Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft
File:                     DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft (raw, json)
Hash identifier:          xdNO3W3vtXREB6L9FpXImPEJ9yt+2X4nl1PrMvjcVU0=
Subject key identifier:   98:E2:05:AB:CF:02:7D:2B:E3:B9:B7:1E:37:D5:05:86:D0:49:91:37
Authority key identifier: DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1
Certificate issuer:       /CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1
Certificate serial:       378E23F2B925813BE3D991823F6FA46615708850
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft
Manifest number:          06
Signing time:             Mon 14 Sep 2026 10:26:17 +0000
Manifest this update:     Mon 14 Sep 2026 10:21:17 +0000
Manifest next update:     Tue 15 Sep 2026 11:11:17 +0000
Files and hashes:         1: DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl (hash: cwfAryA7n3Y4pRdIHYaeSD/H5F33917yzehuiU4ZScE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:23:f2:b9:25:81:3b:e3:d9:91:82:3f:6f:a4:66:15:70:88:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1
        Validity
            Not Before: Sep 14 10:21:17 2026 GMT
            Not After : Sep 15 11:11:17 2026 GMT
        Subject: CN=98E205ABCF027D2BE3B9B71E37D50586D0499137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:fa:70:00:83:e7:52:b8:35:57:c1:ec:14:
                    1e:37:58:e3:63:89:c5:86:b1:66:70:59:e0:dc:4d:
                    8f:b4:b9:e8:ed:f3:b1:63:75:08:d8:f3:99:98:cd:
                    63:ca:33:66:df:4b:95:a2:8e:a9:f7:44:9a:f6:85:
                    11:68:cb:e8:5f:6d:3b:72:41:63:aa:f5:45:40:08:
                    30:c0:1e:3d:2f:eb:e0:2e:a7:c4:bf:e9:30:06:35:
                    d1:50:fd:7c:a9:6e:bb:bf:ee:8e:58:34:6e:e4:80:
                    a7:5e:82:ee:8e:cc:a7:89:3f:d5:f6:ab:2d:a1:53:
                    b5:a8:ab:68:3b:b1:b2:67:fa:c1:36:92:37:42:52:
                    cc:56:36:cf:ee:28:cf:64:cb:92:b2:93:71:12:7d:
                    87:8c:c9:2b:18:81:cd:61:a3:9b:ae:ed:a6:da:12:
                    be:cf:31:a1:57:77:4e:df:ed:89:82:30:3e:6e:10:
                    13:cd:9e:5b:9b:af:8b:1c:74:e1:e3:e1:de:5e:2e:
                    de:32:ac:e0:87:d1:4b:9b:b7:19:ee:01:5a:c4:41:
                    47:75:d8:d2:2a:fd:66:07:d0:62:05:1a:0d:07:c1:
                    d6:04:52:6c:9e:e2:63:5f:3b:53:42:d4:09:b3:6b:
                    33:d3:74:36:07:e6:eb:0f:32:44:6f:68:8c:13:e2:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:05:AB:CF:02:7D:2B:E3:B9:B7:1E:37:D5:05:86:D0:49:91:37
            X509v3 Authority Key Identifier:
                keyid:DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:1a:3c:4f:64:4d:e5:cc:b7:cf:4a:19:80:94:78:aa:12:
         82:c1:17:59:4a:05:71:15:67:91:48:5f:59:88:1c:51:48:f3:
         f4:9c:9c:f9:e7:ff:97:18:ec:86:04:3c:91:1a:8f:8f:1a:0f:
         36:d3:bd:5c:1b:96:8d:c4:f5:33:5d:fa:86:98:83:7a:86:bb:
         05:fb:c9:ea:53:7f:bb:29:c5:ec:89:c2:59:0d:8e:2a:68:60:
         92:69:10:47:17:ea:b6:88:e2:fe:03:e0:15:40:19:b7:5c:e2:
         01:69:7c:ee:9f:7e:f9:98:d0:cf:d7:c0:f2:b9:44:03:ec:a3:
         2f:ee:64:83:df:c4:62:d2:89:5f:d7:12:20:e1:95:2d:1f:53:
         51:99:f1:59:c7:62:0c:2f:6d:de:10:f1:e7:3e:63:6d:1a:27:
         36:ed:16:b1:f4:b0:54:be:bd:53:d4:35:92:58:8f:76:96:e3:
         fd:76:8c:eb:f2:81:6d:a8:a9:46:68:be:37:22:f4:61:b0:f2:
         95:d8:25:b8:58:9c:73:a0:6c:1a:e6:b2:03:24:ea:2e:c0:75:
         01:cd:03:46:b0:66:68:a8:13:b7:5e:41:00:61:6d:e8:ea:3d:
         b5:7f:80:97:a4:19:a2:85:a9:e2:f7:fd:68:ca:c1:54:e4:3e:
         f5:4a:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----