Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
File:                     946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json)
Hash identifier:          ts2h22CjGbSfU4fO6s7a5+PGf42DBXDkzs1uFwmh0rw=
Subject key identifier:   4B:DA:42:E7:F6:DC:0E:DD:A4:B8:B4:B8:50:EC:F8:D8:6B:E6:0C:4F
Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C
Certificate issuer:       /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
Certificate serial:       03719D076B5100B9DACB10CF3EED92370A0CE3D5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
Manifest number:          D3
Signing time:             Sun 28 Sep 2025 20:15:22 +0000
Manifest this update:     Sun 28 Sep 2025 20:10:22 +0000
Manifest next update:     Mon 29 Sep 2025 23:16:22 +0000
Files and hashes:         1: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: tXamDZPA8E57C6PGfhObf/wjupLtZiXn2F8mfaX0X0s=)
                          2: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=)
                          3: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=)
                          4: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:71:9d:07:6b:51:00:b9:da:cb:10:cf:3e:ed:92:37:0a:0c:e3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
        Validity
            Not Before: Sep 28 20:10:22 2025 GMT
            Not After : Sep 29 23:16:22 2025 GMT
        Subject: CN=4BDA42E7F6DC0EDDA4B8B4B850ECF8D86BE60C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:3f:3e:73:b8:0f:c1:84:74:31:d2:a5:90:
                    d8:cf:37:74:38:83:51:f9:50:85:e2:11:78:a3:78:
                    c3:d5:9a:aa:0d:f8:77:6c:e7:f6:23:2b:c3:cd:bc:
                    bc:f4:9a:fb:b0:9a:c4:e4:d8:89:6c:aa:00:ed:26:
                    09:51:d3:b9:62:4b:5f:e0:66:02:96:2c:02:88:a8:
                    0d:34:45:33:8b:10:10:bf:46:71:74:fa:1a:a3:71:
                    ae:90:a2:51:67:ee:f9:26:26:3c:6c:82:5b:bd:db:
                    8e:9a:28:6f:a9:37:cf:9c:2b:1d:d1:7e:2e:8a:a7:
                    93:00:99:13:d4:20:9d:68:4a:01:15:32:9b:35:0b:
                    ff:ef:90:4a:3e:4b:45:fb:2e:e7:7c:67:c4:d0:02:
                    e6:ca:5f:1c:4b:e4:be:72:4c:af:ae:f7:4c:c1:49:
                    4b:05:88:69:2b:53:09:bd:18:04:56:03:66:88:7a:
                    3c:e3:4d:11:50:18:9b:18:f8:b4:34:e7:13:5b:3d:
                    b5:a9:e8:42:4f:61:7d:81:09:08:d9:47:7b:7b:a1:
                    71:e3:1a:36:48:fe:7a:7a:7d:e9:d3:92:70:6f:5e:
                    0c:d8:73:9c:42:ed:2b:77:88:25:b5:d2:96:bf:ca:
                    bd:a0:d9:c2:8e:cc:05:98:b1:d3:34:6a:02:ef:b1:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DA:42:E7:F6:DC:0E:DD:A4:B8:B4:B8:50:EC:F8:D8:6B:E6:0C:4F
            X509v3 Authority Key Identifier:
                keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:af:08:bf:78:8e:53:0e:91:81:cb:6e:f4:c4:e2:71:64:2f:
         9a:7a:cc:00:6c:95:23:5f:81:8f:bf:5a:1a:04:0c:10:37:48:
         1e:d0:7b:b7:ea:f0:41:d8:95:59:de:90:ea:b8:f5:51:5d:3e:
         9f:b0:19:86:ac:eb:97:0e:6d:93:39:5b:06:6a:65:fb:15:81:
         a7:b7:8b:54:e3:91:75:ac:6e:6c:2d:04:eb:f6:83:be:a3:84:
         ff:e8:f5:8e:6f:86:c7:2e:f0:64:64:e0:51:12:bc:6b:2f:79:
         70:84:96:53:b7:0e:ba:a1:9a:3a:ba:12:2f:0e:a3:10:fb:e2:
         e8:ea:73:33:f0:87:ff:6a:36:31:3c:df:0f:19:42:ed:ea:1e:
         1d:34:14:4d:2e:6d:79:8c:d6:c2:72:e4:7b:98:ff:1b:7a:9a:
         37:cc:1d:b9:b1:c4:4f:2f:cd:a4:cb:aa:77:90:c6:89:cf:71:
         81:ab:60:18:1e:86:b4:da:01:04:2a:c6:24:cf:ec:e0:21:df:
         af:63:ef:e4:d8:d7:7b:0c:37:21:ae:d8:5d:7d:a1:c9:d2:c6:
         c9:b1:59:c2:53:7e:d3:38:75:80:22:26:ea:5d:c8:78:b4:d0:
         47:b3:43:9e:00:fb:26:e3:af:8a:24:15:ea:f3:03:e8:d1:8f:
         e4:b5:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----