Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
File:                     6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json)
Hash identifier:          4n33dMRuQ/v29dnizjy6IOUj2ciovwsJVX+66s863nE=
Subject key identifier:   8A:72:EB:F8:BC:D8:93:34:71:78:94:CE:75:A7:B2:CD:05:BF:FD:63
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       69B57F01DC9D3B48EF0453546B93C1EDA625BE3B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
Manifest number:          EE
Signing time:             Thu 26 Feb 2026 04:03:04 +0000
Manifest this update:     Thu 26 Feb 2026 03:58:04 +0000
Manifest next update:     Fri 27 Feb 2026 05:01:04 +0000
Files and hashes:         1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=)
                          2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: tidnTjJqRIYlz+cIixs3YAilk1hAouOGr/oZsCPgfAg=)
                          3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b5:7f:01:dc:9d:3b:48:ef:04:53:54:6b:93:c1:ed:a6:25:be:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Feb 26 03:58:04 2026 GMT
            Not After : Feb 27 05:01:04 2026 GMT
        Subject: CN=8A72EBF8BCD89334717894CE75A7B2CD05BFFD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:ab:4d:b8:79:f8:15:ce:ff:60:48:4d:1d:
                    c3:09:bf:7e:f8:13:60:fb:9b:27:a4:49:c9:80:d9:
                    53:67:6f:ff:a4:5c:c9:fd:86:33:89:b5:b6:08:f5:
                    a9:4b:97:0b:1a:fb:63:09:33:f9:4c:a6:0e:70:d9:
                    4d:14:ae:a2:b7:3a:64:8d:9d:c3:24:c2:61:5a:f0:
                    80:05:ed:e2:48:8b:a9:64:91:f4:88:a9:64:fa:bc:
                    ee:8d:97:8e:81:93:41:e7:ac:b2:72:0d:8b:07:d2:
                    24:67:64:7f:c5:0f:bb:5c:e1:73:17:50:a2:2f:8b:
                    30:db:44:c8:ed:b8:aa:60:76:aa:e9:2f:e8:42:33:
                    c7:be:db:75:e7:e5:b3:60:8d:74:9f:d9:6c:c8:b6:
                    8c:09:e0:17:03:b0:1d:b1:32:fb:7d:14:7e:5d:d7:
                    c7:5e:46:8e:e8:d0:f7:12:44:cd:e0:e1:bc:1e:45:
                    62:9f:d5:ca:a1:8a:dc:da:6f:48:6a:46:ec:8c:5d:
                    7d:ce:d1:06:fb:75:e5:a9:1c:60:11:31:62:96:5f:
                    6e:bf:6a:2e:56:bc:f8:7b:42:e6:9f:a8:51:6a:dc:
                    56:cd:b9:b8:04:c2:d6:d5:cd:54:6c:5d:f1:d7:81:
                    d3:72:e8:9e:99:5c:be:46:75:33:c2:c3:59:53:4b:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:EB:F8:BC:D8:93:34:71:78:94:CE:75:A7:B2:CD:05:BF:FD:63
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:80:23:73:81:90:39:42:45:c9:ff:06:b7:8c:5f:bd:b2:
         b3:4d:80:30:4b:6c:28:8c:1a:0a:f5:04:bb:e2:9f:55:fc:15:
         e0:73:98:26:97:6d:18:ee:03:1f:cc:10:29:98:90:e2:ef:47:
         92:bd:f4:58:6f:dc:13:bc:42:9e:1b:00:b5:7b:b1:d7:58:f7:
         79:f6:1d:de:43:aa:ab:2a:56:10:94:a8:d7:dc:21:f7:05:3c:
         11:b9:02:2d:d6:e9:b9:62:62:5c:90:36:0c:96:d9:1f:7c:6e:
         97:66:4a:89:58:d2:1c:9f:d7:45:3a:0c:f2:3f:11:03:47:eb:
         8b:67:a7:98:cf:7d:18:2b:6d:f2:17:9a:11:1d:74:e4:6b:ac:
         bf:fb:28:5a:33:7d:b7:c5:18:f3:c2:fc:8e:04:ea:57:26:07:
         81:7e:b6:84:bf:2a:13:c5:69:47:76:df:c0:99:34:1f:30:87:
         fe:ec:bc:6f:ce:a5:0a:c1:41:35:30:f5:2e:55:98:a9:d0:32:
         48:c0:a0:4b:f3:ef:22:ed:9e:32:8f:f9:4a:1d:36:53:b4:f9:
         2a:e7:15:c2:7a:29:b9:3f:3a:37:e7:9b:c2:94:56:a2:d8:d3:
         80:40:20:33:e4:84:44:3d:76:a2:54:77:61:96:48:e9:2d:68:
         e3:81:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----