Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File:                     livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier:          aJ3pd4lEl/zp+OfIzsVQ87IHf8vEvnJK7/NYdVvKdzY=
Subject key identifier:   41:82:A1:A3:1A:DB:BC:FA:A2:73:78:72:84:A9:E6:45:EC:73:10:EF
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer:       /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial:       019A4F998446EABAD492ABE71929162E89C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number:          CB
Signing time:             Tue 04 Nov 2025 16:00:52 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:52 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:52 +0000
Files and hashes:         1: 4GRJUR4vXXkbJXxmZNO0pAVN8no.roa (hash: t1gQYMmTlpYmC9Bxb3uLcdtIlModthZLt22QTmHtD3g=)
                          2: 4s9-2JVtP2giu2Io6GHUsZ22KZk.roa (hash: 7KfJCLS1AXq205sjqon7m1iopfbESWbrVFHuyd5D9Ss=)
                          3: 6aGDqB6zTTZjCBfP5YRuloy9Ado.roa (hash: Jsw6J2dvplRCWXPLk7WA0FiHFQe7TiXPeaMlIBY4918=)
                          4: DxRHYi3CQd120f4p2OEmONB-q_k.roa (hash: Nm9YPsn3d6IoILadqnF7/U4vjvEcTo5EZcDoiQfCWNI=)
                          5: Gky3WM6DOJSU_16giRDWJ41eEKA.roa (hash: TnCpd95H/6J2xeSLtHFEVqsbxWmaOkgox5gtfxtQD9c=)
                          6: H9PIBfamuPDglIKfIi9ylpcOFCc.roa (hash: ps2X1AK8Sg9a9/WTOjGyw4ack7+S82g3PuLXzJjbXl4=)
                          7: IJwA86yfWxasLC0gUp34HsSsHj0.roa (hash: +RLIosYADN+7XpaLxN/SpQe2XkwdsGukjbGqH12+o3I=)
                          8: IwcvBx-ASGFRKoNPR5EmHkKrknI.roa (hash: VuyAh+j+gl0O2sR33CKHi3ggoXkuXavqSNlbaqQ1K80=)
                          9: Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa (hash: 0UkVNBd7l+wwHGDngk+/nfAM3QJ5XIIOAEADr4vxqyU=)
                          10: MxbtV4H3HXjk-oO5rNhIlq8r_iA.roa (hash: fkR1GvOY79D7vr9fC1VGk695rRCxeiV52LMHL4NiGXs=)
                          11: U1SDk5T7p6egxIx1JRfuo7OCdls.roa (hash: iyjWX/m6G5Id9Wvaphs/kB6FqhArm6Rvb9cBh2phwZ0=)
                          12: VOcEF0f7WNo4vVl5qC3aLFDgO20.roa (hash: xaWkvZwH2pynHeJG2I3um3vV/6zvwD6eFp9XmnidXp0=)
                          13: VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa (hash: 1R0P6gMaK3bQlWdyGdOcpLYDnNLujqwH2yF60BoEkOc=)
                          14: YEqOSJW-V1IZRaR5N4ESa8q35jQ.roa (hash: 1CNo3YNoGQNKYUP1rnUKC2ogI284faRiMvZbH8z4zoY=)
                          15: YGSNOkCocvx3kovgnO_-l9-zdRc.roa (hash: BK+U8p9wzCoZ1b9hp3xe8wF3PMuEUE1T98uyrS2lHGI=)
                          16: b6FcRNX7XsUjrp_KvsdQmPN64w8.roa (hash: GVPLJgY6O9ecyKKO4fYSe4zA+PN70li9WJFB02NFBmM=)
                          17: b7R6JAQa5S0jjYjErJyVA7ERQUs.roa (hash: ZT6m5lWjg9gU85ZTooiiGt4AAwwJFXpnhBt+b7/N/wk=)
                          18: bOCPMjkzIIwu9o10H6xAzbzLc_8.roa (hash: vzYpLCHM/3xufjlydAQ6DbR3bMECUWkMtTER/abGULc=)
                          19: cZLUbnXph6px0pIOSmBIdm0mNFY.roa (hash: x+tZe4exoMlRIARp1hM14I6q6eMLv7Hjtp7jv8g/fpo=)
                          20: cf6unF5sRhvMUJu4is7AhHXyTKU.roa (hash: IeWKY13tSm6lq+2DmwxVBeNKG99Tav+Q0fSea/lBCZA=)
                          21: d-rcyBh3x14DWt8BVItVhYUTglU.roa (hash: BxFvCRSBNVXYwKz1w18WGBJdtnFiBFx2s6gn0dZvkxI=)
                          22: fTdsyBaVrS554TN2UN0VhGeNDls.roa (hash: sXUJowWDLg4BNu9L4rAYmrodb2Pa6x55JbRF2HjEfVM=)
                          23: i0m66lJKEwjku8K2qLBAQ_oh0Tw.roa (hash: a3BdrMT+vJr+Ngk7fHWk5SVBa8Ekf3aaoW+fXRjcfLE=)
