Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
File:                     7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json)
Hash identifier:          p3s+xSpdHtMd/jMfZmrhOFfBlU82D7odjamehfK3ORA=
Subject key identifier:   D3:DA:B4:1C:00:31:CB:61:5F:00:4A:E5:40:15:77:3C:50:91:76:B7
Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31
Certificate issuer:       /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
Certificate serial:       2A5CCD15E41E5F3AC5FBCAD62168171D44149243
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
Manifest number:          1F
Signing time:             Thu 24 Jul 2025 05:38:27 +0000
Manifest this update:     Thu 24 Jul 2025 05:33:27 +0000
Manifest next update:     Fri 25 Jul 2025 07:59:27 +0000
Files and hashes:         1: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: Sjk76cuF7Uw8IJp49o1E4nLlt42jgCf33LLds4LAs6w=)
                          2: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=)
                          3: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=)
                          4: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=)
                          5: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=)
                          6: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5c:cd:15:e4:1e:5f:3a:c5:fb:ca:d6:21:68:17:1d:44:14:92:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
        Validity
            Not Before: Jul 24 05:33:27 2025 GMT
            Not After : Jul 25 07:59:27 2025 GMT
        Subject: CN=D3DAB41C0031CB615F004AE54015773C509176B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:18:9a:e2:67:33:66:08:98:ac:8e:5f:e7:
                    ad:fa:b4:03:c4:88:f6:6d:f9:e5:63:ee:a2:86:ba:
                    6c:1d:a9:cc:20:18:a0:2e:20:23:57:d6:04:03:95:
                    c6:8f:0e:a3:3a:dd:63:42:c0:47:7d:a4:6e:1a:9d:
                    e4:3d:3a:6b:d8:5e:3c:55:11:db:ae:63:70:f3:c0:
                    09:a4:53:d3:e8:75:a4:b8:44:fd:f4:3a:4c:6c:b1:
                    fd:0c:5a:3f:09:4b:77:28:86:ce:98:92:0a:e9:5b:
                    b4:9c:14:4c:d3:0a:cf:10:b7:95:2f:d1:21:78:ce:
                    cf:2e:d8:13:34:f2:ee:b9:42:bf:cc:0b:b7:be:d0:
                    e1:75:cb:d6:66:4b:5c:8f:99:d2:a9:97:7f:7f:33:
                    37:e4:a9:a0:f6:0c:c6:34:51:3d:63:8b:16:cc:3f:
                    c7:28:cb:58:5e:e9:43:74:59:03:a6:25:3d:cf:dc:
                    1b:64:8e:30:fe:84:27:67:86:fd:20:4f:53:9b:98:
                    14:a3:43:00:ca:98:0f:e6:d8:aa:7a:5c:2f:37:81:
                    b6:f5:26:19:37:26:51:8f:83:3e:ac:68:de:c9:55:
                    a4:35:75:63:f6:cb:42:53:cd:b5:b5:b5:21:dc:4e:
                    74:4a:de:48:3b:43:47:a6:1d:bc:e3:a0:87:32:e6:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DA:B4:1C:00:31:CB:61:5F:00:4A:E5:40:15:77:3C:50:91:76:B7
            X509v3 Authority Key Identifier:
                keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bf:52:84:70:17:40:06:0b:0f:e5:58:74:c2:02:59:20:82:
         d1:98:d7:f6:c9:b4:72:04:ef:e9:c0:7a:fe:24:6f:67:29:64:
         95:f3:80:e7:c3:c5:42:61:77:75:42:40:48:77:44:ba:51:31:
         93:88:1c:82:95:94:67:04:e8:fc:9b:82:8d:62:45:a0:b8:1d:
         30:5b:8c:0f:5e:b5:78:f5:c2:c2:da:14:67:d8:31:a1:cb:01:
         89:14:76:80:31:ac:d9:da:24:ed:f4:7f:62:dd:fa:7e:b9:67:
         c4:33:a5:ef:d1:f3:c6:a2:f4:80:07:7d:fc:26:38:46:06:ec:
         a1:56:ba:c5:f8:02:13:0b:61:3c:74:af:4d:11:8d:7f:0c:2a:
         b5:06:f7:fd:d5:09:cf:63:7a:58:62:02:78:21:21:ae:f0:21:
         38:e9:6a:e5:c7:01:b8:7a:c5:58:79:d8:8c:7d:c8:4c:af:d3:
         ae:57:e4:1f:16:63:84:46:a7:6e:41:e1:e2:6a:ad:40:4a:9b:
         30:55:bd:f9:26:c3:8a:e6:51:bc:57:7e:17:8f:47:04:4c:79:
         83:15:f9:1b:9c:11:fb:9a:e7:db:d8:1e:3d:88:2d:2f:a3:1f:
         f2:6e:9a:54:14:97:28:54:72:7d:01:62:8e:e1:86:95:b1:d6:
         88:30:4c:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKlzNFeQeXzrF+8rWIWgXHUQUkkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy
QzE3NzYzMTAeFw0yNTA3MjQwNTMzMjdaFw0yNTA3MjUwNzU5MjdaMDMxMTAvBgNV
BAMTKEQzREFCNDFDMDAzMUNCNjE1RjAwNEFFNTQwMTU3NzNDNTA5MTc2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0xia4mczZgiYrI5f5636tAPE
iPZt+eVj7qKGumwdqcwgGKAuICNX1gQDlcaPDqM63WNCwEd9pG4aneQ9OmvYXjxV
EduuY3DzwAmkU9PodaS4RP30Okxssf0MWj8JS3cohs6YkgrpW7ScFEzTCs8Qt5Uv
0SF4zs8u2BM08u65Qr/MC7e+0OF1y9ZmS1yPmdKpl39/MzfkqaD2DMY0UT1jixbM
P8coy1he6UN0WQOmJT3P3BtkjjD+hCdnhv0gT1ObmBSjQwDKmA/m2Kp6XC83gbb1
Jhk3JlGPgz6saN7JVaQ1dWP2y0JTzbW1tSHcTnRK3kg7Q0emHbzjoIcy5vFlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU09q0HAAxy2FfAErlQBV3PFCRdrcwHwYDVR0j
BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF
NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx
RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/v1KE
cBdABgsP5Vh0wgJZIILRmNf2ybRyBO/pwHr+JG9nKWSV84Dnw8VCYXd1QkBId0S6
UTGTiByClZRnBOj8m4KNYkWguB0wW4wPXrV49cLC2hRn2DGhywGJFHaAMazZ2iTt
9H9i3fp+uWfEM6Xv0fPGovSAB338JjhGBuyhVrrF+AITC2E8dK9NEY1/DCq1Bvf9
1QnPY3pYYgJ4ISGu8CE46WrlxwG4esVYediMfchMr9OuV+QfFmOERqduQeHiaq1A
SpswVb35JsOK5lG8V34Xj0cETHmDFfkbnBH7mufb2B49iC0vox/ybppUFJcoVHJ9
AWKO4YaVsdaIMEx7
-----END CERTIFICATE-----