Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File:                     21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier:          VwwDC3ZE/Rx8jeSMl/LTFAHDsR/FmqurLRrc0Sz9SeE=
Subject key identifier:   68:23:8F:D3:3E:8E:9C:37:B5:C6:1C:F4:05:69:04:01:B3:87:4B:8D
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer:       /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial:       781FD5EF95D33AA60331A7E97F057CFFF5341D93
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number:          CF
Signing time:             Sat 02 May 2026 21:51:47 +0000
Manifest this update:     Sat 02 May 2026 21:46:47 +0000
Manifest next update:     Mon 04 May 2026 00:20:47 +0000
Files and hashes:         1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa (hash: GOr6i79ogX9zrKCe8v7xdwWZZM6yOHiP597IK1UFVgk=)
                          2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: VewrCpULhXX0pz66GRKNGXldQYmz0Km5D2v93hKy9WY=)
                          3: 326131343a373538303a6163613a3a2f34382d3438203d3e203438323636.roa (hash: m0JZIjGPbuRcNff74X1PNepaT8iUZ69LeXHnRPJt/AQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:d5:ef:95:d3:3a:a6:03:31:a7:e9:7f:05:7c:ff:f5:34:1d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
        Validity
            Not Before: May  2 21:46:47 2026 GMT
            Not After : May  4 00:20:47 2026 GMT
        Subject: CN=68238FD33E8E9C37B5C61CF405690401B3874B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:a0:87:2e:fd:7a:aa:16:d1:47:a4:2b:ea:
                    f2:c8:4e:af:82:58:65:bc:66:8d:95:45:7f:0d:b2:
                    6e:14:89:63:94:bf:e5:b0:b8:cb:38:20:ba:0e:a3:
                    e3:ac:6f:44:63:ba:cd:a4:0c:eb:48:94:8c:6a:71:
                    f3:83:1a:d2:8a:37:ee:f8:00:fb:21:6d:bb:f2:71:
                    07:db:0b:40:f7:7f:5b:0d:67:6d:3d:b5:75:18:9c:
                    8f:7f:17:63:b3:2d:2e:6d:3e:9e:f8:7c:00:3f:3f:
                    b0:38:c0:1b:c4:d9:0c:04:10:aa:d9:bd:ad:f6:aa:
                    26:eb:40:72:d2:ee:73:d3:c5:da:e4:84:46:f5:01:
                    36:9f:ba:b8:8f:4a:66:9b:91:bf:2a:a8:dc:0c:e5:
                    58:22:bb:b2:cf:a3:23:7c:2e:05:c3:bf:c4:40:6b:
                    5f:8c:73:bb:bb:ef:a5:41:86:e7:0a:de:16:94:96:
                    38:e3:ff:c7:52:72:6a:e2:9e:80:e8:58:7e:0c:78:
                    52:4f:4b:d7:89:fa:25:b2:ad:94:8f:5e:8f:12:92:
                    2c:ae:df:d7:f0:2b:93:01:7c:31:70:52:a7:04:86:
                    ab:96:21:b5:37:97:8a:ee:e7:8b:93:a0:88:50:18:
                    3f:c5:e9:a0:ed:7e:f4:ca:df:9f:69:44:f2:4f:54:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:23:8F:D3:3E:8E:9C:37:B5:C6:1C:F4:05:69:04:01:B3:87:4B:8D
            X509v3 Authority Key Identifier:
                keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:56:80:36:11:fc:3f:1c:73:a5:2c:84:86:f7:66:91:fc:
         bc:2d:e2:da:3c:15:fa:3d:2e:b0:f4:27:1e:34:c6:13:49:b6:
         27:11:9d:53:ec:b3:d3:10:06:a4:6a:4b:87:97:eb:bc:cb:4e:
         03:11:d5:be:8d:22:8e:28:22:bb:cd:c9:61:5e:d0:81:d1:6d:
         b1:eb:c0:a5:ba:c7:63:b7:90:59:c0:46:16:72:63:b1:d4:57:
         30:18:9e:4c:27:4a:db:76:6d:0c:7c:41:26:96:c7:18:b0:fc:
         b8:88:65:a5:96:be:f5:53:eb:9e:0d:7b:ab:4d:87:95:40:0e:
         ee:91:d6:cb:86:97:3d:25:dc:66:bc:dd:c3:cf:08:34:e5:a9:
         bf:4c:ad:37:dc:77:c0:05:4d:65:ef:ce:90:bb:d5:c0:6f:3f:
         41:49:7e:42:60:b4:f3:4d:66:8b:51:93:d5:cd:b2:79:cf:c1:
         ad:f9:21:a1:d6:3a:db:68:c0:f2:c6:91:18:86:c5:0e:36:47:
         9b:6e:06:68:a9:05:82:1a:7e:c5:61:53:35:61:22:a9:23:9f:
         e3:8c:9a:9f:b8:4a:ee:9b:6b:c4:a5:ab:d3:a8:18:e3:b0:43:
         16:74:6f:0e:ef:67:18:d5:46:cd:af:b9:cf:89:0f:52:82:fc:
         e6:a9:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----