Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft
File:                     C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft (raw, json)
Hash identifier:          7Jmt9K6Df5RyFKC4BxUZmvbgN2ly/nwU5k9sIhR+SDI=
Subject key identifier:   8D:7E:FE:83:61:BE:08:3F:D8:24:9E:C2:42:AA:1B:12:30:8B:F1:48
Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0
Certificate issuer:       /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0
Certificate serial:       5360D793DA125523F3F44891C5C104A5BF6C9E90
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft
Manifest number:          4E
Signing time:             Fri 10 Apr 2026 03:17:51 +0000
Manifest this update:     Fri 10 Apr 2026 03:12:51 +0000
Manifest next update:     Sat 11 Apr 2026 06:05:51 +0000
Files and hashes:         1: C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl (hash: +Co8UkrNGtZ9Z+igOuACz+TqZS8ljiBw55FO8Ugmhog=)
                          2: 326130623a346530373a62333a3a2f34382d3438203d3e20323031333938.roa (hash: qsLlFxGXc9WfPWNVKXZeaayMCuoiW6Y+K24Q7W63kCI=)
                          3: 326130623a346530373a62313a3a2f34382d3438203d3e20323031333938.roa (hash: 1RCf60dXQ/oUKmGHAZtweCBKcxHUn9CNbfMBr9zQkkk=)
                          4: 326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa (hash: /uTqT5JLie3E28kiPUEQaB1WxPf4ESjtP7GgXWWmEIg=)
                          5: 326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa (hash: Vj8pBup2nRsVCRRZZonBMO1mLcSOjU3VQ9IXLrIX7W4=)
                          6: 326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa (hash: LS3BrlYZK8SbNX6J/CClnGQfo8ZO+l7g9dfo7FOeS6Y=)
                          7: 326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa (hash: v7UO4M6SMwywlzOBSeY802VXKxb7Hc4PkISYovezxNY=)
                          8: 326130623a346530373a323030303a3a2f34382d3438203d3e20323031333938.roa (hash: pNk3stE2biT30Fr/pVyzBAKYs6S5o79kFdYQqd+736w=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:60:d7:93:da:12:55:23:f3:f4:48:91:c5:c1:04:a5:bf:6c:9e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0
        Validity
            Not Before: Apr 10 03:12:51 2026 GMT
            Not After : Apr 11 06:05:51 2026 GMT
        Subject: CN=8D7EFE8361BE083FD8249EC242AA1B12308BF148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:25:d4:87:49:11:f7:3d:8e:e8:82:c6:51:
                    29:41:21:fd:49:cb:e3:f7:11:b6:b5:9a:a2:92:a2:
                    e8:ca:f5:8b:c8:be:a6:9a:2d:ba:da:d3:03:a9:ce:
                    2f:a3:1c:a8:8a:31:6b:aa:be:3f:ca:cc:20:e0:6f:
                    f5:53:d0:27:16:23:31:6f:b0:00:1d:1c:0d:e0:ab:
                    2f:42:aa:8f:29:2a:3e:97:7f:21:ef:aa:87:59:5a:
                    0a:de:60:03:42:55:61:6a:40:7a:6f:64:2a:f1:ba:
                    03:c0:24:60:e4:f1:ea:87:c4:50:df:84:5f:27:29:
                    87:7d:5e:dd:f1:6f:97:b8:e8:ee:0d:df:81:8f:b9:
                    7f:f2:2c:3b:34:32:6d:e6:42:c4:71:a9:9e:17:ad:
                    1f:37:a5:ab:16:7f:31:05:9c:65:e7:98:8e:34:fe:
                    15:2a:f4:15:14:69:f0:82:89:af:a6:aa:f4:9f:53:
                    72:2e:fd:83:60:f5:3f:b2:37:fe:04:ae:cc:e1:34:
                    e9:3b:64:c0:28:d8:4d:7c:fc:82:b4:12:24:b5:c8:
                    cf:3a:01:cc:d4:9a:78:ca:b5:52:b1:dc:61:a7:0e:
                    ec:f7:00:c8:7c:0f:a0:0e:7a:f6:ae:8c:de:84:f7:
                    a9:0f:9c:81:66:1e:f5:55:88:92:c7:44:f2:5c:17:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7E:FE:83:61:BE:08:3F:D8:24:9E:C2:42:AA:1B:12:30:8B:F1:48
            X509v3 Authority Key Identifier:
                keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:86:71:d1:59:e8:0d:b4:4b:1b:2f:5c:b0:d6:79:7c:1a:1a:
         89:1f:bf:16:e4:c7:b5:35:9d:bd:e3:a9:c5:b7:c7:3b:6d:a2:
         26:a4:ed:a6:5b:a3:21:86:70:a9:b6:c8:e3:2d:f6:d1:3c:38:
         34:24:e1:af:8f:0f:54:96:a1:c0:2e:1b:c7:a3:1d:c3:b0:fd:
         f0:97:1b:7f:c7:9a:b8:8b:cc:ea:d9:ed:7f:a6:e3:49:13:8d:
         bf:2f:a1:ac:70:c6:a2:89:1d:a6:c8:d8:2b:a7:8d:80:d2:4c:
         1d:3c:76:61:a9:38:57:96:60:b1:bf:f0:94:22:f6:e6:65:ee:
         ab:e7:91:5f:8e:c3:9e:b1:2a:2e:a4:28:55:06:de:9e:1e:9d:
         88:c2:8d:96:37:78:29:fa:ea:9a:c3:e7:db:ea:ed:63:7a:c8:
         9f:9f:b3:63:40:5f:81:0b:dc:8c:1b:25:15:11:73:74:c2:00:
         24:00:16:59:99:8f:e2:f1:b0:23:79:57:6b:da:79:4b:d3:0d:
         11:b1:cf:1c:b3:8b:70:1a:7d:c8:a8:1b:db:b2:f1:2b:4c:88:
         53:2d:08:4c:e7:9e:73:0b:16:38:2c:c1:59:37:57:65:ab:93:
         0b:4c:e6:54:42:0a:12:6b:00:31:5e:5a:bf:47:ff:9e:a5:a3:
         24:89:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:38:58 2026 by rpki-client