Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          wvx0eLUkNaCaIAVJNLtYVTaabS5Lw2LrIca+CvFSHYQ=
Subject key identifier:   7C:9F:F8:27:B0:96:75:4C:84:C1:22:77:5C:13:8B:C7:00:02:B9:6C
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       41519CB2826DFD296629022D8F8FC8C7B5086913
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          23
Signing time:             Fri 01 Aug 2025 21:52:55 +0000
Manifest this update:     Fri 01 Aug 2025 21:47:55 +0000
Manifest next update:     Sun 03 Aug 2025 01:50:55 +0000
Files and hashes:         1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: YEb0oQWiHvoMpYSKSPGZ+UBJK/QAm7xp0nr0R71eQeg=)
                          2: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:51:9c:b2:82:6d:fd:29:66:29:02:2d:8f:8f:c8:c7:b5:08:69:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Aug  1 21:47:55 2025 GMT
            Not After : Aug  3 01:50:55 2025 GMT
        Subject: CN=7C9FF827B096754C84C122775C138BC70002B96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:cc:8a:ff:9b:40:fd:59:77:b9:7e:50:1c:
                    cd:d9:2a:72:fe:56:99:a6:c3:c5:c0:1e:89:ed:b2:
                    e3:1d:b0:26:ee:7d:f1:af:63:c1:27:61:4c:2c:29:
                    8d:bb:5f:52:b6:24:1e:3c:2c:02:a8:a3:2e:33:b0:
                    34:a6:ff:f0:83:85:e1:3c:e5:66:0c:ca:81:c1:a0:
                    96:93:92:a6:7f:aa:e2:a5:e6:36:52:43:fb:4f:bf:
                    c9:ac:19:58:19:13:41:7c:d8:87:72:4f:3b:ad:8b:
                    3a:3d:26:e4:f8:b3:91:20:38:94:36:63:54:ab:f8:
                    7f:9f:4a:c3:cb:37:eb:be:ec:e8:ea:11:82:b8:1b:
                    68:3e:85:3c:2a:bd:a2:09:a7:cd:95:28:8e:0b:ac:
                    26:38:fc:f4:7f:e6:9c:57:ca:5d:ad:fc:d3:4b:2a:
                    f2:77:5c:30:b2:8f:af:36:06:1e:88:e9:d2:a4:36:
                    f4:bc:f4:a1:2e:31:95:98:b9:31:6d:f5:fa:60:67:
                    a3:fb:ad:ff:5c:e1:7e:01:27:65:7a:4d:01:f4:87:
                    59:23:62:2e:22:db:72:80:08:e7:a6:71:31:f6:96:
                    fe:34:e6:55:d7:56:78:ac:c8:41:4e:7e:4d:f1:5e:
                    e8:9f:a2:46:a9:da:9c:bd:1e:5c:ee:24:1d:04:cf:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9F:F8:27:B0:96:75:4C:84:C1:22:77:5C:13:8B:C7:00:02:B9:6C
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:1d:61:b4:03:72:05:3c:fd:d0:e6:a0:ee:f2:3f:9e:80:
         60:1b:07:a8:ac:6d:37:5d:16:d7:03:5d:4c:eb:09:9e:fe:28:
         0a:7d:fc:6a:67:d2:a2:4c:1f:68:ae:20:9d:c5:4d:f9:cc:61:
         5a:fa:69:35:62:c0:2f:5b:24:f2:90:a7:ac:47:56:7b:8e:4a:
         b7:3c:ec:4b:b8:ee:f0:fe:95:a8:85:4e:a6:fb:06:0c:38:3b:
         07:03:e1:4b:99:a1:1c:07:7b:66:b6:06:32:37:1c:70:f5:26:
         85:5f:cd:0d:81:d6:3a:90:40:c2:a7:3e:4b:73:e3:da:1c:ea:
         8c:a7:95:67:a7:e0:a7:76:b7:2c:4c:9c:7b:bd:c0:18:6b:f0:
         25:e9:05:78:aa:32:43:7b:d3:e8:1d:ef:70:a0:14:7a:e3:d2:
         bf:30:df:93:ae:35:d2:38:7e:1e:1d:62:ee:e9:be:a6:fe:ca:
         a3:d1:95:68:ed:0b:b4:37:fc:83:a2:05:af:05:6d:8f:32:7a:
         ee:6d:51:e6:41:94:b9:9c:75:7f:d0:7b:d9:de:ac:75:e8:d7:
         2f:cd:28:8b:4e:83:3c:89:89:26:a7:28:53:b1:c9:8f:1f:16:
         c0:24:5f:65:45:a2:14:d5:2f:06:d8:26:d2:45:33:08:c7:44:
         53:28:04:12
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUQVGcsoJt/SlmKQItj4/Ix7UIaRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE
OEQ2M0E2MjAeFw0yNTA4MDEyMTQ3NTVaFw0yNTA4MDMwMTUwNTVaMDMxMTAvBgNV
BAMTKDdDOUZGODI3QjA5Njc1NEM4NEMxMjI3NzVDMTM4QkM3MDAwMkI5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mcyK/5tA/Vl3uX5QHM3ZKnL+
Vpmmw8XAHontsuMdsCbuffGvY8EnYUwsKY27X1K2JB48LAKooy4zsDSm//CDheE8
5WYMyoHBoJaTkqZ/quKl5jZSQ/tPv8msGVgZE0F82IdyTzutizo9JuT4s5EgOJQ2
Y1Sr+H+fSsPLN+u+7OjqEYK4G2g+hTwqvaIJp82VKI4LrCY4/PR/5pxXyl2t/NNL
KvJ3XDCyj682Bh6I6dKkNvS89KEuMZWYuTFt9fpgZ6P7rf9c4X4BJ2V6TQH0h1kj
Yi4i23KACOemcTH2lv405lXXVnisyEFOfk3xXuifokap2py9HlzuJB0Ez4EfAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUfJ/4J7CWdUyEwSJ3XBOLxwACuWwwHwYDVR0j
BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2
M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx
NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYgdYbQDcgU8/dDmoO7y
P56AYBsHqKxtN10W1wNdTOsJnv4oCn38amfSokwfaK4gncVN+cxhWvppNWLAL1sk
8pCnrEdWe45KtzzsS7ju8P6VqIVOpvsGDDg7BwPhS5mhHAd7ZrYGMjcccPUmhV/N
DYHWOpBAwqc+S3Pj2hzqjKeVZ6fgp3a3LEyce73AGGvwJekFeKoyQ3vT6B3vcKAU
euPSvzDfk6410jh+Hh1i7um+pv7Ko9GVaO0LtDf8g6IFrwVtjzJ67m1R5kGUuZx1
f9B72d6sdejXL80oi06DPImJJqcoU7HJjx8WwCRfZUWiFNUvBtgm0kUzCMdEUygE
Eg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:17:21 2025 by rpki-client