Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
File:                     627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json)
Hash identifier:          QRtyfud8vj1XmuN/Z0YE1sYvViPb0YVcDKGEJDsF6ac=
Subject key identifier:   98:35:7B:24:5F:AE:15:79:FF:28:8F:A0:A6:B4:60:F4:DF:14:EF:A4
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Certificate issuer:       /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial:       5BBB50AE4C47D6155B7518F1F39BEF62E4373577
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
Manifest number:          011A
Signing time:             Thu 10 Sep 2026 08:42:24 +0000
Manifest this update:     Thu 10 Sep 2026 08:37:24 +0000
Manifest next update:     Fri 11 Sep 2026 09:17:24 +0000
Files and hashes:         1: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=)
                          2: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: 7SorltjaTC+doRG5ApJQhbgGvN9agLuEP5dwC0qO5wE=)
                          3: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=)
                          4: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=)
                          5: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bb:50:ae:4c:47:d6:15:5b:75:18:f1:f3:9b:ef:62:e4:37:35:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
        Validity
            Not Before: Sep 10 08:37:24 2026 GMT
            Not After : Sep 11 09:17:24 2026 GMT
        Subject: CN=98357B245FAE1579FF288FA0A6B460F4DF14EFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:71:bb:a7:4e:e8:ef:e2:7b:a5:56:73:4b:
                    bd:dc:fd:d4:7e:12:f3:84:10:a7:c4:ed:e1:1f:87:
                    82:8c:90:3d:ba:7c:ee:c9:b2:0e:c1:83:98:1a:26:
                    13:69:a4:81:48:0b:08:43:2c:d2:63:a2:4d:1a:a8:
                    90:4b:c2:d0:2c:e7:c3:d9:70:36:82:26:27:1a:cd:
                    59:11:16:35:ba:ba:71:a1:47:bb:10:92:26:d2:4f:
                    d3:82:47:cd:a3:75:59:2e:11:d5:e8:93:b6:62:ee:
                    6c:2a:79:a8:a3:08:7d:5b:32:b4:4a:dc:19:95:0c:
                    97:87:0d:0b:78:e6:00:9e:d2:dd:52:96:60:a9:88:
                    d6:33:35:58:3e:ea:5c:67:0c:a0:78:79:77:59:43:
                    f4:11:db:cf:bc:2b:b0:5a:d4:b0:e1:d4:41:a5:7a:
                    c0:8b:9e:64:4d:0a:21:dc:30:ea:de:5f:82:f2:25:
                    c6:f1:13:ac:5b:52:dc:57:d8:47:c9:49:b8:19:01:
                    d4:65:41:60:e1:b3:5f:61:cb:b3:01:d5:8f:35:45:
                    18:8b:d5:2e:f3:2c:21:8e:ad:5e:e0:d3:17:1b:7b:
                    0a:41:8e:26:21:be:5d:82:87:70:b1:f6:ff:96:29:
                    4d:90:b0:5b:5c:68:85:cc:a4:85:f1:f6:f9:f6:d9:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:35:7B:24:5F:AE:15:79:FF:28:8F:A0:A6:B4:60:F4:DF:14:EF:A4
            X509v3 Authority Key Identifier:
                keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:8c:4d:fb:24:25:67:31:f4:c5:dd:2f:77:d2:e5:61:24:
         26:88:39:e5:46:85:00:2d:05:75:15:04:ee:ef:6b:40:3b:a9:
         7d:9e:ba:73:79:bf:d5:56:04:07:68:74:78:1a:31:41:1d:4e:
         81:69:3d:80:e6:85:ac:af:ab:67:90:59:d5:fa:f4:3c:ee:cb:
         23:bf:9f:16:d2:86:36:84:8e:57:cd:ce:4a:9a:69:59:13:9a:
         93:e2:ab:50:1e:c0:24:89:fd:10:da:e3:ab:22:a5:22:07:cb:
         49:e9:59:fa:dc:49:d5:65:96:c6:2b:84:80:49:7e:45:86:bb:
         6b:95:15:12:f6:14:71:f1:b4:2d:da:89:6d:3a:87:0a:a8:75:
         88:b7:d0:dd:09:f6:e6:9c:fa:cd:8b:ef:4c:38:4f:18:c2:2d:
         e0:2f:32:fa:ee:81:04:5c:75:7d:0b:ef:80:14:59:47:5a:c4:
         94:82:c0:76:01:36:4e:05:b6:4d:86:ce:ef:0e:53:3c:64:1f:
         81:eb:08:3a:18:70:ce:68:6e:8e:f6:33:85:3b:64:43:46:c8:
         4b:bb:ae:29:b4:19:d5:9f:39:0a:36:3a:35:06:f3:91:35:4d:
         5f:9f:55:b8:71:be:9e:35:a8:c5:c6:e3:44:df:fc:c0:ab:1f:
         8f:45:cc:a2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUW7tQrkxH1hVbdRjx85vvYuQ3NXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF
ODJDRjZCRDAeFw0yNjA5MTAwODM3MjRaFw0yNjA5MTEwOTE3MjRaMDMxMTAvBgNV
BAMTKDk4MzU3QjI0NUZBRTE1NzlGRjI4OEZBMEE2QjQ2MEY0REYxNEVGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wnG7p07o7+J7pVZzS73c/dR+
EvOEEKfE7eEfh4KMkD26fO7Jsg7Bg5gaJhNppIFICwhDLNJjok0aqJBLwtAs58PZ
cDaCJicazVkRFjW6unGhR7sQkibST9OCR82jdVkuEdXok7Zi7mwqeaijCH1bMrRK
3BmVDJeHDQt45gCe0t1SlmCpiNYzNVg+6lxnDKB4eXdZQ/QR28+8K7Ba1LDh1EGl
esCLnmRNCiHcMOreX4LyJcbxE6xbUtxX2EfJSbgZAdRlQWDhs19hy7MB1Y81RRiL
1S7zLCGOrV7g0xcbewpBjiYhvl2Ch3Cx9v+WKU2QsFtcaIXMpIXx9vn22YvRAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUmDV7JF+uFXn/KI+gprRg9N8U76QwHwYDVR0j
BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh
ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2
N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2
MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8IYxN
+yQlZzH0xd0vd9LlYSQmiDnlRoUALQV1FQTu72tAO6l9nrpzeb/VVgQHaHR4GjFB
HU6BaT2A5oWsr6tnkFnV+vQ87ssjv58W0oY2hI5Xzc5KmmlZE5qT4qtQHsAkif0Q
2uOrIqUiB8tJ6Vn63EnVZZbGK4SASX5FhrtrlRUS9hRx8bQt2oltOocKqHWIt9Dd
CfbmnPrNi+9MOE8Ywi3gLzL67oEEXHV9C++AFFlHWsSUgsB2ATZOBbZNhs7vDlM8
ZB+B6wg6GHDOaG6O9jOFO2RDRshLu64ptBnVnzkKNjo1BvORNU1fn1W4cb6eNajF
xuNE3/zAqx+PRcyi
-----END CERTIFICATE-----