Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File:                     FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier:          O/BIlp7NnhqH/XSYEM9nKCKPYL9nIrq6Is1rSE66dNA=
Subject key identifier:   31:68:ED:CD:01:CD:13:73:2E:75:E9:6D:9F:BA:6C:7E:C1:66:69:A6
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       019E216D5788026C4C889E5520E07AD6DCD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 13:01:14 +0000
Manifest this update:     Wed 13 May 2026 13:01:14 +0000
Manifest next update:     Thu 14 May 2026 13:01:14 +0000
Files and hashes:         1: 7501k10Hy5JYXI9pQLR83jOTyPg.roa (hash: 7y47FiiPEgMoM7qR+pPaLlmCa5gW8XrtUmVO6HZc48w=)
                          2: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: bq5SBDWqiLGwiiJtccbvbIaUG8XYeoF8JnZa5m635tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:57:88:02:6c:4c:88:9e:55:20:e0:7a:d6:dc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: May 13 13:01:14 2026 GMT
            Not After : May 14 13:01:14 2026 GMT
        Subject: CN=3168edcd01cd13732e75e96d9fba6c7ec16669a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:fa:6c:60:76:4d:46:f5:fc:de:94:95:da:
                    e9:81:b0:1b:b5:cd:e9:67:51:22:da:00:da:98:5a:
                    0b:14:70:e5:c1:5b:11:e0:ed:83:c6:e9:02:20:25:
                    23:85:0b:cc:1a:4e:19:c5:ce:2f:a5:04:71:83:a7:
                    f4:af:ae:df:5a:f6:d4:f5:12:73:a0:02:f5:75:e0:
                    f7:ab:f6:18:ab:da:43:d0:97:d8:ed:6b:3c:bd:94:
                    9a:88:a1:b6:b3:e5:a1:08:d6:3a:ea:43:c3:64:39:
                    ec:c9:f6:f1:28:35:36:7f:10:6c:ca:f5:b0:26:a8:
                    35:72:a8:8d:5c:eb:c8:c6:66:80:0e:29:33:14:d2:
                    20:f7:da:03:54:9b:72:eb:b6:91:a1:5c:66:36:ff:
                    25:e6:71:ac:ec:b5:41:09:7f:6f:6e:3e:7e:19:f5:
                    15:b5:d9:0d:9b:30:81:53:ec:63:0c:65:ac:75:25:
                    2e:19:11:f3:c2:57:b7:86:32:fc:73:f1:29:99:59:
                    34:a1:1a:20:1b:cd:51:6e:f2:27:70:a1:3d:52:58:
                    94:dc:1d:d8:66:59:a7:8f:8b:32:3c:22:10:3e:c1:
                    5a:38:a1:fa:2b:b4:a1:b6:fd:66:f6:14:34:c8:d8:
                    24:07:92:91:f0:28:20:8b:ef:51:2e:31:35:ac:f2:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:68:ED:CD:01:CD:13:73:2E:75:E9:6D:9F:BA:6C:7E:C1:66:69:A6
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:28:2d:a3:cf:57:3b:7d:48:21:7a:ff:d7:bf:b0:1b:80:d6:
         c0:56:28:93:98:2d:7d:d6:b8:1e:82:8d:15:c5:35:7f:a3:e6:
         69:b4:29:59:43:c3:ea:5c:4f:89:fa:c3:1b:d8:80:02:7d:a3:
         73:4e:1a:bc:db:0c:a2:dd:91:3e:6b:87:89:d2:a4:ac:36:48:
         88:d8:e0:0c:da:87:3f:c7:2b:99:57:37:55:a8:16:a9:70:35:
         76:bd:4d:1e:db:8f:94:7a:6c:ba:61:57:10:34:21:a7:6e:f0:
         90:b5:72:7c:bb:26:46:ba:e0:d8:e1:f9:a1:22:f5:95:b7:07:
         dd:8c:fa:98:7c:1d:2b:8c:22:51:89:e0:15:d5:ae:bd:2f:b0:
         55:11:6e:e7:d7:f0:70:4d:87:95:46:74:5e:54:5c:6d:db:f7:
         9b:88:07:03:07:54:48:6e:68:25:b5:da:5d:32:cd:75:2f:e5:
         de:ab:a0:eb:ce:2c:9d:5f:1b:cc:92:9a:11:82:c8:2a:95:24:
         04:a2:1d:96:8a:20:ab:f2:a1:7b:aa:7e:2e:70:23:b6:00:2b:
         51:db:6e:88:69:6a:5f:98:45:e5:15:38:3a:64:06:f0:0a:ba:
         cb:da:e2:4e:25:b6:56:04:d3:b2:56:9d:2f:39:59:45:03:0b:
         4f:70:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:56 2026 by rpki-client