Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File:                     livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier:          zqw0cYGuurA5YVc3M8KmEFMJvnQHW/dGDAXbwj8T+9g=
Subject key identifier:   A9:3F:EA:C2:2D:41:F0:A4:31:32:D1:B7:CA:6E:93:33:FE:15:C9:91
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer:       /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial:       019E2092391F1D9846295E95C7380A1E4205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number:          02C7
Signing time:             Wed 13 May 2026 09:01:54 +0000
Manifest this update:     Wed 13 May 2026 09:01:54 +0000
Manifest next update:     Thu 14 May 2026 09:01:54 +0000
Files and hashes:         1: 1-8B1HJiBNZt2mLa484DWmBMQSFU.roa (hash: oP/xM98/RPfu/5TqpnGJmxNimUeay7qqliPVccblTpQ=)
                          2: 1-Qeq6hhgmsnV9dwc9CM4x2DEp_o.roa (hash: hqKeYIw+K+XvdJwrb3vT/mCOwu7/uLLr532kYdiZTtk=)
                          3: 1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa (hash: ZY5qyuJzGWTMv1saHpay6f1Y6Lu8rpI6Q1Iz7J18iUs=)
                          4: 1-aH8x_etPHb7N5lZxH2EJ06tejk.roa (hash: 4D8bZL+jOKZy7BZQ0lGHl4mnZyTD+EOB54zTxO+almE=)
                          5: 4qUkTKGm6pGhy2LKyNsE9JLEu9s.roa (hash: n8RFY9wAkRTw92IGWmg3oXl6nw20aGymGHPFNpvZX/Q=)
                          6: 7pVh0pZTEc1E6xJL3InhvltDz2s.roa (hash: MmrKH/vPG61mnh+lBIkFizSc2omHNbwFSetlTBexxRo=)
                          7: C9KkvhzLL551ZPbXxx1FoBbqXf4.roa (hash: UeCszyUVIZvVTu9aAl83hlN/RDOqN4hXz1ho/Fs2ISc=)
                          8: DiqaDwrLCUvrlPkP-0eihteOneY.roa (hash: TuifAr8s69JWfjPp9b5i4tGf2xSWW7Ct4OGJ2sDmRwg=)
                          9: E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa (hash: 8IC9Nubg/5Jpt50f9l4q2zuXWjF7ZZkCNpKaDWsctR0=)
                          10: FL-mLisikCniX8ptzn2CQkY1EP4.roa (hash: p99XPLiTd+DQjXuhkl7h+/enU6blE89NaEQgomxDU3g=)
                          11: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (hash: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=)
                          12: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (hash: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI=)
                          13: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (hash: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E=)
                          14: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (hash: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k=)
                          15: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (hash: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=)
                          16: MYydd3R4Y9vwrgnnxpOHm9Sf_mU.roa (hash: 4CrwudFLN29ynwGmSG8gQhxSRQhVd7AqzZeF9S6O/UU=)
                          17: QLEEsVMAnp8yBuh1hcBg5UTekXg.roa (hash: rhepJz5uuPekXjrE3FZCBDFMEp//GBVxeS0QL8Wrygc=)
                          18: U0Zw7nxZcY6li2EowQpo7GWvwRw.roa (hash: W83oCNCWNdwCZPqO8EuYCWEQ9TVK20LIVtEgGqY7xpE=)
                          19: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (hash: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=)
                          20: YZbCezesixGK-5MW0VqY6oAGzr8.roa (hash: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s=)
                          21: aP6TZ2IqLVgF0VWuJ9T3yCaCqpk.roa (hash: j6iM/mIBztj8GmnOe76w3rlLqYEbhzCf5n/E02uuQng=)
                          22: elTx126yBsA7dCzExkxDADRceX0.roa (hash: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw=)
                          23: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (hash: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE=)
                          24: lUYFhgrgYwzzCnla_INuymemYAw.roa (hash: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=)
                          25: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: hOxOZOJAfZWTb7zG4mDgnDtwL5eZEt1R+Ab3H0Ou/sc=)
                          26: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (hash: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4=)
                          27: raYhTrbA7AoozsXURA3QDIX0YBc.roa (hash: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y=)
