Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File:                     B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier:          BJ6XbM+W2wSMTdAlcHGokJPORhhFjyZBTUYNblwzPOg=
Subject key identifier:   37:A3:6E:C5:1F:54:79:7F:81:83:4B:90:93:34:2C:5B:21:3F:33:DF
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer:       /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial:       474183558D26D7AFED86462FBC0BEAC7BBB99135
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number:          A7
Signing time:             Tue 04 Nov 2025 01:13:12 +0000
Manifest this update:     Tue 04 Nov 2025 01:08:12 +0000
Manifest next update:     Wed 05 Nov 2025 02:02:12 +0000
Files and hashes:         1: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: TvXv22C5nr68EHpjsYcSOajGM37EC57PC+kHchA4XMM=)
                          2: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
                          3: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
                          4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
                          5: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:41:83:55:8d:26:d7:af:ed:86:46:2f:bc:0b:ea:c7:bb:b9:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
        Validity
            Not Before: Nov  4 01:08:12 2025 GMT
            Not After : Nov  5 02:02:12 2025 GMT
        Subject: CN=37A36EC51F54797F81834B9093342C5B213F33DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:e8:be:01:f9:4f:ce:d4:6c:12:32:dd:4e:
                    30:38:cd:db:a2:22:4d:b1:5b:02:4e:96:d5:28:f2:
                    2c:19:e0:44:a6:49:08:49:85:f6:4d:bc:67:37:4a:
                    92:36:2f:63:6e:00:f7:a4:ec:6b:88:d4:4f:1d:70:
                    0b:26:f9:66:a8:76:45:c1:85:a8:8b:02:ac:68:dc:
                    81:e6:26:ea:47:47:2a:80:d4:42:e6:5b:50:80:71:
                    30:7c:5a:1f:0a:3c:53:07:ab:76:1b:fb:8e:e0:f3:
                    7a:c7:cd:58:55:ef:bf:78:80:15:5a:e2:c5:3a:3d:
                    26:45:c7:35:df:58:c2:ac:05:e4:a2:f0:fc:f5:e9:
                    de:cf:2e:86:b4:0f:9a:a2:93:be:40:07:2e:fe:1d:
                    ca:a8:f8:57:ed:ad:b1:40:7f:c0:f6:9f:81:a9:66:
                    00:ec:c3:3c:e6:11:b4:5f:86:8b:11:24:c0:05:dd:
                    35:9c:ba:98:04:67:fe:ac:f1:a6:d1:bd:31:64:32:
                    fa:20:9b:55:f2:fe:7e:16:fc:4c:36:35:ad:9d:71:
                    1c:21:86:bd:5a:e5:a2:7a:26:0f:d0:df:5b:9e:1a:
                    fd:28:bf:3d:1c:2d:db:94:37:05:05:15:cd:74:6e:
                    2c:10:ec:d8:cc:52:19:2d:5a:50:67:0c:42:b4:9f:
                    17:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:6E:C5:1F:54:79:7F:81:83:4B:90:93:34:2C:5B:21:3F:33:DF
            X509v3 Authority Key Identifier:
                keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:2e:8d:8a:34:51:8f:14:06:eb:fe:7e:54:84:77:b3:74:
         18:8a:24:7a:4f:6f:f7:d5:7a:fb:8f:3f:f9:c6:6b:e7:5e:d3:
         b6:2a:5f:d2:0f:cc:0e:4b:93:9e:b0:2a:45:cb:95:e7:c1:96:
         72:65:8c:3e:ea:8e:de:f3:dd:1c:24:c0:03:c5:ea:27:46:bb:
         1d:48:ad:ba:e1:03:c2:f5:e8:d6:4c:09:74:fb:c4:ab:93:d1:
         51:cc:30:73:1c:2d:0f:2f:a7:d2:75:2e:e0:f8:3e:48:1f:a6:
         b9:fa:30:66:5d:ec:d4:72:04:fc:76:2e:81:57:11:59:9a:e3:
         8d:7b:02:1e:b8:da:c7:aa:7f:d9:c4:5f:98:90:9e:cf:31:e7:
         63:52:b1:6a:11:54:b5:23:bb:13:e3:dd:58:77:c3:c3:45:2e:
         7e:d2:86:41:4f:c0:5f:32:d0:31:9c:55:1b:c2:27:56:e6:0b:
         30:36:0c:fd:56:aa:a9:ee:b3:e3:d3:9d:4f:00:13:bd:4e:3c:
         43:ac:2e:9f:7f:7c:86:11:5f:db:bf:9e:b3:f1:84:16:62:5e:
         eb:ba:30:e6:ca:39:e3:59:39:4b:97:f8:65:f9:b3:f5:2e:95:
         f9:27:81:79:12:0b:36:2a:4d:62:35:e7:a8:ed:9d:fa:1e:dd:
         89:90:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:53 2025 by rpki-client