Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
File:                     6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json)
Hash identifier:          hkEXdqLWSGzOSol8/BwehlTz4jRK0o4A6JmUKnvc1z8=
Subject key identifier:   9B:C9:D0:00:00:69:94:E4:79:0D:E3:90:CF:E1:E0:ED:CB:B0:D5:F8
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       27205099DB8F916971C0C49C41985D52B49C1AE2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
Manifest number:          F1
Signing time:             Thu 16 Apr 2026 05:15:59 +0000
Manifest this update:     Thu 16 Apr 2026 05:10:59 +0000
Manifest next update:     Fri 17 Apr 2026 05:57:59 +0000
Files and hashes:         1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=)
                          2: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=)
                          3: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: zbPXxVEP5J+wcfYRzQeqc9fJNu0maZOZe3ZRJzSHWVg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:20:50:99:db:8f:91:69:71:c0:c4:9c:41:98:5d:52:b4:9c:1a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Apr 16 05:10:59 2026 GMT
            Not After : Apr 17 05:57:59 2026 GMT
        Subject: CN=9BC9D000006994E4790DE390CFE1E0EDCBB0D5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:e0:2d:7b:ae:05:6b:1f:2d:89:57:76:33:
                    55:bd:74:4f:c8:56:ea:ac:78:f6:5f:fd:04:8b:17:
                    2f:4c:17:fe:89:59:ef:fc:83:fd:0c:8f:3d:72:d2:
                    2a:f6:2f:78:11:ea:58:b7:6d:2c:d2:85:dd:ba:e5:
                    6c:d2:74:fc:b2:a6:6c:74:e8:61:91:f6:1c:71:2d:
                    14:b0:40:a3:35:26:74:ef:9e:e1:0a:1f:76:3a:62:
                    8f:6b:51:21:12:20:87:8c:1b:93:53:f1:17:8f:d5:
                    95:e1:08:8c:90:7a:44:61:e6:e2:50:d5:f8:61:19:
                    19:7e:b2:f8:62:2e:23:6a:97:77:21:b9:83:62:bd:
                    91:48:fb:91:17:0c:73:7e:6d:c9:3f:c8:b1:50:8d:
                    89:83:b4:9e:62:4a:2c:4a:ae:6f:3d:d3:83:10:76:
                    9c:f5:eb:e4:0e:bb:94:17:00:e8:cb:5c:0d:43:8a:
                    8f:f2:5a:70:cf:99:5b:83:1f:f1:0d:16:18:02:46:
                    c6:59:30:63:5d:64:e3:52:1d:61:88:d4:5c:ee:15:
                    54:77:1b:16:29:75:b9:97:4d:59:0b:be:74:cb:b0:
                    a3:cb:9a:f0:4d:23:2e:7c:2b:10:97:fe:9e:6d:16:
                    7b:bd:42:d1:af:c2:bc:01:fc:66:6a:a8:40:2d:63:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C9:D0:00:00:69:94:E4:79:0D:E3:90:CF:E1:E0:ED:CB:B0:D5:F8
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:76:5a:77:6a:f7:b9:75:dd:fc:87:55:9e:2e:e5:6c:f1:aa:
         0a:f6:33:db:42:cb:0d:e8:df:4a:27:89:cb:19:11:cd:92:86:
         81:ee:ba:b2:9e:88:47:39:c6:d4:51:04:34:7f:74:6b:13:fa:
         86:89:4b:b0:92:2b:b7:26:1f:93:ec:bf:de:e3:97:b9:e9:d9:
         06:bf:e8:69:f5:33:e7:29:9e:47:96:fd:64:88:3a:65:05:77:
         8d:a4:13:d2:95:ec:45:03:bd:e2:67:a2:e3:1b:23:c6:d9:5e:
         42:9c:e0:fa:84:c3:de:d4:15:54:db:20:d9:88:72:db:79:1e:
         95:d4:f6:1e:d8:c7:04:6e:67:cb:45:39:8a:30:c1:3a:ce:32:
         3f:91:d4:9b:09:45:7b:4b:d9:03:a6:09:3e:7a:16:67:33:73:
         a7:f7:0b:82:aa:b0:ac:51:61:4e:34:0e:71:ec:4a:4d:3d:14:
         72:5c:d0:41:ab:b8:64:65:00:63:1c:ab:c0:e3:c3:7c:8e:7d:
         a2:47:59:58:9a:44:67:ce:17:d3:5a:d2:90:62:56:b9:76:bb:
         50:53:c3:17:80:8b:37:ef:e7:38:38:91:a1:12:a8:20:e7:1d:
         fa:38:3c:31:ba:de:3f:d0:86:f4:47:c4:21:a7:f9:68:2c:ea:
         f7:36:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:18 2026 by rpki-client