                          28: wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa (hash: cE8692Fre2vK3h5ac8/c3SU5xGg2cihxJaN+/QF2FJY=)
                          29: winPsxerfHGMkrLr9l0fOmV2KSs.roa (hash: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E=)
                          30: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (hash: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:39:1f:1d:98:46:29:5e:95:c7:38:0a:1e:42:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
        Validity
            Not Before: May 13 09:01:54 2026 GMT
            Not After : May 14 09:01:54 2026 GMT
        Subject: CN=a93feac22d41f0a43132d1b7ca6e9333fe15c991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:30:21:34:0c:81:c6:cb:c7:30:68:1e:ea:
                    6a:70:f7:61:84:09:51:95:6e:74:0e:00:84:79:6d:
                    33:ae:ce:91:b6:f7:e8:5d:1f:81:49:b0:ea:e0:90:
                    f7:b0:cb:5e:a8:22:30:41:a3:2d:4c:d2:c2:4d:f3:
                    5c:dd:6c:1b:db:36:b5:6c:de:98:81:f8:5f:f9:29:
                    d4:56:bf:84:f9:32:d9:da:b1:80:71:8d:0e:ee:73:
                    d9:42:86:1c:9a:97:e7:e2:b2:f1:6e:44:95:d8:fd:
                    55:01:2b:81:53:06:4a:b3:68:a1:40:15:5b:92:e6:
                    d8:64:b9:13:a6:eb:35:7f:33:7e:00:72:bc:14:de:
                    c3:21:de:4a:50:cf:99:f6:e0:a2:1f:05:b5:74:6b:
                    8a:e2:67:3b:6a:f3:95:25:01:0d:c7:5e:69:c9:fc:
                    34:df:1c:2f:9a:2e:0f:4b:31:f0:d8:7b:f6:9b:3a:
                    77:e8:62:ea:ae:ef:a1:4c:9b:04:42:7c:a4:5a:7c:
                    e7:1a:50:aa:a7:46:83:71:66:25:cf:98:18:a3:98:
                    87:ec:44:3a:6e:14:3e:5b:c8:1a:6d:d8:b2:ee:8d:
                    19:81:03:bb:7d:5a:ed:ad:32:04:84:ec:f3:2f:ab:
                    56:03:bd:77:01:d8:f3:a0:c6:9f:07:cd:7f:d4:61:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3F:EA:C2:2D:41:F0:A4:31:32:D1:B7:CA:6E:93:33:FE:15:C9:91
            X509v3 Authority Key Identifier:
                keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:97:24:72:79:54:e9:b9:c5:66:4d:23:b1:9d:57:27:61:3e:
         c5:1f:c0:62:5f:4b:1d:b1:50:40:90:91:61:30:f5:86:b0:9b:
         f0:fe:24:dc:44:3f:cf:3c:0d:22:73:bb:32:30:17:c0:38:63:
         c1:e6:2a:96:3a:65:f1:5a:01:2c:cb:9c:4d:27:08:ff:8f:d4:
         13:d8:50:0a:23:73:6d:fc:d4:c9:3b:d2:75:1a:3f:d1:3a:55:
         c4:20:e8:4a:7a:1e:cb:88:94:27:36:87:9b:7f:ed:c2:62:83:
         98:0b:06:49:91:d1:36:33:08:c1:28:69:cd:92:38:05:77:6a:
         e5:02:1d:67:bc:a5:c8:5a:02:90:96:53:11:7d:0f:94:77:49:
         76:ed:7b:9c:d7:24:79:fd:ce:f9:5e:41:bb:5c:9d:9a:21:ca:
         1b:4f:3a:2a:a0:2b:3f:7d:e8:79:5d:87:35:b8:4c:d9:fa:8f:
         75:d8:b0:41:f8:86:5e:a7:00:ad:4c:7a:b4:6b:a9:b4:d3:60:
         0b:93:40:2c:4c:ff:88:40:f9:e2:ec:b2:f8:86:09:fc:2e:9f:
         c1:b0:6b:a7:4d:79:9d:9f:96:e1:ee:b5:9d:28:89:7f:91:42:
         56:16:8b:28:61:fb:f4:dc:1d:01:5f:0a:74:d8:79:3c:ce:75:
         0e:2e:91:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkjkfHZhGKV6VxzgKHkIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwNTEzMDkwMTU0WhcNMjYwNTE0MDkwMTU0WjAzMTEwLwYDVQQD
EyhhOTNmZWFjMjJkNDFmMGE0MzEzMmQxYjdjYTZlOTMzM2ZlMTVjOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoswITQMgcbLxzBoHupqcPdhhAlR
lW50DgCEeW0zrs6RtvfoXR+BSbDq4JD3sMteqCIwQaMtTNLCTfNc3Wwb2za1bN6Y
gfhf+SnUVr+E+TLZ2rGAcY0O7nPZQoYcmpfn4rLxbkSV2P1VASuBUwZKs2ihQBVb
kubYZLkTpus1fzN+AHK8FN7DId5KUM+Z9uCiHwW1dGuK4mc7avOVJQENx15pyfw0
3xwvmi4PSzHw2Hv2mzp36GLqru+hTJsEQnykWnznGlCqp0aDcWYlz5gYo5iH7EQ6
bhQ+W8gabdiy7o0ZgQO7fVrtrTIEhOzzL6tWA713AdjzoMafB81/1GGRnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk/6sItQfCkMTLRt8pukzP+FcmRMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJckcnlU
6bnFZk0jsZ1XJ2E+xR/AYl9LHbFQQJCRYTD1hrCb8P4k3EQ/zzwNInO7MjAXwDhj
weYqljpl8VoBLMucTScI/4/UE9hQCiNzbfzUyTvSdRo/0TpVxCDoSnoey4iUJzaH
m3/twmKDmAsGSZHRNjMIwShpzZI4BXdq5QIdZ7ylyFoCkJZTEX0PlHdJdu17nNck
ef3O+V5Bu1ydmiHKG086KqArP33oeV2HNbhM2fqPddiwQfiGXqcArUx6tGuptNNg
C5NALEz/iED54uyy+IYJ/C6fwbBrp015nZ+W4e61nSiJf5FCVhaLKGH79NwdAV8K
dNh5PM51Di6Rvw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:21:08 2026 by rpki-client