                          24: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: jMbVV2/XeSZDVASYRWSLjQTyDepf217HJDmMZHXAEnQ=)
                          25: pBHHVqfa0x1Imx6T_GwMeahEWbo.roa (hash: Xxb+HPPyDbTmwlC2rHka8smyo3kx9QGy/l07UqH4+ZY=)
                          26: pPvRrv62Pf5A4eU-XGG6b4c1j3g.roa (hash: MwEScQeG4P5xyORfThXLXKRA8rkHJTgnjI9OHulIxQM=)
                          27: qC9pupdeKTbRm5arViYO-LZXEe0.roa (hash: 1rSDWuh/2Zz+Ot3z1ajd4SQbW5q3+QfeV8TxLGUjh2Q=)
                          28: rNDX_Wz414jpuXAPR-1sBq-LUR0.roa (hash: CBbmt9SPHuRy5yKBLNwl9qwTWuBK44yED2+gvGIuJzw=)
                          29: wH79H7VLCdN5YtP0LxlWGgP-7wY.roa (hash: Y7802HKFTg1oTxqjc4QwPKue1f3pDtAL5PzfBXV2MTY=)
                          30: yCBOPaS01iKvqQk_YMaVaTTz234.roa (hash: e9QjMPbYzYYjfH2EZu8+PaBSsGZJBC9gvfRDCWljrsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:84:46:ea:ba:d4:92:ab:e7:19:29:16:2e:89:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
        Validity
            Not Before: Nov  4 16:00:52 2025 GMT
            Not After : Nov  5 16:00:52 2025 GMT
        Subject: CN=4182a1a31adbbcfaa273787284a9e645ec7310ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:76:29:9f:21:f3:36:5b:48:c7:fc:23:ea:
                    69:05:24:ec:f6:68:8d:4f:70:0d:b6:d4:aa:f9:f9:
                    70:e4:c0:68:1e:a0:b3:1d:95:2f:d3:83:74:b3:60:
                    cf:09:46:b1:8e:08:af:60:78:52:0c:dc:4a:c9:b2:
                    63:41:2d:d8:d3:fb:6a:63:eb:5a:5b:09:60:0e:6b:
                    0a:b0:f9:9f:0b:c4:d1:97:df:e6:5d:b9:10:ac:9b:
                    a2:32:33:6d:ae:eb:98:8b:be:01:2c:c6:f2:8b:b5:
                    d7:56:6d:80:b4:22:53:47:c6:76:a1:57:9e:bc:7b:
                    59:dd:5a:c3:25:ff:b6:d2:91:b9:d5:22:16:03:c2:
                    03:31:bb:17:0f:2d:79:79:c6:de:a4:30:b3:36:e1:
                    0b:d2:11:82:90:62:44:f3:36:51:ea:c8:12:d8:a5:
                    c4:93:b0:11:e3:f7:bc:a7:cb:c2:d7:f3:a2:b5:2c:
                    d8:1b:25:87:94:53:ef:c6:5a:e9:ec:bf:82:ad:06:
                    bc:37:c4:8c:5e:cf:7a:1d:79:d8:ab:9a:c2:6d:16:
                    04:45:ff:e8:b1:ac:6d:4f:0e:d5:59:95:81:2d:66:
                    25:ae:ef:5a:84:82:68:f8:31:3f:92:c9:8f:db:27:
                    a5:58:c5:f6:7c:44:7a:95:2a:f6:45:48:b6:e2:13:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:82:A1:A3:1A:DB:BC:FA:A2:73:78:72:84:A9:E6:45:EC:73:10:EF
            X509v3 Authority Key Identifier:
                keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:bb:bb:89:3b:80:d9:bc:35:0e:58:a9:99:cf:fb:68:f3:
         14:12:bb:66:5f:ba:72:9a:05:68:af:db:41:41:1b:d3:d3:46:
         91:c4:d1:6f:24:3c:84:33:f2:aa:90:c6:62:c6:49:98:bb:fe:
         df:d2:45:39:46:60:71:56:8e:fc:99:cc:37:1c:12:48:9a:86:
         f8:05:39:c7:82:28:22:6d:98:6e:8a:8a:a3:34:fb:c0:9d:7d:
         50:78:45:5e:91:38:2d:d8:9a:18:fe:a2:17:96:0b:6d:f0:c2:
         d1:33:12:97:7c:14:f6:20:e8:74:a5:2f:65:88:e7:fd:30:fc:
         39:f2:a2:9a:89:d5:c3:cf:dd:31:36:e9:45:92:29:bb:19:20:
         9f:c1:34:78:3f:e9:ef:f5:8a:7e:04:77:f0:64:82:dc:fc:6b:
         e8:af:da:8c:95:7c:43:9b:a1:d0:d9:d2:bf:ad:74:cd:f1:96:
         1e:e6:6d:0a:26:e0:30:dc:39:fd:26:dd:d0:bb:40:23:f0:23:
         bb:4b:37:91:e7:13:da:f5:d0:81:60:fc:1f:79:e6:ee:a6:35:
         2b:df:e8:c4:28:ae:15:fd:7c:cf:8f:aa:e9:89:b6:8b:33:28:
         ac:e2:b8:f6:b9:2b:d0:bd:cf:fb:b4:86:b8:0e:96:55:6c:48:
         91:42:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:35 2025 by rpki-client