Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File:                     5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier:          fIhRVcBn++TF6BjWQ9iY3fysfAYSCKTANg4LnCB+oLY=
Subject key identifier:   77:60:EF:C7:AF:9C:A7:81:8C:B5:6D:8E:72:8E:E7:79:E3:DD:D3:4F
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer:       /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial:       4591F72B59A9BD2B840B2388C86FF00478A0EFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number:          0294
Signing time:             Sun 15 Mar 2026 14:49:24 +0000
Manifest this update:     Sun 15 Mar 2026 14:44:24 +0000
Manifest next update:     Mon 16 Mar 2026 18:37:24 +0000
Files and hashes:         1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: 7Hk1iKn9BXeY0GwCJVnjxDkhzC1BTUwjrgvBHMUW5R4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:91:f7:2b:59:a9:bd:2b:84:0b:23:88:c8:6f:f0:04:78:a0:ef:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
        Validity
            Not Before: Mar 15 14:44:24 2026 GMT
            Not After : Mar 16 18:37:24 2026 GMT
        Subject: CN=7760EFC7AF9CA7818CB56D8E728EE779E3DDD34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:c1:0f:62:b0:3d:f7:12:46:bc:71:21:37:
                    a1:02:b5:27:69:52:fa:31:1a:19:9a:82:aa:a6:28:
                    77:16:df:0e:b7:1f:29:f6:b5:26:e0:7f:f5:80:30:
                    cd:dc:c7:9b:dd:22:4f:17:c5:b5:18:1e:3a:7d:31:
                    a5:6b:cc:4d:12:34:5a:f0:c2:fb:bc:23:52:10:12:
                    f7:29:c2:df:df:a7:05:4c:6a:62:a2:c3:86:19:95:
                    20:59:2a:57:cb:59:14:00:2c:12:87:f7:f8:f8:34:
                    eb:2d:7d:2d:c9:37:44:86:56:49:d1:a2:47:c2:12:
                    c8:4e:5d:c1:35:be:19:b7:02:ed:f2:29:ca:5a:fa:
                    97:ef:55:f9:f8:26:d8:fa:0d:91:55:73:3d:af:c3:
                    b3:d2:bf:07:f7:73:6e:7e:ac:aa:0f:fb:b2:83:f1:
                    e1:09:13:96:0d:67:ec:6d:98:28:6c:6e:a4:5e:49:
                    4f:e5:36:98:99:60:67:47:5b:e7:ca:40:66:15:dc:
                    5f:f2:07:c4:f7:9b:10:48:c2:04:04:5d:31:5b:89:
                    9a:0c:a6:dd:80:e6:f7:12:df:87:86:70:0d:f5:2d:
                    8e:5d:36:9a:90:67:2a:d6:a3:14:63:8c:4f:3a:ad:
                    e6:64:32:a8:44:85:f5:5b:0b:20:75:ef:01:2e:56:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:60:EF:C7:AF:9C:A7:81:8C:B5:6D:8E:72:8E:E7:79:E3:DD:D3:4F
            X509v3 Authority Key Identifier:
                keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:1f:13:43:46:23:e5:5d:8c:ca:01:50:49:e2:86:39:c2:
         b8:e6:5f:b4:17:68:0a:35:c0:92:01:a8:88:59:0f:b0:49:86:
         88:4b:6a:9b:39:b8:2c:82:55:37:f4:44:a9:20:53:e8:72:6b:
         24:80:a8:25:c6:c1:14:3b:52:ab:40:b9:a4:2d:5a:5e:27:b1:
         cc:e0:c7:8c:8f:ed:c8:f2:f7:0a:da:f8:b6:b9:17:01:90:74:
         50:ec:80:f6:d3:88:df:20:08:7c:9d:ce:43:83:0a:27:5f:3a:
         49:1a:8b:5e:bd:fc:cb:d4:a6:ea:00:50:06:f3:f6:e9:12:f4:
         2e:02:de:ed:6e:48:bc:57:67:ed:8c:1a:b4:26:89:3c:a0:a9:
         ac:8e:84:2c:50:f9:e3:fb:36:d5:a3:13:42:01:9a:db:81:54:
         25:64:69:61:06:34:24:ba:1c:41:78:4e:2f:b7:1b:a3:8e:9e:
         a6:10:c9:5f:56:f6:e0:c0:64:d5:93:96:b4:0b:e0:00:bd:ae:
         75:33:67:1d:ef:e5:4e:8c:b6:36:e7:44:45:ef:ee:33:b7:17:
         f5:26:29:58:fb:2f:3c:ed:ad:2b:3b:c9:c0:09:4b:00:f3:35:
         20:3f:43:f0:11:fd:6a:be:5f:57:23:30:85:7c:f9:10:f8:4a:
         1a:62:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:16 2026 by rpki-client