Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File:                     livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier:          kVSGfkS7KoD3US8O8mdLBJrRUaw1ADp3ohULBr3dM+0=
Subject key identifier:   8F:5E:B0:B5:53:46:26:67:4A:45:BF:DC:CF:C6:9C:E5:C7:72:C0:1D
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer:       /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial:       019CAFED0BE632FA42A62AC4804803FA4753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number:          0208
Signing time:             Mon 02 Mar 2026 19:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:13 +0000
Files and hashes:         1: 1-8B1HJiBNZt2mLa484DWmBMQSFU.roa (hash: oP/xM98/RPfu/5TqpnGJmxNimUeay7qqliPVccblTpQ=)
                          2: 1-Qeq6hhgmsnV9dwc9CM4x2DEp_o.roa (hash: hqKeYIw+K+XvdJwrb3vT/mCOwu7/uLLr532kYdiZTtk=)
                          3: 1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa (hash: ZY5qyuJzGWTMv1saHpay6f1Y6Lu8rpI6Q1Iz7J18iUs=)
                          4: 1-aH8x_etPHb7N5lZxH2EJ06tejk.roa (hash: 4D8bZL+jOKZy7BZQ0lGHl4mnZyTD+EOB54zTxO+almE=)
                          5: 2417X7FoOqz6CeouHbdWxlmT2oc.roa (hash: 2RqyI1mU42Ad8DLLnv9aYk4kIOqsmsu61g8bfpa34DU=)
                          6: 4qUkTKGm6pGhy2LKyNsE9JLEu9s.roa (hash: n8RFY9wAkRTw92IGWmg3oXl6nw20aGymGHPFNpvZX/Q=)
                          7: 7pVh0pZTEc1E6xJL3InhvltDz2s.roa (hash: MmrKH/vPG61mnh+lBIkFizSc2omHNbwFSetlTBexxRo=)
                          8: C9KkvhzLL551ZPbXxx1FoBbqXf4.roa (hash: UeCszyUVIZvVTu9aAl83hlN/RDOqN4hXz1ho/Fs2ISc=)
                          9: DiqaDwrLCUvrlPkP-0eihteOneY.roa (hash: TuifAr8s69JWfjPp9b5i4tGf2xSWW7Ct4OGJ2sDmRwg=)
                          10: E7dX5V4ZZyskIK6Sp-YQmDZAzFk.roa (hash: 8IC9Nubg/5Jpt50f9l4q2zuXWjF7ZZkCNpKaDWsctR0=)
                          11: FL-mLisikCniX8ptzn2CQkY1EP4.roa (hash: p99XPLiTd+DQjXuhkl7h+/enU6blE89NaEQgomxDU3g=)
                          12: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (hash: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=)
                          13: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (hash: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI=)
                          14: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (hash: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E=)
                          15: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (hash: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k=)
                          16: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (hash: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=)
                          17: MYydd3R4Y9vwrgnnxpOHm9Sf_mU.roa (hash: 4CrwudFLN29ynwGmSG8gQhxSRQhVd7AqzZeF9S6O/UU=)
                          18: QLEEsVMAnp8yBuh1hcBg5UTekXg.roa (hash: rhepJz5uuPekXjrE3FZCBDFMEp//GBVxeS0QL8Wrygc=)
                          19: U0Zw7nxZcY6li2EowQpo7GWvwRw.roa (hash: W83oCNCWNdwCZPqO8EuYCWEQ9TVK20LIVtEgGqY7xpE=)
                          20: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (hash: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=)
                          21: YZbCezesixGK-5MW0VqY6oAGzr8.roa (hash: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s=)
                          22: aP6TZ2IqLVgF0VWuJ9T3yCaCqpk.roa (hash: j6iM/mIBztj8GmnOe76w3rlLqYEbhzCf5n/E02uuQng=)
                          23: elTx126yBsA7dCzExkxDADRceX0.roa (hash: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw=)
                          24: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (hash: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE=)
                          25: lUYFhgrgYwzzCnla_INuymemYAw.roa (hash: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=)
                          26: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: T1jOAdmP8Sc7cZknceWZF/xxusuvhWE4VqM4EOc23Q8=)
                          27: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (hash: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4=)
