$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: E+oVKyJ5wZy+XvxDpBr1Hylk04mXTK+J7/SxeOvx80Q= Subject key identifier: 33:04:A1:19:0B:DC:F8:DA:E4:2D:27:1D:BB:ED:4F:A6:1C:E1:97:00 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 0CF970B41F6E0E2A30C57A10B59CD6C61CB5EE62 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 0271 Signing time: Thu 02 Oct 2025 18:24:08 +0000 Manifest this update: Thu 02 Oct 2025 18:19:08 +0000 Manifest next update: Fri 03 Oct 2025 19:59:08 +0000 Files and hashes: 1: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 2: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 3: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 4: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) 5: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 6: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 7: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 8: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 9: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 10: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) 11: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 12: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 13: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=) 14: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 15: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 16: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 17: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 18: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) 19: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: 43FaPLC73e17pUEoSiLL/LmQNAxbqtdOEDZWBUwo+/o=) 20: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:70:b4:1f:6e:0e:2a:30:c5:7a:10:b5:9c:d6:c6:1c:b5:ee:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Oct 2 18:19:08 2025 GMT Not After : Oct 3 19:59:08 2025 GMT Subject: CN=3304A1190BDCF8DAE42D271DBBED4FA61CE19700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:a4:a7:01:99:90:bd:f5:b7:64:78:64:91: 82:24:65:ea:20:e1:68:ff:41:97:33:c5:65:68:68: 0a:29:86:0a:84:18:70:5b:2c:fc:62:f2:3b:67:cc: f6:81:52:39:b7:08:d3:43:72:e6:53:f1:17:3d:d3: eb:13:18:6b:83:18:1c:76:9d:90:d1:4f:b8:53:8f: 62:1a:ae:9b:e4:dc:78:76:04:de:61:7f:d5:9e:36: 8e:64:e9:2d:3f:49:18:fd:1f:89:09:84:f8:fe:8a: f3:22:ca:25:12:36:bd:40:4c:19:89:ef:fe:ea:c7: ef:30:5c:3f:ee:27:c5:94:28:4c:49:22:7f:fa:c0: 10:af:ce:36:92:15:29:1b:7c:69:6a:33:70:41:3a: f7:fd:56:37:22:c4:bd:3e:e1:1d:ac:7e:b5:f2:f4: a9:2a:08:79:fd:d6:a7:69:b4:bb:69:c7:0d:88:90: eb:c6:22:df:01:cc:73:35:a8:5c:c6:24:b1:c8:68: 7e:fa:22:d6:a4:1d:c9:5f:f8:9a:89:42:89:41:6f: a6:4d:0f:90:a7:d1:a6:0b:b6:e1:5d:52:66:2c:57: 9d:b8:9b:e4:56:9a:b2:61:9e:40:3e:3f:74:3a:1b: 0d:25:32:46:57:82:9b:df:3a:e2:65:37:88:30:97: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:A1:19:0B:DC:F8:DA:E4:2D:27:1D:BB:ED:4F:A6:1C:E1:97:00 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ed:cb:db:55:d1:66:77:4a:d5:3b:ed:3d:20:d6:9f:56:c7: aa:e2:95:ed:0d:32:29:06:80:f2:2c:06:c7:b1:89:ae:e4:50: c8:5e:01:2b:47:d3:40:97:e4:3b:77:51:58:2e:e1:ff:99:72: f7:96:34:e6:da:8d:21:1f:5e:1b:48:ea:ab:06:83:79:fb:7c: 67:2a:38:be:e0:ba:42:59:dd:fc:bd:9a:ed:c1:d9:da:56:29: 5c:58:c6:c1:67:a9:b5:01:2f:be:30:41:e9:09:d6:c7:e4:d4: 0a:ce:0e:4a:ea:50:4e:33:66:ee:6c:1f:43:99:83:12:4e:3d: 92:1d:87:3d:ee:17:04:d8:8d:98:e3:b3:9d:88:d1:47:c0:81: 9f:07:8a:d7:0f:b7:a1:ba:5e:5e:51:1a:72:a5:27:78:21:66: af:a5:84:22:c6:ea:19:71:fa:5e:79:1c:b4:c6:9c:38:e1:f7: 38:93:08:0a:bc:b7:f5:3a:cf:f6:b2:90:85:a0:d3:52:49:bb: 51:14:c4:d1:5b:5b:8f:e3:d7:46:5a:e3:bb:65:73:e0:70:d3: 39:78:29:1c:8b:67:93:a2:fe:03:30:26:c0:ec:ff:3a:3f:8a: 9c:78:93:47:0f:d9:1a:3c:a4:81:e6:23:49:3e:ec:06:30:d6: 2a:ff:c8:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDPlwtB9uDiowxXoQtZzWxhy17mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTEwMDIxODE5MDhaFw0yNTEwMDMxOTU5MDhaMDMxMTAvBgNV BAMTKDMzMDRBMTE5MEJEQ0Y4REFFNDJEMjcxREJCRUQ0RkE2MUNFMTk3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfKSnAZmQvfW3ZHhkkYIkZeog 4Wj/QZczxWVoaAophgqEGHBbLPxi8jtnzPaBUjm3CNNDcuZT8Rc90+sTGGuDGBx2 nZDRT7hTj2Iarpvk3Hh2BN5hf9WeNo5k6S0/SRj9H4kJhPj+ivMiyiUSNr1ATBmJ 7/7qx+8wXD/uJ8WUKExJIn/6wBCvzjaSFSkbfGlqM3BBOvf9VjcixL0+4R2sfrXy 9KkqCHn91qdptLtpxw2IkOvGIt8BzHM1qFzGJLHIaH76ItakHclf+JqJQolBb6ZN D5Cn0aYLtuFdUmYsV524m+RWmrJhnkA+P3Q6Gw0lMkZXgpvfOuJlN4gwl5xvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMwShGQvc+NrkLScdu+1PphzhlwAwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCk7cvb VdFmd0rVO+09INafVseq4pXtDTIpBoDyLAbHsYmu5FDIXgErR9NAl+Q7d1FYLuH/ mXL3ljTm2o0hH14bSOqrBoN5+3xnKji+4LpCWd38vZrtwdnaVilcWMbBZ6m1AS++ MEHpCdbH5NQKzg5K6lBOM2bubB9DmYMSTj2SHYc97hcE2I2Y47OdiNFHwIGfB4rX D7ehul5eURpypSd4IWavpYQixuoZcfpeeRy0xpw44fc4kwgKvLf1Os/2spCFoNNS SbtRFMTRW1uP49dGWuO7ZXPgcNM5eCkci2eTov4DMCbA7P86P4qceJNHD9kaPKSB 5iNJPuwGMNYq/8hx -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:47 2025 by rpki-client