Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File:                     livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier:          oF8VYzDPZwK1tHeHaDwkoFjPciwjjDgwLi6N4Q22UDU=
Subject key identifier:   E5:FC:2E:D7:01:67:A8:A1:CE:B3:9A:D7:19:B4:06:25:78:45:35:DC
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer:       /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial:       019DB27E072588C9DCE84A789DB8965B85CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number:          028E
Signing time:             Wed 22 Apr 2026 00:01:36 +0000
Manifest this update:     Wed 22 Apr 2026 00:01:36 +0000
Manifest next update:     Thu 23 Apr 2026 00:01:36 +0000
Files and hashes:         1: 1-8B1HJiBNZt2mLa484DWmBMQSFU.roa (hash: oP/xM98/RPfu/5TqpnGJmxNimUeay7qqliPVccblTpQ=)
                          2: 1-Qeq6hhgmsnV9dwc9CM4x2DEp_o.roa (hash: hqKeYIw+K+XvdJwrb3vT/mCOwu7/uLLr532kYdiZTtk=)
                          3: 1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa (hash: ZY5qyuJzGWTMv1saHpay6f1Y6Lu8rpI6Q1Iz7J18iUs=)
                          4: 1-aH8x_etPHb7N5lZxH2EJ06tejk.roa (hash: 4D8bZL+jOKZy7BZQ0lGHl4mnZyTD+EOB54zTxO+almE=)
                          5: 4qUkTKGm6pGhy2LKyNsE9JLEu9s.roa (hash: n8RFY9wAkRTw92IGWmg3oXl6nw20aGymGHPFNpvZX/Q=)
                          6: 7pVh0pZTEc1E6xJL3InhvltDz2s.roa (hash: MmrKH/vPG61mnh+lBIkFizSc2omHNbwFSetlTBexxRo=)
                          7: C9KkvhzLL551ZPbXxx1FoBbqXf4.roa (hash: UeCszyUVIZvVTu9aAl83hlN/RDOqN4hXz1ho/Fs2ISc=)
                          8: DiqaDwrLCUvrlPkP-0eihteOneY.roa (hash: TuifAr8s69JWfjPp9b5i4tGf2xSWW7Ct4OGJ2sDmRwg=)
                          9: E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa (hash: 8IC9Nubg/5Jpt50f9l4q2zuXWjF7ZZkCNpKaDWsctR0=)
                          10: FL-mLisikCniX8ptzn2CQkY1EP4.roa (hash: p99XPLiTd+DQjXuhkl7h+/enU6blE89NaEQgomxDU3g=)
                          11: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (hash: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=)
                          12: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (hash: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI=)
                          13: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (hash: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E=)
                          14: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (hash: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k=)
                          15: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (hash: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=)
                          16: MYydd3R4Y9vwrgnnxpOHm9Sf_mU.roa (hash: 4CrwudFLN29ynwGmSG8gQhxSRQhVd7AqzZeF9S6O/UU=)
                          17: QLEEsVMAnp8yBuh1hcBg5UTekXg.roa (hash: rhepJz5uuPekXjrE3FZCBDFMEp//GBVxeS0QL8Wrygc=)
                          18: U0Zw7nxZcY6li2EowQpo7GWvwRw.roa (hash: W83oCNCWNdwCZPqO8EuYCWEQ9TVK20LIVtEgGqY7xpE=)
                          19: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (hash: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=)
                          20: YZbCezesixGK-5MW0VqY6oAGzr8.roa (hash: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s=)
                          21: aP6TZ2IqLVgF0VWuJ9T3yCaCqpk.roa (hash: j6iM/mIBztj8GmnOe76w3rlLqYEbhzCf5n/E02uuQng=)
                          22: elTx126yBsA7dCzExkxDADRceX0.roa (hash: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw=)
                          23: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (hash: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE=)
