Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          5zRzi/jEhs4o8G8P3pyab9TvuB7X0i9lyul1TBm4vSo=
Subject key identifier:   BF:6A:33:E2:13:44:BC:14:21:A8:96:32:F9:C2:CF:50:F3:4F:22:F4
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       0169AC4C5761DD801FB8A364BD6AE855D3841980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          0301
Signing time:             Sun 29 Mar 2026 19:22:15 +0000
Manifest this update:     Sun 29 Mar 2026 19:17:15 +0000
Manifest next update:     Mon 30 Mar 2026 21:02:15 +0000
Files and hashes:         1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
                          2: AS215956.asa (hash: ucHv2FQnl2KJinSUsASgO1/usMeiJ+1dIwJYSf0kpKE=)
                          3: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: NXhFwHmKU+sa+LPApdUEUhr7MUWigBZj2s5mpN2eug4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:69:ac:4c:57:61:dd:80:1f:b8:a3:64:bd:6a:e8:55:d3:84:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Mar 29 19:17:15 2026 GMT
            Not After : Mar 30 21:02:15 2026 GMT
        Subject: CN=BF6A33E21344BC1421A89632F9C2CF50F34F22F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:49:eb:79:e5:17:e0:9f:87:ef:6c:bd:2d:
                    2c:f5:02:d5:54:0a:af:da:87:33:95:4a:d0:9e:a6:
                    91:79:f9:39:cc:4f:f8:70:45:9d:00:18:ad:09:98:
                    98:54:33:a4:b0:6f:a6:3b:b4:00:d1:f9:31:42:91:
                    e9:9a:0f:fd:31:1b:75:f0:cd:e5:a4:61:cf:c3:10:
                    bd:40:d0:c6:71:5d:c4:cb:f5:a1:1a:08:0d:7e:c9:
                    2e:94:3b:0a:99:c7:52:3b:e6:5c:8a:31:38:c9:75:
                    65:ea:3b:0e:cc:2a:80:48:18:f3:c2:77:c1:61:63:
                    d5:09:24:89:2d:4e:26:1e:34:3a:1c:81:be:fb:ae:
                    94:1a:0d:85:52:2f:1e:51:e1:ca:02:b5:b9:a8:81:
                    89:98:ff:63:10:d9:f0:c3:d9:c0:e7:8b:f1:49:69:
                    20:a2:cb:d5:fa:d0:87:fc:40:2d:d9:6d:f6:84:12:
                    f3:76:d4:90:66:4d:1c:a9:43:a7:07:a5:50:92:01:
                    12:04:dd:b3:a5:da:27:2e:50:93:a3:6d:01:a7:0c:
                    49:b7:08:66:42:5c:3b:89:78:c3:9f:05:27:a6:34:
                    fa:d2:d7:3b:17:fb:30:d1:f4:67:07:61:ba:7c:7c:
                    f6:f1:e8:98:e4:4e:3d:b3:98:de:70:9a:b6:3d:0c:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6A:33:E2:13:44:BC:14:21:A8:96:32:F9:C2:CF:50:F3:4F:22:F4
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b8:b8:c8:29:14:91:25:39:ca:f5:c8:be:2b:7d:ee:4b:fa:
         0c:a1:bf:9e:4d:a6:37:20:8a:7c:40:9c:5d:99:07:2e:13:68:
         2d:69:0d:cc:89:38:60:99:7b:8d:b1:d6:a5:02:08:fb:70:d4:
         b0:aa:ff:15:7a:dc:2c:f8:89:26:ff:63:3e:38:3b:b9:49:02:
         0e:c0:f8:04:2f:af:da:30:1d:b0:35:48:01:10:7e:e7:de:7a:
         46:de:6c:ae:f0:4c:a2:01:62:27:b3:15:54:48:67:cc:16:7d:
         96:4a:a9:9b:4e:43:83:ce:0a:4b:d4:73:f0:71:1d:c1:d3:13:
         d2:01:a0:40:01:f7:46:30:3b:fa:09:b8:1e:70:3f:25:99:10:
         f5:3f:9e:2c:bd:30:e1:f2:75:29:8c:ae:66:4e:69:6d:2c:7c:
         0d:b6:6a:a2:c2:82:60:a6:85:55:11:a7:e3:d9:bd:08:e7:96:
         24:b5:74:a6:b1:45:cb:c8:35:8b:be:d1:da:b5:8b:b3:33:1d:
         ba:1d:b3:53:ba:89:6c:f0:47:6e:f2:9b:83:dd:28:2e:da:ed:
         c3:42:39:72:e9:36:25:25:aa:a7:88:22:19:1e:fb:9c:e6:11:
         8d:34:4d:b6:54:03:36:39:c0:50:6c:ee:17:18:9a:ba:a5:43:
         1b:33:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----