Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File:                     livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier:          Sx/b3NGzjyLqBlAYcxRxMc9+exUzZrIz4E02/B+kj+g=
Subject key identifier:   D7:E0:2F:43:F9:13:E2:2C:73:40:A4:11:D9:4D:2C:F5:98:C8:98:C3
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer:       /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial:       0199FB7CE5D62F498003D569864DE95A7AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number:          9D
Signing time:             Sun 19 Oct 2025 08:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:30 +0000
Files and hashes:         1: 4GRJUR4vXXkbJXxmZNO0pAVN8no.roa (hash: t1gQYMmTlpYmC9Bxb3uLcdtIlModthZLt22QTmHtD3g=)
                          2: 4s9-2JVtP2giu2Io6GHUsZ22KZk.roa (hash: 7KfJCLS1AXq205sjqon7m1iopfbESWbrVFHuyd5D9Ss=)
                          3: 6aGDqB6zTTZjCBfP5YRuloy9Ado.roa (hash: Jsw6J2dvplRCWXPLk7WA0FiHFQe7TiXPeaMlIBY4918=)
                          4: DxRHYi3CQd120f4p2OEmONB-q_k.roa (hash: Nm9YPsn3d6IoILadqnF7/U4vjvEcTo5EZcDoiQfCWNI=)
                          5: Gky3WM6DOJSU_16giRDWJ41eEKA.roa (hash: TnCpd95H/6J2xeSLtHFEVqsbxWmaOkgox5gtfxtQD9c=)
                          6: HRO3d0vD1MhFRdSoqWboZsCNWbw.roa (hash: Ekxu6IECplVn4BvNsNV7ylSUkSXZ8qjRVaCHFN/54ms=)
                          7: IJwA86yfWxasLC0gUp34HsSsHj0.roa (hash: +RLIosYADN+7XpaLxN/SpQe2XkwdsGukjbGqH12+o3I=)
                          8: Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa (hash: 0UkVNBd7l+wwHGDngk+/nfAM3QJ5XIIOAEADr4vxqyU=)
                          9: MxbtV4H3HXjk-oO5rNhIlq8r_iA.roa (hash: fkR1GvOY79D7vr9fC1VGk695rRCxeiV52LMHL4NiGXs=)
                          10: U1SDk5T7p6egxIx1JRfuo7OCdls.roa (hash: iyjWX/m6G5Id9Wvaphs/kB6FqhArm6Rvb9cBh2phwZ0=)
                          11: VOcEF0f7WNo4vVl5qC3aLFDgO20.roa (hash: xaWkvZwH2pynHeJG2I3um3vV/6zvwD6eFp9XmnidXp0=)
                          12: VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa (hash: 1R0P6gMaK3bQlWdyGdOcpLYDnNLujqwH2yF60BoEkOc=)
                          13: YGSNOkCocvx3kovgnO_-l9-zdRc.roa (hash: BK+U8p9wzCoZ1b9hp3xe8wF3PMuEUE1T98uyrS2lHGI=)
                          14: b6FcRNX7XsUjrp_KvsdQmPN64w8.roa (hash: GVPLJgY6O9ecyKKO4fYSe4zA+PN70li9WJFB02NFBmM=)
                          15: b7R6JAQa5S0jjYjErJyVA7ERQUs.roa (hash: ZT6m5lWjg9gU85ZTooiiGt4AAwwJFXpnhBt+b7/N/wk=)
                          16: bOCPMjkzIIwu9o10H6xAzbzLc_8.roa (hash: vzYpLCHM/3xufjlydAQ6DbR3bMECUWkMtTER/abGULc=)
                          17: cZLUbnXph6px0pIOSmBIdm0mNFY.roa (hash: x+tZe4exoMlRIARp1hM14I6q6eMLv7Hjtp7jv8g/fpo=)
                          18: cf6unF5sRhvMUJu4is7AhHXyTKU.roa (hash: IeWKY13tSm6lq+2DmwxVBeNKG99Tav+Q0fSea/lBCZA=)
                          19: d-rcyBh3x14DWt8BVItVhYUTglU.roa (hash: BxFvCRSBNVXYwKz1w18WGBJdtnFiBFx2s6gn0dZvkxI=)
                          20: fTdsyBaVrS554TN2UN0VhGeNDls.roa (hash: sXUJowWDLg4BNu9L4rAYmrodb2Pa6x55JbRF2HjEfVM=)
                          21: i0m66lJKEwjku8K2qLBAQ_oh0Tw.roa (hash: a3BdrMT+vJr+Ngk7fHWk5SVBa8Ekf3aaoW+fXRjcfLE=)
                          22: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: AEyreAbEYGqR/xKctl3fYe3Q0ofQQK2+az+/bQDdogM=)
