Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File:                     52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier:          0nHjVo54GFvbnRco8go9zSefzTtFEsFZJH28mZpZjhQ=
Subject key identifier:   58:CD:4E:C2:87:DA:E9:B0:DA:92:24:F1:05:CA:DF:A5:BA:5C:DA:79
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer:       /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial:       10D160099ECB192F98B99E5F8DB9485214EDCBE8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number:          0205
Signing time:             Thu 18 Sep 2025 01:28:00 +0000
Manifest this update:     Thu 18 Sep 2025 01:23:00 +0000
Manifest next update:     Fri 19 Sep 2025 03:49:00 +0000
Files and hashes:         1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=)
                          2: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: YBmyye9dh/QtetnGodhD4t2KU6phEIHVyScrlZi3dlk=)
                          3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=)
                          4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=)
                          5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d1:60:09:9e:cb:19:2f:98:b9:9e:5f:8d:b9:48:52:14:ed:cb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
        Validity
            Not Before: Sep 18 01:23:00 2025 GMT
            Not After : Sep 19 03:49:00 2025 GMT
        Subject: CN=58CD4EC287DAE9B0DA9224F105CADFA5BA5CDA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:a3:53:76:f3:9b:6c:02:ed:80:9c:35:02:
                    7b:c2:47:7b:dc:e2:36:c2:33:27:67:cf:23:54:e8:
                    8f:34:15:37:93:3d:97:a0:8d:b2:7b:27:36:83:32:
                    4f:48:42:78:89:43:92:e5:b3:1f:e2:b7:8a:d4:33:
                    93:c5:f7:e7:cf:12:c3:cd:c9:ed:c1:5a:2e:06:ce:
                    91:0c:b0:49:33:7b:8c:72:4c:10:59:f1:83:77:8c:
                    c6:a8:e9:67:d9:44:5b:04:70:ea:c9:03:83:a4:94:
                    7e:55:d7:79:bf:f6:04:91:6a:19:7b:8f:9e:66:99:
                    6c:2a:58:7c:00:2f:1b:d5:28:d1:d9:e3:4b:65:94:
                    8b:f1:d6:4f:68:85:27:02:c7:22:a2:70:6d:8f:60:
                    e9:54:07:9f:74:0d:6e:e4:64:6d:77:c8:de:4e:1e:
                    11:76:0f:05:8e:40:fd:5a:44:7c:bb:a4:0c:a3:19:
                    36:c5:ec:69:d9:25:88:77:36:1f:7b:02:eb:a3:3f:
                    5b:19:15:db:3e:46:91:52:cb:b8:8c:36:4f:3c:5b:
                    4b:89:e9:9b:85:11:cb:1b:4b:cd:6f:2b:44:0f:98:
                    a5:53:5d:d4:4c:79:e8:e7:eb:60:83:25:26:65:6b:
                    94:52:fc:37:90:5c:65:ed:9b:54:d2:65:9b:75:e9:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:4E:C2:87:DA:E9:B0:DA:92:24:F1:05:CA:DF:A5:BA:5C:DA:79
            X509v3 Authority Key Identifier:
                keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:2a:1e:09:9d:e4:86:3d:52:8c:25:a9:0e:ff:3e:e8:a1:
         f6:8c:2c:21:92:b7:aa:80:26:10:3f:c8:ca:a7:ff:1c:eb:7f:
         5b:0f:5f:aa:a9:ac:0e:60:ac:6a:49:b4:9e:eb:d9:64:f7:94:
         c9:cb:ef:78:4f:fd:8d:02:8e:9e:e5:be:14:07:7c:55:ff:25:
         ad:22:08:0a:56:77:34:6e:89:39:39:d8:3b:49:5b:08:e4:16:
         56:61:3b:6e:62:8d:dd:83:5c:ed:2c:13:48:81:88:43:7e:3c:
         cd:8b:14:4f:19:44:b9:bf:bc:42:57:7b:4e:e3:44:e6:75:0a:
         4c:82:d3:f3:4d:6c:15:20:3e:83:67:79:c1:43:fe:cc:5d:59:
         55:b9:b2:65:7d:d2:5d:74:63:2f:1c:ce:62:88:83:b9:7c:b0:
         3e:2d:9a:18:23:e4:11:df:89:11:b5:42:61:e6:73:23:27:4f:
         65:f4:68:24:37:41:e6:8b:5a:79:0b:25:61:a8:40:8d:e0:66:
         cf:b1:1e:80:0a:99:b9:1a:a8:bb:a9:58:d0:4e:d3:e8:0d:db:
         9d:4f:e7:66:b7:8f:48:d0:e6:c2:6d:cd:b1:49:a3:73:e3:3a:
         d9:6c:9f:7c:b9:29:a4:01:69:9c:90:30:17:ad:9c:95:9c:22:
         84:2a:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:04 2025 by rpki-client