Manifest

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          9XaZ/vM0RmntlMRUj+kHdRe9JPqTe5+Vum5ObEgHKH4=
Subject key identifier:   4D:1D:AB:82:5B:18:EA:D3:5A:0A:F7:66:B4:DE:EA:52:99:CA:1C:F8
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       505E956159762DE3970E23E6E92609958F25B29D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          048A
Signing time:             Sat 05 Sep 2026 04:18:23 +0000
Manifest this update:     Sat 05 Sep 2026 04:13:23 +0000
Manifest next update:     Sun 06 Sep 2026 07:50:23 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 9boHfucKTE1ahIcbrdEC9GTeXdh1SvwJewvvKKAT2nc=)
                          3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5e:95:61:59:76:2d:e3:97:0e:23:e6:e9:26:09:95:8f:25:b2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Sep  5 04:13:23 2026 GMT
            Not After : Sep  6 07:50:23 2026 GMT
        Subject: CN=4D1DAB825B18EAD35A0AF766B4DEEA5299CA1CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:75:db:29:99:5e:10:a4:46:b4:bf:66:7c:
                    bc:02:6a:0f:72:6a:e6:ca:1d:1f:18:ba:2b:1b:4a:
                    09:df:33:5e:f5:5d:0e:3f:8e:4d:d4:15:cb:50:cf:
                    12:7c:74:16:fd:24:4f:4f:97:0b:a6:c5:ef:63:52:
                    a5:2c:32:e3:89:1d:44:29:6b:aa:ca:18:47:32:d2:
                    79:74:7d:87:c7:3d:8a:73:d4:ca:77:bc:94:4b:5b:
                    58:3e:5b:5d:d7:56:49:68:52:4b:80:00:a7:57:2d:
                    9f:52:10:03:31:1e:79:ba:39:51:e0:12:db:e7:5a:
                    a8:cf:94:2c:32:e5:36:14:95:25:fd:7f:a3:8f:66:
                    fa:53:ad:35:89:31:54:ba:7b:e1:0f:1c:d5:92:bc:
                    37:a9:91:13:d6:ed:c3:bd:18:b1:43:c9:82:20:55:
                    64:30:f9:7b:c6:70:bd:a3:5b:b2:e3:97:59:9a:61:
                    c3:15:03:a9:6c:10:d4:53:86:36:ae:0c:a0:4d:5a:
                    69:9c:f3:55:bf:9f:ec:5d:0b:09:b4:8e:04:6b:21:
                    70:b6:18:69:c0:96:45:9a:0f:77:83:b2:76:7b:77:
                    4f:62:1f:6b:45:44:a9:78:d6:3e:5e:98:bc:3a:f7:
                    fb:f2:83:d5:51:8e:a6:38:d3:b4:76:40:f6:7b:b3:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1D:AB:82:5B:18:EA:D3:5A:0A:F7:66:B4:DE:EA:52:99:CA:1C:F8
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:f4:ea:84:87:37:ac:67:38:1e:30:10:e0:1d:82:55:d1:
         89:78:ff:65:4c:b9:aa:c3:2e:98:46:aa:e6:8e:9a:e9:20:e8:
         37:17:6d:3b:6c:12:44:05:51:3c:21:8b:83:76:33:d1:54:bc:
         88:76:1e:e9:31:e8:2d:f9:e2:76:2e:00:2c:3e:10:a0:d7:ee:
         d2:bd:08:22:0a:37:89:e6:1a:68:12:44:88:32:63:85:1a:0e:
         71:56:6c:b6:ea:ae:98:a4:21:35:7e:df:5e:78:4d:3a:24:da:
         88:e4:8d:8d:ab:ba:b2:cf:4f:c9:be:50:98:df:40:fa:46:24:
         1f:cc:be:31:89:64:2e:f3:b6:e1:db:83:ce:39:28:b4:65:ac:
         67:05:8a:98:21:86:f4:67:ce:05:40:ad:f9:4b:c2:72:59:77:
         a9:8e:e9:4a:f6:77:49:0a:47:ba:c6:41:ae:ac:6d:90:27:8c:
         eb:98:92:52:27:cd:6e:f8:a9:c8:7d:3b:61:6c:b8:f1:4d:d3:
         e1:03:4b:69:c9:99:d6:20:bd:35:55:70:61:ce:13:47:57:18:
         3f:aa:53:3a:c0:84:d1:66:3f:6e:14:68:e3:82:93:98:65:ef:
         5b:03:fa:c0:e7:78:be:b5:54:98:d3:ef:e5:df:cc:01:eb:99:
         5f:8d:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----