Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.mft
File:                     F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.mft (raw, json)
Hash identifier:          jCCmtDRfEUpxz3652fTYg3qy1QqJ5px/64cOt/HkEdM=
Subject key identifier:   26:0F:44:29:6D:D0:95:93:19:39:F3:05:AE:CF:D3:F8:92:2A:2B:64
Authority key identifier: F8:2D:B5:B5:89:74:CF:2B:03:B7:6E:AB:1A:F5:61:75:7A:30:EE:F0
Certificate issuer:       /CN=F82DB5B58974CF2B03B76EAB1AF561757A30EEF0
Certificate serial:       44AE93A8B526CFF3A1F85040B01C6817E4B6C24D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.mft
Manifest number:          2C
Signing time:             Mon 15 Jun 2026 05:56:11 +0000
Manifest this update:     Mon 15 Jun 2026 05:51:11 +0000
Manifest next update:     Tue 16 Jun 2026 06:47:11 +0000
Files and hashes:         1: 326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa (hash: 8/gVZBZbIp00Q6ELS3oJPQwcCvMRqlLIxLZkJm+1cL0=)
                          2: F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.crl (hash: Z6EXjP114BmRO1KTB7IFS33K062E2drbMx49eVSQ/4E=)
                          3: 326131333a633863343a613030323a3a2f34382d3438203d3e20323134353536.roa (hash: nWe9guTOGH4/p+g/y62El7bJKMpQWTGtoUWMprGwv34=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ae:93:a8:b5:26:cf:f3:a1:f8:50:40:b0:1c:68:17:e4:b6:c2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82DB5B58974CF2B03B76EAB1AF561757A30EEF0
        Validity
            Not Before: Jun 15 05:51:11 2026 GMT
            Not After : Jun 16 06:47:11 2026 GMT
        Subject: CN=260F44296DD095931939F305AECFD3F8922A2B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:f9:0b:6f:20:96:a9:a2:dc:2a:18:14:65:
                    ac:06:7a:c7:9c:ca:67:bc:aa:f2:d3:7d:9d:ed:a0:
                    88:b1:78:e2:39:9f:93:a0:61:2b:8e:58:6c:38:35:
                    df:d1:6c:6e:79:29:ad:d7:e4:a3:35:7b:56:58:8e:
                    c8:c5:c7:19:da:f2:eb:de:17:c0:67:73:61:6c:a9:
                    ba:2d:a5:2b:1f:5a:65:fa:41:24:36:c3:d6:73:8a:
                    15:03:2b:17:39:de:0d:89:76:87:53:0f:78:33:ea:
                    de:8e:aa:9e:a2:24:39:28:d6:3d:ea:03:1d:c6:48:
                    f2:e7:51:9c:ae:f1:a3:91:35:78:2d:b2:69:42:fa:
                    d5:46:fb:27:5d:66:f3:87:10:65:5f:90:1a:21:a2:
                    ab:7f:d0:55:e8:26:77:2a:4f:7c:bd:85:a9:cd:71:
                    45:a5:6d:87:7f:30:40:cf:a6:e8:9f:b8:58:cf:c8:
                    85:d5:c5:d5:61:f6:5d:bc:99:8c:e2:72:4b:62:aa:
                    fa:c9:f1:59:23:f6:fe:d9:10:38:18:9a:c9:37:10:
                    92:a1:ad:f9:37:c5:2c:03:d7:f8:c6:18:a4:18:15:
                    b6:be:32:41:79:ba:f0:5c:58:7d:ab:84:7a:30:fe:
                    c7:69:cc:98:c2:c5:55:22:86:b3:16:b2:7b:f8:5b:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0F:44:29:6D:D0:95:93:19:39:F3:05:AE:CF:D3:F8:92:2A:2B:64
            X509v3 Authority Key Identifier:
                keyid:F8:2D:B5:B5:89:74:CF:2B:03:B7:6E:AB:1A:F5:61:75:7A:30:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/1/F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:43:f6:e4:ea:e3:dc:dd:df:19:48:01:59:7b:b3:89:ed:4c:
         0d:14:1e:fc:38:fb:18:63:1c:fa:95:bd:f5:02:40:c6:2c:8a:
         ef:25:ae:66:07:d3:c6:51:fe:ed:68:8f:e0:9d:e9:aa:e5:ad:
         57:4a:64:0e:a5:34:87:15:3c:18:a0:f0:17:ec:92:9d:80:4b:
         18:0f:4c:7b:a9:7c:de:9d:c0:fd:d9:69:17:a2:31:ea:c0:51:
         52:00:0e:72:df:19:12:06:b6:56:ab:c8:98:78:94:4c:08:ca:
         97:aa:ed:43:17:8b:4d:a6:bb:37:b5:e9:f7:ba:2b:fe:c5:38:
         0c:a4:8e:37:4d:ad:1b:65:52:53:a6:50:84:04:1a:ac:83:fd:
         85:56:3d:84:43:e5:86:44:2c:79:97:fa:5d:30:5f:65:d6:24:
         9c:1c:ae:8e:36:3b:9e:1e:b6:cd:72:ce:a7:46:c9:0a:9c:f5:
         3d:5c:f5:c0:dd:25:2a:01:1c:58:5b:0e:8e:80:ef:a2:85:ec:
         97:91:22:4b:87:47:44:6c:57:b2:bb:eb:c3:8a:64:8a:60:5b:
         41:54:0b:89:02:34:81:07:c6:6b:9c:1a:a0:a3:1d:26:15:bc:
         93:7a:fb:ef:8b:f4:76:7e:84:bd:01:fc:b5:78:6f:ff:ca:c0:
         ba:b1:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----