:28 +0000
Files and hashes:         1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: bo9jgwT75NENp9ChNJEphcIPou4/amwdBP1oXi21vBY=)
                          2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:3f:1f:f8:cb:20:54:70:4c:1a:6b:4b:e4:20:ac:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: May 15 14:00:28 2025 GMT
            Not After : May 16 14:00:28 2025 GMT
        Subject: CN=bffa20f412ee0925d18145dfe2c1fd6e57f13df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:9e:0e:89:a7:24:ad:7d:6b:7d:5a:34:6d:
                    2c:62:b7:ab:a3:e9:94:e8:f2:fe:a4:61:f1:78:1b:
                    b3:49:93:38:6f:c2:c4:b6:8d:ce:fb:ab:84:56:8e:
                    e1:d0:36:37:7d:db:c9:72:c5:a8:bd:c3:3b:8c:bc:
                    15:1d:8f:e6:3b:3a:dd:52:4d:43:84:c6:f2:b9:85:
                    71:95:4b:6c:48:b5:dc:45:cf:89:cd:2d:0a:b9:da:
                    d9:ce:55:93:f5:56:f7:7a:2c:e0:48:52:3e:74:d1:
                    1f:1e:4f:1a:b7:72:cb:63:89:a8:e4:28:13:30:28:
                    df:b9:34:b7:6e:73:6b:d2:79:b6:5e:e3:1c:48:39:
                    59:b7:58:54:ab:e6:b8:1c:79:fa:d1:82:ad:d5:f9:
                    01:f7:d5:22:9e:bf:f3:d5:5c:ab:73:42:9b:54:40:
                    1a:e8:a0:fe:f2:10:6d:df:72:1e:b3:8a:4c:bb:9a:
                    db:04:b9:dc:d5:f3:82:65:be:25:29:68:01:bf:2e:
                    d6:2f:29:06:16:a6:a4:a8:d7:b7:0d:ce:8f:ff:49:
                    cb:d2:a2:c5:b6:f2:38:3b:12:0d:19:0a:8e:af:29:
                    3f:6c:8f:d2:d0:a8:db:8d:4d:85:55:9c:be:fc:f8:
                    90:19:23:29:6c:7f:3b:cf:04:ac:e1:07:b7:e2:73:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FA:20:F4:12:EE:09:25:D1:81:45:DF:E2:C1:FD:6E:57:F1:3D:F8
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:70:61:84:e3:21:5d:6e:96:2c:99:d1:79:ab:b6:13:a3:83:
         bb:ba:9f:9d:80:e0:f6:ce:00:56:32:03:37:36:6e:f5:ce:76:
         c7:59:04:4c:50:63:2c:e3:0f:e9:f1:68:6b:50:8c:dc:c7:af:
         95:28:91:08:34:4c:4d:2d:06:46:e5:88:63:7f:df:9b:00:aa:
         4f:14:e9:ef:a2:57:42:a0:3a:e3:11:3a:84:b0:a7:c2:d1:63:
         b0:45:c6:3f:56:7d:af:25:87:d1:71:77:30:17:e1:f9:41:1d:
         2b:8e:18:ec:d4:0d:75:f9:13:30:40:57:79:a7:1e:5b:4a:bd:
         75:6a:9a:aa:2f:8a:f4:78:58:3d:13:7d:f8:1e:33:e0:48:e3:
         95:d7:6b:f8:ae:08:82:8c:69:70:fe:85:5f:82:ee:46:90:a7:
         f9:27:9b:93:e7:9d:cf:19:8f:6b:ce:45:9d:7e:b9:01:c8:26:
         9b:2f:a8:a0:a9:7c:de:fd:cf:8e:3d:ea:fa:a7:93:84:3b:88:
         91:fe:47:64:b9:2a:c8:5d:5c:17:2c:52:37:43:28:7a:27:d7:
         2d:34:8f:51:cf:e0:74:b1:f4:c8:5e:45:c9:0d:55:1e:4a:4c:
         b6:f2:d0:ea:0f:3a:79:d8:a1:af:cb:8c:59:be:3e:85:ac:d3:
         fa:b1:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:11:17 2025 by rpki-client