                          23: pBHHVqfa0x1Imx6T_GwMeahEWbo.roa (hash: Xxb+HPPyDbTmwlC2rHka8smyo3kx9QGy/l07UqH4+ZY=)
                          24: pPvRrv62Pf5A4eU-XGG6b4c1j3g.roa (hash: MwEScQeG4P5xyORfThXLXKRA8rkHJTgnjI9OHulIxQM=)
                          25: qC9pupdeKTbRm5arViYO-LZXEe0.roa (hash: 1rSDWuh/2Zz+Ot3z1ajd4SQbW5q3+QfeV8TxLGUjh2Q=)
                          26: rNDX_Wz414jpuXAPR-1sBq-LUR0.roa (hash: CBbmt9SPHuRy5yKBLNwl9qwTWuBK44yED2+gvGIuJzw=)
                          27: yCBOPaS01iKvqQk_YMaVaTTz234.roa (hash: e9QjMPbYzYYjfH2EZu8+PaBSsGZJBC9gvfRDCWljrsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e5:d6:2f:49:80:03:d5:69:86:4d:e9:5a:7a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
        Validity
            Not Before: Oct 19 08:01:30 2025 GMT
            Not After : Oct 20 08:01:30 2025 GMT
        Subject: CN=d7e02f43f913e22c7340a411d94d2cf598c898c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:27:66:2e:d7:5d:6e:a3:bf:13:90:e8:27:
                    9d:5a:b8:03:1e:9f:73:00:93:c7:bb:88:d3:cc:57:
                    a3:02:1c:e2:1c:7d:3a:f0:67:84:38:6c:8b:15:36:
                    d0:94:7b:8e:e0:6c:e9:f6:55:d0:34:bd:90:08:41:
                    ac:a0:e5:4e:97:37:87:7e:57:8d:cd:08:d9:e5:f7:
                    fa:51:69:39:28:2d:27:78:b0:e7:dc:41:ab:f0:f7:
                    52:50:eb:07:df:7f:f5:ad:f0:6a:5c:6b:aa:e8:06:
                    b8:e7:0c:0a:1c:fc:40:a7:dd:9d:81:3f:a8:eb:cb:
                    98:38:41:d2:f5:d9:5d:6f:34:42:0c:90:da:50:91:
                    68:a4:01:d0:1f:b7:f0:e6:7a:01:18:df:7d:d7:af:
                    4f:14:17:03:9e:1d:3d:1f:6f:f4:cc:3c:69:82:82:
                    70:7c:42:e7:23:88:4c:3e:00:a9:79:4e:fe:e9:8a:
                    4f:f3:48:63:72:f3:a9:fb:25:a1:70:d4:6e:6d:5f:
                    76:26:2a:09:35:8b:ee:d8:db:69:ab:12:b1:1d:1d:
                    1f:11:62:51:5a:fb:46:dd:5d:58:c7:29:f6:ce:e2:
                    8c:68:54:b1:e2:b7:b3:11:c8:1d:da:66:ed:fc:43:
                    ae:b0:f8:a8:aa:c3:2b:e6:fd:0e:f7:c5:72:39:bd:
                    6b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:2F:43:F9:13:E2:2C:73:40:A4:11:D9:4D:2C:F5:98:C8:98:C3
            X509v3 Authority Key Identifier:
                keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:9e:3f:d7:60:7b:47:ba:fb:30:17:62:be:95:f8:c9:ad:
         5a:34:27:c0:18:3b:aa:17:b7:ff:91:d2:21:e6:a3:54:8a:a8:
         ae:64:37:62:eb:5a:7c:6c:63:f1:bf:ad:49:4a:e7:81:b0:2d:
         5b:e2:00:db:4d:67:cb:80:84:23:1a:ff:e3:64:ed:e3:03:fc:
         b1:85:b3:0a:eb:de:29:15:3d:1c:5e:9b:25:42:14:d6:32:63:
         62:af:b7:64:eb:67:15:1c:e4:46:44:64:4e:84:86:49:c0:07:
         62:77:6d:88:74:5c:85:c9:87:74:12:cb:18:3b:1b:ed:c4:a2:
         a3:c8:4d:a0:51:b3:56:74:e3:b8:d3:7c:19:36:fe:09:3f:a9:
         8b:0b:c7:1f:ce:fb:f6:27:0a:3b:df:48:45:47:92:b7:a0:64:
         92:01:0d:12:49:68:aa:cd:41:36:2f:0e:ff:fe:8b:03:f4:19:
         c3:d6:bd:44:c3:e0:02:78:88:66:6f:0f:ce:4a:5e:87:db:1d:
         ce:8d:fe:02:87:d8:7f:10:88:f1:7c:c8:c4:63:9e:99:36:13:
         e0:3c:6f:e5:0a:e5:3d:f6:df:9e:1c:90:4f:5e:67:59:b8:72:
         98:4f:46:4e:7a:8d:4b:dd:86:ec:5b:ca:0b:04:b9:19:5e:34:
         92:23:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:56 2025 by rpki-client