Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
File:                     0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json)
Hash identifier:          KSQq9jWjauplTQRGRFw5i5Glopd6fuS27oJIvc53noE=
Subject key identifier:   00:11:6B:72:60:EE:72:F9:1B:C9:07:FF:2A:A3:E0:27:B3:FE:9E:28
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       7427E179CD4ABF08CAF4439BB02623DC701A7769
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
Manifest number:          DB
Signing time:             Sun 14 Sep 2025 09:25:53 +0000
Manifest this update:     Sun 14 Sep 2025 09:20:53 +0000
Manifest next update:     Mon 15 Sep 2025 09:28:53 +0000
Files and hashes:         1: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: d6ms+CWZuDscVXHj6eNPGqO+N8MPtCRQHjxf1HtjfgA=)
                          2: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: MyRRdkW1+AGEnYGT1RSFVrJIfWoNIsGh/5btpADuciE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:e1:79:cd:4a:bf:08:ca:f4:43:9b:b0:26:23:dc:70:1a:77:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: Sep 14 09:20:53 2025 GMT
            Not After : Sep 15 09:28:53 2025 GMT
        Subject: CN=00116B7260EE72F91BC907FF2AA3E027B3FE9E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:53:ad:dd:f4:55:4d:b6:16:a8:95:07:52:
                    b4:c0:5e:00:2c:69:cf:95:ba:dd:d7:bf:f1:ea:4d:
                    00:90:1a:00:7f:81:ec:72:37:41:0e:e4:20:de:e3:
                    f9:e8:fb:e9:c9:e1:f8:9e:c3:fe:3d:10:80:7c:c3:
                    e0:32:e2:f4:a6:14:2e:68:18:92:cb:5b:dc:41:a1:
                    64:af:d5:58:5c:58:4f:60:c0:19:83:fd:33:b5:98:
                    23:11:a5:c5:49:43:24:3d:39:03:12:e3:47:06:68:
                    c7:20:02:68:3c:9a:59:29:d2:ce:4e:00:c3:d8:87:
                    0e:74:27:44:1d:38:7b:08:f8:9f:c0:ab:52:84:d1:
                    c5:64:8b:cd:c6:71:b8:be:25:ca:8a:0d:51:b5:2e:
                    92:b5:17:85:41:39:49:7c:39:6d:f7:c1:db:5b:33:
                    ab:06:c8:d8:de:8f:98:2c:df:96:eb:59:77:9f:0b:
                    23:9a:c8:39:73:fa:11:15:45:2a:bc:76:ad:1b:be:
                    58:6f:75:84:6e:45:14:d2:6f:98:e3:9f:39:2b:5c:
                    cc:ea:54:da:1e:e8:06:80:b3:b6:c8:49:24:ef:5f:
                    e4:ae:aa:41:d5:c6:db:19:15:2b:5e:7f:50:6f:93:
                    5f:34:02:6e:71:d8:19:03:f1:ae:a9:46:28:1b:af:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:11:6B:72:60:EE:72:F9:1B:C9:07:FF:2A:A3:E0:27:B3:FE:9E:28
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:0f:ee:f3:25:9b:33:ed:f2:e6:1c:7c:49:84:7c:9e:f7:9b:
         f3:ad:a7:8e:b2:43:ef:4d:cd:19:2f:52:6d:ec:53:9d:5e:f6:
         0c:8c:c0:5a:f7:58:a5:29:f9:fe:fd:92:36:c4:fb:c9:18:97:
         98:03:8e:6f:36:9e:28:4c:e9:54:df:24:37:23:ba:15:1a:12:
         85:95:b4:22:67:f5:44:39:3f:ae:88:7d:a7:ee:6b:d4:14:28:
         2e:68:a5:93:8f:19:31:12:ac:7d:46:8b:9c:ab:4b:49:32:15:
         68:69:df:9e:56:23:45:27:99:37:e2:e7:3e:16:b8:8f:0a:43:
         3b:03:8b:57:7f:c5:ce:b5:19:18:11:07:08:95:0b:14:95:aa:
         c5:fa:06:23:17:ec:4e:71:ec:7c:f9:d4:c4:1b:3a:3f:4b:f1:
         12:84:7d:5b:5d:c1:73:d9:67:f0:e4:63:34:0f:23:6b:6c:c4:
         4e:dc:06:4a:ca:5e:2b:e6:37:e3:f6:d4:b2:66:d6:61:61:ea:
         39:21:1b:fc:76:ae:5e:21:bf:7c:db:1f:69:8f:53:37:89:28:
         4e:16:d3:a7:db:f3:71:f3:35:ad:ce:d4:2e:5b:ca:8a:73:4e:
         c4:67:c2:63:10:d6:37:f6:70:0e:7d:d0:56:0a:0b:c1:3f:9d:
         9c:7f:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----