Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          7pofcAVVlCwpblYGdGsS50hpNOl8bXVKmWe3u9Ti11c=
Subject key identifier:   F2:79:C2:13:34:16:34:31:34:7F:42:C0:C3:B9:35:B7:9C:59:19:17
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       1D1310FBD8E55D7F3070137BA7B907A0413D3BD6
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          F2
Signing time:             Thu 26 Feb 2026 02:08:04 +0000
Manifest this update:     Thu 26 Feb 2026 02:03:04 +0000
Manifest next update:     Fri 27 Feb 2026 04:41:04 +0000
Files and hashes:         1: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=)
                          2: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=)
                          3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=)
                          4: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: ulVn68hJWxhPEEbHeNapvGM/H/9+85Li10yGjwcsyuI=)
                          5: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=)
                          6: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:13:10:fb:d8:e5:5d:7f:30:70:13:7b:a7:b9:07:a0:41:3d:3b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Feb 26 02:03:04 2026 GMT
            Not After : Feb 27 04:41:04 2026 GMT
        Subject: CN=F279C21334163431347F42C0C3B935B79C591917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:8d:b1:18:2d:9f:f6:11:ed:67:f2:6e:ff:
                    f9:20:6d:30:4d:dc:a6:8f:99:48:03:1e:d3:3b:14:
                    cb:24:74:91:01:b9:1b:78:41:e0:02:9f:8d:f8:5c:
                    a5:fa:f1:e5:77:79:44:4f:2a:9a:c9:c4:ff:3a:29:
                    62:d9:b5:78:bc:6a:6c:92:b9:dd:6a:8b:14:3c:cd:
                    6b:a0:9c:8e:6e:32:80:f3:dc:a7:f5:be:e6:14:73:
                    e9:8e:b6:aa:b0:18:b4:cb:82:86:3f:c7:b6:5c:dd:
                    e1:d0:48:a6:fb:8d:79:17:38:1b:49:e3:e9:f5:30:
                    f3:ac:2d:b8:b3:44:19:8f:8b:6b:ce:29:65:eb:e7:
                    b6:24:6a:d3:5f:90:77:23:ff:d7:85:30:0f:87:59:
                    67:b2:90:ad:a7:82:1f:c7:46:da:87:27:d7:b7:82:
                    c1:9c:91:21:30:2c:dc:97:89:b4:d1:bc:72:19:07:
                    91:49:fa:7d:12:70:74:97:06:f1:00:63:f2:a2:42:
                    86:2a:e3:c2:8f:a8:8c:70:5d:27:f2:9a:31:dc:f3:
                    74:bf:2d:7d:81:43:2c:a3:09:bf:42:b3:73:32:d0:
                    ba:5a:c2:58:03:61:c7:82:9d:a9:e3:43:e8:16:93:
                    3d:22:e6:9a:24:c8:d1:8a:10:1e:e3:fe:77:83:5d:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:79:C2:13:34:16:34:31:34:7F:42:C0:C3:B9:35:B7:9C:59:19:17
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:6b:39:08:e2:5d:6f:0b:f3:4e:d1:74:ac:de:7e:2f:9a:
         5c:62:ef:bd:6b:27:4e:5a:1b:44:4d:03:04:d7:33:24:95:83:
         b1:19:eb:51:c0:36:59:ed:1c:16:c9:1e:a3:62:a5:96:e7:2b:
         5d:93:eb:e1:24:35:21:81:64:a6:0a:7f:e9:9f:57:cd:b5:b0:
         6e:b0:e2:fd:54:c5:13:5b:02:fc:39:59:49:ac:d9:b8:2d:34:
         1a:fa:08:63:e8:a2:35:6d:6a:5c:04:40:fd:e8:87:d0:13:7a:
         60:e2:b1:24:f5:83:ee:e6:3a:38:ab:da:52:2c:a3:d2:7b:b2:
         5f:73:54:96:02:52:31:61:94:3e:09:bd:0c:27:a9:ef:8e:6b:
         b9:0b:14:aa:e8:b5:3f:ba:46:87:0b:cf:7e:4c:34:4f:44:b7:
         d7:f5:47:15:f6:a8:e7:51:b6:b0:e7:80:18:5a:c8:a8:49:68:
         a4:a0:07:ef:84:9e:e4:dc:3e:bc:39:28:47:c9:ca:85:76:6b:
         43:01:23:2a:b7:7c:86:d3:7a:4b:c6:9c:2d:88:c8:0e:e5:e0:
         bd:6e:ef:72:57:36:8d:3e:37:b9:23:19:c5:c9:0e:f9:89:fe:
         94:2d:10:75:df:36:ef:85:12:dc:53:15:f6:02:16:74:09:fa:
         fd:f9:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----