                          28: raYhTrbA7AoozsXURA3QDIX0YBc.roa (hash: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y=)
                          29: winPsxerfHGMkrLr9l0fOmV2KSs.roa (hash: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E=)
                          30: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (hash: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ed:0b:e6:32:fa:42:a6:2a:c4:80:48:03:fa:47:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
        Validity
            Not Before: Mar  2 19:01:13 2026 GMT
            Not After : Mar  3 19:01:13 2026 GMT
        Subject: CN=8f5eb0b5534626674a45bfdccfc69ce5c772c01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:4a:07:2a:55:ff:42:4d:16:cf:77:f1:21:
                    4a:1b:b3:6e:9b:50:10:a0:1c:83:a2:09:6b:b4:a8:
                    05:33:46:b2:74:f5:52:a2:a1:ed:70:bc:ef:e1:ca:
                    2b:d6:06:93:fb:a4:db:cb:12:0e:40:a4:4c:ee:f1:
                    ed:05:d5:14:c7:7a:23:84:76:db:99:06:81:aa:77:
                    87:73:ea:1f:e4:99:55:78:7d:d1:0e:09:25:17:af:
                    3c:6d:fc:e5:9e:10:cc:1b:b6:73:c2:7a:f0:84:22:
                    85:bf:13:65:19:2b:16:41:46:17:e0:37:b7:af:54:
                    fe:36:70:25:86:89:0d:3e:bc:21:37:1d:55:af:9c:
                    e9:f5:63:f7:80:a6:ee:ee:d2:f2:8b:f9:90:40:7b:
                    99:ea:1d:9b:61:ce:22:f4:e0:db:61:0b:56:bd:c0:
                    12:a2:eb:8e:f2:20:b6:85:44:d1:ec:61:fe:9e:77:
                    64:82:48:31:d5:34:36:e9:eb:df:22:6b:d4:ec:44:
                    5a:e3:cc:03:70:0b:91:76:42:0e:91:31:b0:d5:a6:
                    e3:0d:56:c5:c0:bc:0b:8b:34:3e:ae:f0:f7:88:10:
                    c6:7e:4f:8e:ff:6e:8a:c1:52:d6:36:1c:83:1d:d7:
                    f3:d9:5a:25:7c:f9:f7:54:71:9a:a0:dd:08:42:b6:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:B0:B5:53:46:26:67:4A:45:BF:DC:CF:C6:9C:E5:C7:72:C0:1D
            X509v3 Authority Key Identifier:
                keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d4:e7:f8:f7:59:fe:06:62:63:5b:c1:43:29:e6:a7:1e:79:
         a1:25:0b:c0:7f:f8:e7:7f:0d:23:49:20:33:e7:99:00:81:52:
         d9:a5:6b:32:5f:b2:5e:4f:e3:18:90:c3:d0:8f:14:18:32:e9:
         ec:f0:70:da:61:bf:8a:bd:69:7f:54:e2:96:e6:2b:8c:8a:f5:
         76:bb:93:0f:7b:68:88:9c:db:d1:c8:d2:e4:d3:5e:c7:b4:6d:
         6e:d5:e4:22:e2:e0:df:c7:cc:c3:14:69:7d:86:90:98:84:6b:
         92:ca:be:62:04:70:e3:77:e2:82:7a:b6:0d:ef:76:20:76:f4:
         a4:52:67:32:0a:ba:09:84:40:46:88:c1:dc:41:83:04:f1:7a:
         d8:a3:37:a9:94:1e:c1:a8:b6:fa:6b:87:88:2c:dd:67:32:6d:
         10:2f:87:35:c6:b3:44:d8:fa:b7:2d:d2:b6:47:9e:83:c9:56:
         da:cb:56:e9:94:dd:dc:5e:23:97:6b:ca:44:2b:80:b0:a5:2c:
         8e:2e:5a:a7:09:cd:f6:e8:b9:fb:37:93:5b:bf:11:58:02:8f:
         5f:1e:e2:d6:79:6e:b1:1c:3f:07:59:f9:2c:ab:78:61:ef:e4:
         16:a8:dc:8c:7d:eb:3a:95:43:2b:6d:1f:74:fd:3e:18:e1:51:
         8f:4a:55:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7QvmMvpCpirEgEgD+kdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwMzAyMTkwMTEzWhcNMjYwMzAzMTkwMTEzWjAzMTEwLwYDVQQD
Eyg4ZjVlYjBiNTUzNDYyNjY3NGE0NWJmZGNjZmM2OWNlNWM3NzJjMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuFKBypV/0JNFs938SFKG7Num1AQ
oByDoglrtKgFM0aydPVSoqHtcLzv4cor1gaT+6TbyxIOQKRM7vHtBdUUx3ojhHbb
mQaBqneHc+of5JlVeH3RDgklF688bfzlnhDMG7ZzwnrwhCKFvxNlGSsWQUYX4De3
r1T+NnAlhokNPrwhNx1Vr5zp9WP3gKbu7tLyi/mQQHuZ6h2bYc4i9ODbYQtWvcAS
ouuO8iC2hUTR7GH+nndkgkgx1TQ26evfImvU7ERa48wDcAuRdkIOkTGw1abjDVbF
wLwLizQ+rvD3iBDGfk+O/26KwVLWNhyDHdfz2VolfPn3VHGaoN0IQrYwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9esLVTRiZnSkW/3M/GnOXHcsAdMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENTn+PdZ
/gZiY1vBQynmpx55oSULwH/4538NI0kgM+eZAIFS2aVrMl+yXk/jGJDD0I8UGDLp
7PBw2mG/ir1pf1TiluYrjIr1druTD3toiJzb0cjS5NNex7RtbtXkIuLg38fMwxRp
fYaQmIRrksq+YgRw43fignq2De92IHb0pFJnMgq6CYRARojB3EGDBPF62KM3qZQe
wai2+muHiCzdZzJtEC+HNcazRNj6ty3Stkeeg8lW2stW6ZTd3F4jl2vKRCuAsKUs
ji5apwnN9ui5+zeTW78RWAKPXx7i1nlusRw/B1n5LKt4Ye/kFqjcjH3rOpVDK20f
dP0+GOFRj0pVEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:10 2026 by rpki-client