Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          VJFCZPBul4KjwC8aAJUhKU2tUf5Kb7brtL4Nb5QsIWo=
Subject key identifier:   9D:11:8E:A0:D9:52:AE:5A:BC:05:BD:76:69:1E:9E:81:D9:39:AB:BA
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       52E3F9D5393C2BAEBCAB3B380E900F2E48F4A0FD
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          F5
Signing time:             Thu 16 Apr 2026 05:15:59 +0000
Manifest this update:     Thu 16 Apr 2026 05:10:59 +0000
Manifest next update:     Fri 17 Apr 2026 07:18:59 +0000
Files and hashes:         1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: nc0hbskFCnhx4oxTx3pRhSHW79Udzxp5lY77x2pJji4=)
                          2: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=)
                          4: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=)
                          5: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=)
                          6: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e3:f9:d5:39:3c:2b:ae:bc:ab:3b:38:0e:90:0f:2e:48:f4:a0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Apr 16 05:10:59 2026 GMT
            Not After : Apr 17 07:18:59 2026 GMT
        Subject: CN=9D118EA0D952AE5ABC05BD76691E9E81D939ABBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:1e:9a:23:ab:51:b2:5e:43:9c:7c:26:4e:
                    41:cb:e1:1e:00:81:f4:07:f3:67:76:14:0c:5c:9c:
                    6d:d6:64:92:18:f3:03:5b:6b:80:9a:08:c0:cc:a5:
                    d7:c9:55:2d:48:65:b4:fa:3d:b5:0f:d7:2e:0d:c6:
                    0a:62:c0:e3:27:85:76:dc:a6:d6:95:11:23:05:03:
                    62:bf:48:07:d9:fa:59:6d:0c:76:5e:7b:58:00:35:
                    95:d8:ec:f5:7c:6a:70:3f:89:8a:38:a5:2f:f5:9c:
                    fe:dd:45:f6:a2:1d:16:2f:cc:fc:4a:d3:bd:d9:51:
                    0a:b3:54:e2:35:94:54:b0:01:9b:b7:21:23:be:da:
                    b1:15:97:b2:12:b2:96:b3:34:5b:9c:87:65:8a:c8:
                    20:ec:71:02:25:3c:a9:e2:dc:e1:c6:8c:6d:95:2f:
                    36:53:6b:e4:60:43:13:55:81:94:7e:48:2e:e3:7a:
                    68:60:3f:77:1a:cb:68:41:fa:3c:c1:f2:69:8a:ef:
                    37:df:4e:0f:aa:92:b5:31:9d:05:2a:92:cd:08:0b:
                    c2:15:a5:35:97:1b:a6:73:24:3f:a9:9d:08:ed:c4:
                    4d:04:7a:06:56:95:f4:65:81:f7:47:8f:fc:93:06:
                    8d:3b:6e:c3:0d:2d:1d:8e:f1:2d:f9:0c:b0:12:de:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:11:8E:A0:D9:52:AE:5A:BC:05:BD:76:69:1E:9E:81:D9:39:AB:BA
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:fc:0b:9e:27:2b:9a:3b:87:00:db:78:ba:13:ed:c0:06:
         aa:2e:31:68:98:fe:71:47:9a:ef:d0:0a:fd:46:c1:08:00:00:
         b7:ef:09:da:5d:be:a1:62:ee:c7:dd:77:02:b8:88:ab:cd:f2:
         a6:56:79:fb:f9:ec:e1:9c:6a:f7:dc:7e:f6:c5:09:41:c8:3f:
         94:8a:15:68:53:7f:e6:e5:f4:10:fb:6e:a1:94:67:c4:70:34:
         a8:c0:c1:16:c4:60:03:4c:fb:41:73:b7:6d:0a:2f:f9:0f:d7:
         10:5a:f9:dc:68:2d:f6:a8:fb:5c:11:41:84:a5:a0:2d:5a:13:
         6f:3e:e9:ac:4b:09:e7:6c:b0:ba:f9:d2:bf:7b:b0:cc:c4:ec:
         77:5d:17:88:3a:89:18:ba:99:f0:3c:9c:a1:c9:da:1d:3a:cc:
         4f:15:47:39:50:9d:c5:4e:a2:bf:c4:e9:d2:86:be:66:27:68:
         32:7a:f6:5d:15:73:ff:67:52:60:78:85:6e:27:e8:05:81:1c:
         3c:60:30:a0:56:c1:22:af:a7:73:c4:fb:fd:5d:d0:0d:7e:f8:
         c8:fb:a1:d3:87:ff:52:a8:20:3f:29:0e:5b:fb:02:08:ba:5c:
         e6:67:72:94:e3:04:1e:bf:15:5f:7d:66:16:18:ca:f3:95:4b:
         79:e9:3f:3d
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUUuP51Tk8K668qzs4DpAPLkj0oP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE
OEQ2M0E2MjAeFw0yNjA0MTYwNTEwNTlaFw0yNjA0MTcwNzE4NTlaMDMxMTAvBgNV
BAMTKDlEMTE4RUEwRDk1MkFFNUFCQzA1QkQ3NjY5MUU5RTgxRDkzOUFCQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfx6aI6tRsl5DnHwmTkHL4R4A
gfQH82d2FAxcnG3WZJIY8wNba4CaCMDMpdfJVS1IZbT6PbUP1y4NxgpiwOMnhXbc
ptaVESMFA2K/SAfZ+lltDHZee1gANZXY7PV8anA/iYo4pS/1nP7dRfaiHRYvzPxK
073ZUQqzVOI1lFSwAZu3ISO+2rEVl7ISspazNFuch2WKyCDscQIlPKni3OHGjG2V
LzZTa+RgQxNVgZR+SC7jemhgP3cay2hB+jzB8mmK7zffTg+qkrUxnQUqks0IC8IV
pTWXG6ZzJD+pnQjtxE0EegZWlfRlgfdHj/yTBo07bsMNLR2O8S35DLAS3r9ZAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUnRGOoNlSrlq8Bb12aR6egdk5q7owHwYDVR0j
BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2
M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx
NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfML8C54nK5o7hwDbeLoT
7cAGqi4xaJj+cUea79AK/UbBCAAAt+8J2l2+oWLux913AriIq83yplZ5+/ns4Zxq
99x+9sUJQcg/lIoVaFN/5uX0EPtuoZRnxHA0qMDBFsRgA0z7QXO3bQov+Q/XEFr5
3Ggt9qj7XBFBhKWgLVoTbz7prEsJ52ywuvnSv3uwzMTsd10XiDqJGLqZ8Dycocna
HTrMTxVHOVCdxU6iv8Tp0oa+ZidoMnr2XRVz/2dSYHiFbifoBYEcPGAwoFbBIq+n
c8T7/V3QDX74yPuh04f/UqggPykOW/sCCLpc5mdylOMEHr8VX31mFhjK85VLeek/
PQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:13 2026 by rpki-client