Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File:                     A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier:          ryIwy1S1iDZOMXgECXJla3E/GtnNHwiahS9KU4Qp1CE=
Subject key identifier:   93:21:91:D8:19:91:76:97:D9:F8:13:D1:10:1D:2A:C4:79:7A:A1:4C
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       057D85BFAC6D1B8C5A54D8753AD346E3D956B737
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number:          022D
Signing time:             Wed 23 Jul 2025 21:00:40 +0000
Manifest this update:     Wed 23 Jul 2025 20:55:40 +0000
Manifest next update:     Thu 24 Jul 2025 23:50:40 +0000
Files and hashes:         1: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
                          2: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
                          3: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
                          4: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
                          5: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: WHvD1+zaGetjDI1JT1nVIexRGdKw2+a/PYhsItwgEMQ=)
                          6: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
                          7: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: vpFkcPB4ncBh9VZRsIiAgJdk+akiA1X6oI9yFkMsGRg=)
                          8: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
                          9: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: HxvdekWDniqUROXJ3YOPd7kMDR81qja1R4es7Rc0gNE=)
                          10: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
                          11: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
                          12: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
                          13: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
                          14: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
                          15: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
                          16: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7d:85:bf:ac:6d:1b:8c:5a:54:d8:75:3a:d3:46:e3:d9:56:b7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Jul 23 20:55:40 2025 GMT
            Not After : Jul 24 23:50:40 2025 GMT
        Subject: CN=932191D819917697D9F813D1101D2AC4797AA14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:5f:7f:f5:ff:9f:93:c4:8c:8d:ed:b4:85:
                    00:56:2b:fc:92:64:f7:1a:5d:d0:f5:25:98:43:61:
                    b8:c8:f8:d7:a4:5b:f0:31:1c:10:af:b0:47:92:7b:
                    72:48:7a:8a:95:31:63:fa:6c:00:e3:de:8a:96:7d:
                    3b:1b:ca:4b:79:21:85:dc:1b:32:ba:f6:af:50:cd:
                    93:ad:04:fa:35:d1:95:14:4c:77:2f:51:d0:c2:3e:
                    5a:a2:5a:2c:e2:29:54:f1:e0:09:b7:06:dd:62:e1:
                    d5:27:69:84:f9:ec:19:43:e1:19:9d:92:60:36:95:
                    86:63:38:fb:1a:4b:dc:36:f9:1e:52:c9:68:53:22:
                    1f:5f:a6:dd:74:e8:ed:60:ae:59:75:15:6c:8f:4e:
                    be:06:02:d1:9e:5e:2d:e8:00:55:e7:14:3d:4a:f2:
                    58:31:00:16:36:92:13:fb:8b:ef:ea:fe:5d:66:73:
                    47:22:ec:3b:8b:5e:62:35:4e:04:22:cd:92:5a:8c:
                    7f:74:3c:fe:34:a5:da:00:44:dd:d2:27:24:67:f4:
                    44:13:53:50:dd:c8:8f:72:aa:24:2d:28:32:ce:c1:
                    d6:76:aa:0e:c1:0a:1b:bb:82:02:77:2c:f6:54:50:
                    5a:86:f3:a7:5d:eb:35:81:26:41:8b:dd:59:00:07:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:21:91:D8:19:91:76:97:D9:F8:13:D1:10:1D:2A:C4:79:7A:A1:4C
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:da:c2:44:aa:80:e7:c6:42:4b:96:77:32:40:37:76:a7:
         5c:2b:da:8f:a5:5a:27:c2:6e:6c:fe:71:04:6f:b8:07:6c:11:
         71:a0:8a:ee:f6:ac:0f:d6:bd:1a:f5:fb:39:e9:9b:bb:4f:0c:
         d1:99:2d:e9:3b:93:91:7d:bb:88:94:21:23:7f:81:e3:96:eb:
         e8:ea:06:29:59:5a:81:e4:a5:6e:70:fa:21:1c:d4:2f:bc:f7:
         db:bd:f4:f9:d0:e6:b2:23:44:51:17:70:6e:6c:e6:25:85:96:
         e1:c7:e7:e2:c8:76:0c:e2:ad:38:bd:db:13:9e:1d:db:eb:be:
         e6:4d:5d:a0:d7:9a:08:ed:f0:02:c8:9b:30:70:42:f7:59:c3:
         bc:00:ed:a6:0b:e6:d2:dc:ac:4e:b0:41:ec:1b:92:6f:71:06:
         59:ea:f6:8e:a0:1f:f4:af:a0:e5:b5:cc:40:6b:f9:04:c0:6a:
         97:f5:0e:72:9a:95:5f:61:9f:75:fc:60:42:75:f2:ca:a7:e5:
         d9:82:4a:e7:07:70:df:c6:a0:b6:4e:7a:e3:5d:48:ea:0b:20:
         b4:7b:05:b5:b3:cc:51:38:c7:09:a4:b8:7a:1e:e7:38:65:f2:
         f5:7f:5c:c9:5a:bf:68:44:07:4c:21:be:da:b4:03:7a:b6:9d:
         69:ba:97:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:18:57 2025 by rpki-client