Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File:                     52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier:          qhlUIVyB93MsGA3KCLpvTGo1DqPj9IDRDINXLOCBL9g=
Subject key identifier:   9E:17:8B:7A:2D:79:29:F8:09:9D:E6:2A:AA:12:7A:B7:19:74:46:A5
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer:       /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial:       77DD829524A173AB9211DA1FCD00CBCAD021F5D5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number:          0235
Signing time:             Fri 24 Oct 2025 11:46:10 +0000
Manifest this update:     Fri 24 Oct 2025 11:41:10 +0000
Manifest next update:     Sat 25 Oct 2025 14:12:10 +0000
Files and hashes:         1: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=)
                          2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=)
                          3: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=)
                          4: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=)
                          5: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: sQlEObCfu7VgcWESWwpS41/DIbU7Wue5pM9I59ovTO4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:dd:82:95:24:a1:73:ab:92:11:da:1f:cd:00:cb:ca:d0:21:f5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
        Validity
            Not Before: Oct 24 11:41:10 2025 GMT
            Not After : Oct 25 14:12:10 2025 GMT
        Subject: CN=9E178B7A2D7929F8099DE62AAA127AB7197446A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:06:73:7c:a6:5b:7f:5c:67:61:38:59:81:
                    51:ea:a8:00:be:ac:e3:93:66:94:7e:32:95:2a:75:
                    1d:92:26:af:90:30:0a:41:83:81:f8:9b:8b:ca:d2:
                    fa:1a:a3:34:6c:5c:97:db:0f:9d:ef:8e:07:88:96:
                    4e:93:17:ce:4f:6b:36:70:33:24:57:2f:45:12:0a:
                    97:94:21:3c:ab:d5:7e:d5:83:48:64:85:14:81:d6:
                    ca:3e:ee:46:4d:6e:ad:58:a2:52:a5:a5:1c:99:b9:
                    0a:f6:02:fc:72:e6:34:5a:4d:35:44:d2:4e:fc:03:
                    69:d0:06:44:24:4b:4e:58:42:46:04:4c:26:16:45:
                    e9:0c:a5:a7:d2:c6:6b:f8:36:dd:fd:7b:f6:3b:35:
                    9a:83:57:f2:38:78:80:44:9c:6a:d5:1d:9f:e9:aa:
                    79:ef:7b:b8:b2:e2:3c:68:b6:25:ba:7a:0f:75:21:
                    22:54:fa:dd:f5:dd:86:97:91:65:fa:54:eb:30:b2:
                    91:55:a1:4b:6e:59:e7:94:9c:7c:82:5f:5c:7a:50:
                    11:04:2e:26:97:f3:87:4b:2a:9e:72:94:1c:39:2e:
                    d1:f4:ad:4c:3b:e2:a9:6c:29:eb:83:4f:f3:d7:b7:
                    5e:20:00:87:23:d7:d4:fe:0a:ec:1e:11:f8:88:5e:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:17:8B:7A:2D:79:29:F8:09:9D:E6:2A:AA:12:7A:B7:19:74:46:A5
            X509v3 Authority Key Identifier:
                keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:fe:3d:c0:f6:60:99:92:10:c7:f3:11:c3:53:58:e1:0b:
         9b:12:8d:86:59:c5:6a:87:8f:d0:0c:77:ec:39:da:95:f1:4f:
         7f:de:25:e0:03:19:d0:d3:31:47:73:6a:f2:9a:2a:35:49:0c:
         b2:0b:d4:5e:06:0b:83:b8:3e:1e:91:98:4b:47:50:11:29:63:
         44:b8:3d:66:fa:af:02:22:45:be:b4:28:6b:41:82:89:03:89:
         9c:a0:f6:10:64:cc:5e:33:72:69:3d:c8:f6:84:d6:e0:3b:ef:
         ca:c5:bd:0d:aa:f3:ba:5f:03:0c:9f:eb:f3:63:ca:d5:7f:93:
         8f:91:d3:a4:f3:c4:11:82:bc:6c:98:5e:2f:df:ff:15:0f:6e:
         b6:99:6e:bf:19:b7:c0:03:4c:20:4b:2b:0e:89:a8:c6:6c:cd:
         e8:3b:82:81:db:16:aa:dc:33:24:22:e5:89:fe:05:04:75:01:
         62:18:4c:98:ea:1d:ee:7c:16:61:81:7a:e6:c0:a7:c9:80:49:
         bc:ce:d5:6e:25:f4:4e:82:24:f5:61:8a:5b:de:90:29:e7:61:
         52:e1:f6:1e:dd:db:03:ff:36:70:62:0a:5c:86:b0:0e:98:86:
         64:97:76:56:74:7e:9f:21:dc:93:ad:35:44:8c:d8:90:a4:05:
         95:29:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----