Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          OVCfYcq+Dz38UqMBQklJpgEKdSPaPhME1v+6nR53r1c=
Subject key identifier:   6B:B4:1D:BF:F9:01:F5:66:04:3B:E2:93:87:6D:97:22:E8:36:7D:E3
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       3F32CF47413A4E345F0192D634077633C72A0AEE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          62
Signing time:             Sun 28 Sep 2025 10:55:22 +0000
Manifest this update:     Sun 28 Sep 2025 10:50:22 +0000
Manifest next update:     Mon 29 Sep 2025 14:07:22 +0000
Files and hashes:         1: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=)
                          2: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=)
                          3: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: Pg7f/kQh3mZYy4kg3WGhybhSRzroP1+MWsnqYu/Plhw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:32:cf:47:41:3a:4e:34:5f:01:92:d6:34:07:76:33:c7:2a:0a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Sep 28 10:50:22 2025 GMT
            Not After : Sep 29 14:07:22 2025 GMT
        Subject: CN=6BB41DBFF901F566043BE293876D9722E8367DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:23:67:98:9f:e4:74:0a:da:ce:9a:ca:ed:
                    39:06:b0:7b:d3:40:bb:87:8f:99:7a:95:e3:44:f1:
                    63:af:09:33:ca:d7:76:0b:b9:30:4a:80:6b:c1:3b:
                    c8:29:aa:a7:84:36:e1:60:48:52:42:05:ee:46:e3:
                    ec:51:7b:53:0b:08:4f:16:6b:bf:f4:1f:5b:de:14:
                    fb:dd:b5:15:09:ae:bf:e8:c9:18:42:02:a7:33:88:
                    94:4e:fd:49:53:79:9d:df:c8:52:cc:63:58:f5:5b:
                    49:4d:7e:d0:3e:5b:90:7b:f5:5e:74:ee:10:08:c7:
                    2c:73:4e:d2:a9:2e:2a:07:8c:1d:2c:d9:1a:9c:32:
                    e6:46:36:ab:e3:54:9b:9f:0f:e3:e2:2f:f2:a5:d2:
                    23:3c:9e:ca:0b:71:6d:f4:49:54:6c:50:04:eb:ec:
                    11:b9:37:08:6d:6b:92:77:64:0d:0a:26:e9:e3:3c:
                    97:73:d6:09:df:f6:29:f7:37:0e:92:d7:73:84:f7:
                    b5:aa:a2:a8:f4:25:62:65:a1:f3:47:1a:07:5d:84:
                    b1:34:60:15:8a:8a:51:f4:b6:fb:3b:51:13:0a:b2:
                    c0:ff:a0:db:55:c6:fc:05:f3:32:b4:13:b0:0f:ef:
                    16:aa:4e:e7:6e:41:07:65:81:bf:01:1f:26:81:0e:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:1D:BF:F9:01:F5:66:04:3B:E2:93:87:6D:97:22:E8:36:7D:E3
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:9f:d9:b1:4b:f8:21:7c:63:70:15:3f:75:60:d2:df:c8:
         d4:27:33:3b:47:4f:b1:a5:5c:2f:7f:24:be:ea:2b:74:da:0d:
         dd:fe:ce:27:50:54:d0:96:c9:47:26:da:78:29:4b:38:c7:e1:
         8e:83:c0:c9:47:f7:6a:e0:97:9b:2e:ae:74:d5:d5:77:fb:30:
         ba:74:d0:e2:8c:ff:2a:c9:b7:e3:5c:49:17:e0:0d:3b:ac:9f:
         1c:ff:f5:4b:ba:8b:b3:da:22:3c:e2:60:5d:2b:14:4e:12:5b:
         53:ba:c2:c2:1c:10:85:7d:3e:32:16:a4:69:08:08:64:3e:5b:
         15:78:91:72:db:a3:b7:fe:1e:3a:36:81:c4:04:06:fa:2e:c3:
         b5:b1:e4:99:da:7a:ed:86:26:08:f9:99:b6:64:2b:5c:82:7f:
         c7:13:90:08:a7:03:dc:25:22:92:9d:65:75:3d:e9:a9:37:d9:
         ca:aa:54:d2:d4:1e:e6:42:6f:fd:3e:95:d5:f8:e3:4d:a8:d9:
         76:2c:46:21:09:b0:62:a7:ba:5f:0b:5a:9d:be:5a:de:57:47:
         ab:eb:88:eb:79:ee:15:41:8c:9b:2b:47:77:fb:ef:65:39:5a:
         44:1f:53:58:85:87:e1:6a:3b:e2:54:9e:55:30:0a:67:78:cc:
         14:cd:cc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----