Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
File:                     67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json)
Hash identifier:          rBCGOh7lcYhZePahmoOLBczLlXBLziSL7xMsYPb0Ehw=
Subject key identifier:   38:83:2E:02:27:27:81:2A:C9:A8:6B:A2:69:64:D9:00:2A:66:56:0C
Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F
Certificate issuer:       /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F
Certificate serial:       014C86E48B1F916E8740C70014EC968344F849CB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
Manifest number:          B5
Signing time:             Sun 07 Jun 2026 06:28:26 +0000
Manifest this update:     Sun 07 Jun 2026 06:23:26 +0000
Manifest next update:     Mon 08 Jun 2026 08:34:26 +0000
Files and hashes:         1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=)
                          2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: 05il6kMSml9HOQk6eIAPbJqt112813IgyJ2w+9X6UHs=)
                          3: 326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa (hash: HsNbgm9FBwJQ40ostKOzEgW08QTmjfOdpd4P4HHKnxc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4c:86:e4:8b:1f:91:6e:87:40:c7:00:14:ec:96:83:44:f8:49:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F
        Validity
            Not Before: Jun  7 06:23:26 2026 GMT
            Not After : Jun  8 08:34:26 2026 GMT
        Subject: CN=38832E022727812AC9A86BA26964D9002A66560C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:86:b2:24:50:66:50:8a:0e:27:21:b4:b4:
                    f6:2d:71:13:d4:1e:f5:3b:58:d3:5b:aa:08:57:37:
                    34:d1:92:a2:13:f4:23:4d:85:58:40:56:88:d6:7f:
                    72:11:34:4e:88:a4:98:36:83:38:90:49:b2:89:25:
                    b3:09:07:1d:10:1a:ff:dc:76:0a:ca:a3:fe:5a:b9:
                    7f:88:40:60:38:8e:7f:68:26:d2:3b:32:f4:86:1e:
                    fb:a8:8c:25:e7:69:88:55:57:85:67:83:0e:c0:7d:
                    38:17:ba:1b:84:c1:43:8a:78:8c:e8:c5:7a:f4:ea:
                    8c:fd:4c:f4:ae:2d:78:87:00:08:06:95:68:69:7c:
                    25:96:2a:34:02:06:ec:cf:55:c6:7d:e4:fa:3a:38:
                    b7:f8:cc:82:8c:e9:e3:b4:65:e7:26:54:de:e4:e9:
                    a4:12:ee:2f:cb:45:5e:94:80:c8:bc:36:f9:fa:6b:
                    bd:ff:dd:8e:1c:a4:04:6c:44:78:f8:ea:6a:73:fe:
                    aa:0d:c3:9a:02:54:9c:35:d7:57:2d:d8:fe:3f:ca:
                    d7:d0:56:5f:f5:bf:1d:f0:ea:56:c5:ee:18:2e:c1:
                    10:81:6f:93:41:6c:ee:7d:0b:6e:f9:6c:03:4c:2c:
                    39:48:f1:e3:30:1c:63:d3:f5:14:a6:16:54:e4:1f:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:83:2E:02:27:27:81:2A:C9:A8:6B:A2:69:64:D9:00:2A:66:56:0C
            X509v3 Authority Key Identifier:
                keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:87:82:63:dc:2d:5f:bc:b8:f4:55:5c:de:0f:dc:54:60:c5:
         fd:7f:7f:d6:56:69:87:49:4e:88:a7:d7:39:96:a0:8b:f8:83:
         1e:54:5d:fc:7c:31:b4:0a:a4:14:82:ac:31:f0:b9:97:c5:10:
         1e:ba:ab:e0:2c:81:96:39:b4:16:2a:ae:30:1b:9c:a6:15:ca:
         c7:62:33:dc:6f:26:4a:67:61:8b:54:c0:d5:84:f4:9c:29:ea:
         42:a1:8d:46:88:71:6c:b0:3c:70:1f:9c:d4:bb:54:5f:5a:cd:
         ee:bc:1d:45:b5:f5:fa:c0:9b:5b:6f:e9:79:9e:19:13:b4:d8:
         4e:18:7b:d0:9c:a0:9a:05:56:54:ca:c5:c0:24:c4:35:e7:06:
         fd:d2:a7:41:fd:41:e5:db:e5:ae:8d:ff:fd:96:e4:79:f4:69:
         95:c7:e3:8a:b8:b1:63:59:5e:a7:ee:08:b1:21:91:5c:56:d1:
         3a:e6:b2:f3:c1:b1:d8:e0:94:99:c9:13:6a:97:13:20:c0:7d:
         9f:cf:29:60:72:32:f9:34:59:1c:13:88:71:c0:f6:56:53:5d:
         e9:05:02:6f:54:84:57:6b:41:1d:38:7c:f7:2b:8e:d7:c9:33:
         12:a0:09:09:4e:2a:d4:8f:49:98:2b:2c:51:72:74:86:74:57:
         61:85:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:38 2026 by rpki-client