Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
File:                     0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json)
Hash identifier:          94skAacTUkhJY+H6Q/DbTyAVYQCvFdEbmhP5NmGfW+s=
Subject key identifier:   65:DD:A7:84:30:87:AA:60:56:29:46:67:67:6E:D0:C7:CA:DD:C4:91
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       24F7A511E48E3CF9A9D36759AB5C9CD6175AEF58
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
Manifest number:          0173
Signing time:             Wed 22 Apr 2026 09:28:02 +0000
Manifest this update:     Wed 22 Apr 2026 09:23:02 +0000
Manifest next update:     Thu 23 Apr 2026 10:07:02 +0000
Files and hashes:         1: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: y3zP/Zrnh1MtEPEvkz3BLt6wuQEO20bJKnHwqILb/n4=)
                          2: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: Em5jZEM0Z1oJ1UofjCQGnCq9Pql9aI7sK4Y5UkTysUg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f7:a5:11:e4:8e:3c:f9:a9:d3:67:59:ab:5c:9c:d6:17:5a:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: Apr 22 09:23:02 2026 GMT
            Not After : Apr 23 10:07:02 2026 GMT
        Subject: CN=65DDA7843087AA6056294667676ED0C7CADDC491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:76:69:d5:1b:88:45:d6:4e:71:d7:57:6a:
                    68:d5:df:cf:06:b7:71:4f:28:1e:f4:60:63:3b:1c:
                    1a:06:82:5c:97:92:db:b6:93:1d:87:91:7b:50:d6:
                    cd:79:af:10:80:14:65:c2:a0:13:52:c5:4f:5b:0f:
                    23:d1:53:34:89:e4:0e:0b:88:5b:3f:3e:d3:ae:66:
                    6e:7a:4d:9a:46:b8:66:24:c5:cc:ce:04:f0:73:1f:
                    cd:69:06:18:2b:65:69:04:21:99:f5:4f:85:29:d6:
                    71:ea:9f:84:09:ff:5c:ca:a7:6a:70:05:92:48:18:
                    6e:f7:64:c9:62:bc:7b:63:52:d6:cc:56:fd:d1:3c:
                    18:cc:99:a0:c6:56:ed:9e:f5:9c:54:34:50:2a:05:
                    fe:d0:e0:61:fe:3a:30:7b:22:8e:fc:bd:e4:71:ae:
                    c8:86:08:ec:26:1e:40:e1:d4:0f:57:0c:29:4e:d0:
                    e3:e4:d0:cb:ab:a4:5b:3c:3a:7f:fe:48:b6:51:d0:
                    65:f5:b5:ba:c3:6b:bb:4a:ca:e1:14:da:93:70:52:
                    11:87:dc:55:7e:c3:9d:e9:3e:a9:c1:62:c0:14:37:
                    88:c6:4b:71:c3:66:78:a5:d1:45:01:b5:ac:f6:2d:
                    a7:8e:f6:8f:f3:1a:6d:f3:25:68:b8:d0:72:58:67:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:A7:84:30:87:AA:60:56:29:46:67:67:6E:D0:C7:CA:DD:C4:91
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:04:8e:66:fb:73:b8:3e:bd:8b:b3:44:a4:c6:6d:87:9b:8d:
         46:57:8c:72:9b:41:ee:0c:11:2a:44:f8:a9:40:38:fc:f0:03:
         4b:bd:79:af:80:04:bf:45:0f:e5:7f:0c:22:b7:c4:b2:a3:b5:
         ea:82:49:4c:da:8b:ad:db:62:76:5f:a9:78:db:1a:3b:40:e0:
         c2:05:9f:57:04:13:ed:f1:9a:05:c4:70:d9:00:16:b3:b5:84:
         53:dc:a9:8a:6b:58:0c:d1:56:51:89:c9:52:51:4a:ba:f4:ec:
         ba:59:4e:57:00:47:df:29:a6:59:e5:ed:02:74:6d:d3:b4:87:
         9c:24:71:d7:e4:ef:40:34:c4:26:68:6b:89:11:22:df:46:e1:
         7c:47:82:10:23:f9:57:02:d8:b0:7e:02:87:d4:97:f9:46:07:
         93:fd:e5:16:0e:41:e1:bf:23:84:d7:a5:5c:f5:ee:68:38:bf:
         aa:bd:98:d5:ae:5c:f3:6e:f3:56:33:6d:4d:14:3f:b4:d7:67:
         90:45:2c:70:be:68:37:9f:4a:f0:3c:1a:2c:dc:ea:2e:55:ec:
         69:31:54:d2:92:52:be:1e:06:8d:4c:2f:a7:56:5e:6f:ca:f0:
         83:e2:56:03:ae:a6:60:af:58:fa:bb:ee:32:ac:f5:f5:b8:a7:
         2d:66:fd:4d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUJPelEeSOPPmp02dZq1yc1hda71gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3
OEU5RjM5QjAeFw0yNjA0MjIwOTIzMDJaFw0yNjA0MjMxMDA3MDJaMDMxMTAvBgNV
BAMTKDY1RERBNzg0MzA4N0FBNjA1NjI5NDY2NzY3NkVEMEM3Q0FEREM0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+3Zp1RuIRdZOcddXamjV388G
t3FPKB70YGM7HBoGglyXktu2kx2HkXtQ1s15rxCAFGXCoBNSxU9bDyPRUzSJ5A4L
iFs/PtOuZm56TZpGuGYkxczOBPBzH81pBhgrZWkEIZn1T4Up1nHqn4QJ/1zKp2pw
BZJIGG73ZMlivHtjUtbMVv3RPBjMmaDGVu2e9ZxUNFAqBf7Q4GH+OjB7Io78veRx
rsiGCOwmHkDh1A9XDClO0OPk0MurpFs8On/+SLZR0GX1tbrDa7tKyuEU2pNwUhGH
3FV+w53pPqnBYsAUN4jGS3HDZnil0UUBtaz2LaeO9o/zGm3zJWi40HJYZ3AlAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUZd2nhDCHqmBWKUZnZ27Qx8rdxJEwHwYDVR0j
BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5
MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE
MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx
NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfBI5m
+3O4Pr2Ls0Skxm2Hm41GV4xym0HuDBEqRPipQDj88ANLvXmvgAS/RQ/lfwwit8Sy
o7XqgklM2out22J2X6l42xo7QODCBZ9XBBPt8ZoFxHDZABaztYRT3KmKa1gM0VZR
iclSUUq69Oy6WU5XAEffKaZZ5e0CdG3TtIecJHHX5O9ANMQmaGuJESLfRuF8R4IQ
I/lXAtiwfgKH1Jf5RgeT/eUWDkHhvyOE16Vc9e5oOL+qvZjVrlzzbvNWM21NFD+0
12eQRSxwvmg3n0rwPBos3OouVexpMVTSklK+HgaNTC+nVl5vyvCD4lYDrqZgr1j6
u+4yrPX1uKctZv1N
-----END CERTIFICATE-----