                          24: lUYFhgrgYwzzCnla_INuymemYAw.roa (hash: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=)
                          25: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: 5qwINrWeZDsGcMXwxW5ryQlgO/NUV20IQZ1nha9f2rg=)
                          26: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (hash: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4=)
                          27: raYhTrbA7AoozsXURA3QDIX0YBc.roa (hash: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y=)
                          28: wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa (hash: cE8692Fre2vK3h5ac8/c3SU5xGg2cihxJaN+/QF2FJY=)
                          29: winPsxerfHGMkrLr9l0fOmV2KSs.roa (hash: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E=)
                          30: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (hash: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:7e:07:25:88:c9:dc:e8:4a:78:9d:b8:96:5b:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
        Validity
            Not Before: Apr 22 00:01:36 2026 GMT
            Not After : Apr 23 00:01:36 2026 GMT
        Subject: CN=e5fc2ed70167a8a1ceb39ad719b40625784535dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:92:57:37:b3:4e:03:48:29:3f:78:64:93:
                    c2:7c:71:13:cc:5a:9e:6e:75:88:aa:fd:82:f7:44:
                    48:61:2b:c4:e7:18:3b:96:dc:7e:de:b8:dc:1c:b8:
                    cb:b7:0a:b0:f6:ed:cd:61:e5:bf:33:62:f0:ae:0a:
                    cf:b3:f6:65:9b:49:b8:10:70:ac:13:87:e3:c4:18:
                    c3:32:06:6c:14:df:c8:19:cc:21:e6:58:ea:1c:71:
                    3f:ff:4c:31:9e:ac:4e:2c:b9:c7:3c:d5:62:f6:0b:
                    05:b3:4a:47:80:62:3a:61:a2:d7:3c:f1:98:4a:cb:
                    54:58:3a:1a:13:0c:ab:ab:88:96:24:30:74:c0:72:
                    32:bf:8d:9a:ec:32:c2:92:66:61:82:ec:41:b8:3e:
                    1a:0e:4d:f7:ee:3b:e6:bf:bc:12:4c:fc:27:8e:70:
                    ec:96:28:9e:8d:69:55:be:85:97:2c:85:fb:72:3c:
                    43:cd:e5:25:f2:e0:24:c2:f4:d9:d7:83:d3:fb:83:
                    5d:aa:a5:17:9a:b6:0f:85:e7:87:4a:c7:ca:48:39:
                    9a:45:c0:92:d5:78:02:fa:3d:5f:4c:8d:02:a6:62:
                    41:f4:b3:5a:71:00:6f:29:d6:06:b1:f8:8b:6e:a7:
                    8f:ae:10:e0:0c:89:ee:af:56:68:7c:cb:33:fc:96:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:2E:D7:01:67:A8:A1:CE:B3:9A:D7:19:B4:06:25:78:45:35:DC
            X509v3 Authority Key Identifier:
                keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:2b:19:03:6c:dc:93:18:9d:06:ed:c4:db:10:a6:44:b9:
         16:a8:49:19:b9:1a:7e:cf:fa:1a:73:fd:0a:32:b4:df:12:97:
         9f:69:23:79:9c:ee:d8:66:39:dd:c8:39:28:28:a9:89:3a:50:
         8a:7f:ca:0a:de:9b:e8:df:51:56:39:f5:b2:1f:54:b5:4b:d7:
         03:39:4e:44:cf:62:62:64:5f:3a:9e:67:1c:84:92:3e:75:fe:
         b8:94:1c:2c:0d:45:1c:8f:1c:5b:01:79:f8:56:09:ca:9a:9d:
         84:0d:e4:e7:89:56:9a:89:68:59:7f:79:de:09:36:62:4d:2e:
         24:df:3a:cc:a0:ac:dc:11:5b:a3:69:f1:11:dc:f5:94:5a:d2:
         91:60:89:27:9a:b8:e5:7f:e2:08:e1:d6:59:85:9f:2f:8a:21:
         7f:40:d0:24:73:7a:6e:0f:48:0e:2d:95:a1:1a:b6:e4:3b:6a:
         28:26:92:78:ad:46:b3:a6:65:e4:81:fd:60:93:8c:04:10:ff:
         51:54:b8:4d:54:58:2a:ee:ba:b1:ea:3c:35:90:fa:8a:e6:39:
         d1:f2:5a:87:3c:72:bd:81:27:d9:7a:90:a5:b9:ef:f5:65:85:
         8e:8c:1e:2e:f6:c6:70:c8:5c:b7:ab:8f:86:12:f1:26:28:70:
         96:0e:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:46:23 2026 by rpki-client